AppSec is fine

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Sam Curry and friends hack the planet, including a remote hack of millions of cars

   Other targets consist of scooters, routers, domain providers, and more.

   Watch : Sam Curry and friends hack the planet, including a remote hack of millions of cars
2. /02

   Docker Security: Step-by-Step Hardening guide

   This article provides practical recommendations for configuring Docker platform aimed at increasing its security. It also suggests tools helpful in the automation of some tasks related to securing Docker.

   Read : Docker Security: Step-by-Step Hardening guide
3. /03

   Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762

   The exploit described in this post is tailored to the exact version of FortiGate SSL VPN used for testing.

   Read : Two Bytes is Plenty: FortiGate RCE with CVE-2024-21762
4. /04

   AppSec is fine

   We're not paying enough attention to corporate infrastructure risks: "The purported basics — meaningful asset inventories, privilege reduction, comprehensive access control — are unsolved problems."

   Read : AppSec is fine
5. /05

   You can not simply publicly access private secure links, can you?

   Popular malware/url analysis tools store a large number of links for intelligence gathering and sharing. But, did you also know they store private and sensitive links?

   Read : You can not simply publicly access private secure links, can you?