Ukraine spends under $30K to destroy multiple $2M Russian tanks
A new SOFREP article, which reminds me of US anti-tank innovations in the 1980s Toyota War, offers us some plain numbers to explain why Russian tanks are being so easily…
The current state of zero trust. [CyberWire-X]
According to the zero trust philosophy, we all assume that our networks are already compromised and try to design them to limit the damage if it turns out to be…
Eric Escobar: Collaboration is key. [Pen tester] [Career Notes]
Principal consultant and pen tester at Secureworks, Eric Escobar, shares his career path translating his childhood favorite Legos to civil engineering and pivoting to cybersecurity. Eric was always headed toward engineering…
Vulnerabilities in IoT devices. [Research Saturday]
Dr. May Wang, Chief Technology Officer at Palo Alto Networks, joins Dave Bittner to discuss their findings detailed in Unit 42’s “Know Your Infusion Pump Vulnerabilities and Secure Your Healthcare…
wazuh v4.3.1 RC1 releases: Host and endpoint security
Wazuh Wazuh helps you to gain deeper security visibility into your infrastructure by monitoring hosts at an operating system and application level. This solution, based on lightweight multi-platform agents, provides…
certgraph v20220513 releases: crawl the graph of certificate Alternate Names
CertGraph A tool to crawl the graph of certificate Alternate Names CertGraph crawls SSL certificates creating a directed graph where each domain is a node and the certificate alternative names…
semgrep v0.92.1 releases: Fast and syntax-aware semantic code pattern search
Semgrep Semgrep is a command-line tool for offline static analysis. Use pre-built or custom rules to enforce code and security standards in your codebase. You can try it now with our interactive live…
fastnetmon v1.2.1 releases: very fast DDoS analyzer
FastNetMon – A high-performance DoS/DDoS load analyzer built on top of multiple packet capture engines (NetFlow, IPFIX, sFLOW, SnabbSwitch, netmap, PF_RING, PCAP). What can we do? We can detect hosts…
Mondoo v5.38.3 releases: Cloud-Native Security & Vulnerability Risk Management
Mondoo Mondoo is a natural language query system for scanning, deploying, and remediating your cloud-native applications. Feature Insights into your fleet Ask questions about your deployments and get answers. Simple…
Malcolm v6.0 releases: powerful, easily deployable network traffic analysis tool
Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture…