Mediocre security engineers and Empathy as a Service

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Bug Bounty Redacted #5 - Second Order Subdomain Takeovers & Logic Bug DoS

   Watch : Bug Bounty Redacted #5 - Second Order Subdomain Takeovers & Logic Bug DoS
2. /02

   BSidesSF 2022 - Keynote - We Need More Mediocre Security Engineers (Jackie Bow)

   The field of information security remains one of the most isolated - and at times, elitist - bastions in tech. We self-impose the highest cost of entry - be extraordinary or get out.

   Watch : BSidesSF 2022 - Keynote - We Need More Mediocre Security Engineers (Jackie Bow)
3. /03

   Exploiting Arbitrary Object Instantiations in PHP without Custom Classes

   During an internal penetration test, they discovered an unauthenticated Arbitrary Object Instantiation vulnerability in LAM (LDAP Account Manager), a PHP application. PHP’s Arbitrary Object Instantiation is a flaw in which an attacker can create arbitrary objects.

   Read : Exploiting Arbitrary Object Instantiations in PHP without Custom Classes
4. /04

   Diana Initiative 2020 - Tracy Z. Maleeff - Empathy as a Service to Create a Culture of Security

   So-called "soft skills" are greatly undervalued in the Information Security industry. The very core of security involves humans.

   Watch : Diana Initiative 2020 - Tracy Z. Maleeff - Empathy as a Service to Create a Culture of Security
5. /05

   988 Suicide & Crisis Lifeline

   A historical day for suicide prevention & mental health in the U.S.! The National Suicide Prevention Lifeline, now known as the 988 Suicide & Crisis Lifeline, can be more easily reached by calling or texting 988, or chatting on https://988lifeline.org/. Jen Easterly shared her own personal story last year.

   Read : 988 Suicide & Crisis Lifeline