#security - November 2019 | Slack Archive

security

22 messages

Archive: https://archive.sweetops.com/security/

Oct 2019

November 2019

Dec 2019

Maciek Strömichover 6 years ago

https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_31.html

Maciek Strömichover 6 years ago

update your chromes/chromium based browser asap

Igorover 6 years ago(edited)

PSA Major vulnerability in SimpleSamlPHP/XMLSecLibs XML signature validation, if anyone uses it

Maciek Strömichover 6 years ago

https://www.aisec.fraunhofer.de/en/stackoverflow.html

davidvasandaniover 6 years ago

Has https://github.com/toniblyx/prowler come up in this channel before? Has anyone tried it?

btaiover 6 years ago

@davidvasandani just used it for my soc2 audit

davidvasandaniover 6 years ago

Whoa! How'd it go?

Erik Osterman (Cloud Posse)over 6 years ago

Looks amazing. Thanks for sharing.

Erik Osterman (Cloud Posse)over 6 years ago

https://cloud.githubusercontent.com/assets/3985464/18489640/50fe6824-79cc-11e6-8a9c-e788b88a8a6b.png

Erik Osterman (Cloud Posse)over 6 years ago

https://cloud.githubusercontent.com/assets/3985464/18522590/a04ca9a6-7a7e-11e6-8730-b545c9204990.png

Erik Osterman (Cloud Posse)over 6 years ago

@lvh ☝️

chrismover 6 years ago

We run it nightly; its pretty handy.

lvhover 6 years ago

Yeah prowlers’ best, we also run ScoutSuite. Prowler does a better job of mapping to controls.

Erik Osterman (Cloud Posse)over 6 years ago

https://news.google.com/articles/CBMiQGh0dHBzOi8vdGVjaGNydW5jaC5jb20vMjAxOS8xMS8xMi9pbnRlbC1jYXNjYWRlLWxha2Utem9tYmllbG9hZC_SAURodHRwczovL3RlY2hjcnVuY2guY29tLzIwMTkvMTEvMTIvaW50ZWwtY2FzY2FkZS1sYWtlLXpvbWJpZWxvYWQvYW1wLw?hl=en-US&gl=US&ceid=US%3Aen

Erik Osterman (Cloud Posse)over 6 years ago

https://twitter.com/troyhunt/status/1194436182614011904?s=21

Erik Osterman (Cloud Posse)over 6 years ago

🤦

chrismover 6 years ago

one way to pay for the processing time of hashing 😆

Erik Osterman (Cloud Posse)over 6 years ago

https://www.checkmarx.com/blog/how-attackers-could-hijack-your-android-camera

Erik Osterman (Cloud Posse)over 6 years ago

https://news.google.com/articles/CAIiEAPE6nsm5oi1WUA6dsZDaRAqFQgEKg0IACoGCAowrqkBMKBFMMGBAg?hl=en-US&gl=US&ceid=US%3Aen

endofcakeover 6 years ago

https://slack.engineering/introducing-nebula-the-open-source-global-overlay-network-from-slack-884110a5579?gi=4d57d57a7b17

Maciek Strömichabout 6 years ago

https://unit42.paloaltonetworks.com/docker-patched-the-most-severe-copy-vulnerability-to-date-with-cve-2019-14271/

Erik Osterman (Cloud Posse)about 6 years ago

https://blog.cloudflare.com/introducing-flan-scan/

October 2019 Browse by date December 2019