The Secure Edge: Daily Round-up of Infosec Blogs — Issue #55

THOUGHTS THAT MATTER:

Infosec Punch:

Iranian Hackers Exploit Log4j Vulnerability to Deploy PowerShell Backdoorthehackernews.com
Iranian nation-state hackers exploiting the Log4j vulnerability to deploy a new PowerShell-based framework called “CharmPower.”

Apple Releases iPhone and iPad Updates to Patch HomeKit DoS Vulnerabilitythehackernews.com
Apple releases the latest iOS and iPadOS 15.2.1 updates to patch a vulnerability found in HomeKit that allows DoS attacks.

SSTI (Server Side Template Injection) — HackTricksbook.hacktricks.xyz

GitHub — Xib3rR4dAr/WannaRace: WebApp intentionally made vulnerable to Race Condition for practicing Race Conditiongithub.com

WebApp intentionally made vulnerable to Race Condition for practicing Race Condition

swisskyrepo/PayloadsAllTheThings · GitHubgithub.com

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

WannaRace — WebApp Intentionally Made Vulnerable To Race Condition For Practicing Race Conditionwww.kitploit.com
WebApp intentionally made vulnerable to Race Condition Description Race Condition vulnerability can be practiced in the developed WebAp…

Past Issues:

The Secure Edge: Daily Round-up of Infosec Blogs — Issue #54 | Revuewww.getrevue.co
The Secure Edge: Daily Round-up of Infosec Blogs — Hola!!! Here is your fresh Today’s Newsletter packed with tons of informative things to keep you updated in th

The Secure Edge: Daily Round-up of Infosec Blogs — Issue #53 | Revuewww.getrevue.co
The Secure Edge: Daily Round-up of Infosec Blogs — Hola!!! Here is your refreshed Today’s Newsletter filled with bunches of informative items to keep you updated

Twitter Tadka:

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store