Sabin Ranjit

Cybersecurity / DevOps / Trekking / Music / 🍻 ;)

[Salik Shah ✨🚀 @salik]

LK-99. There's nerve-wracking silence as scientists are busy trying to replicate the research in their labs.

So, what do we know so far?

LK-99 is most likely to be legit — from what @sanxiyn has shared so far, that's my reading.

But we won't know for sure until we hear back from teams of scientists trying to replicate the research — like @andrewmccalip.

The researchers, led by Lee and Kim, began their quest over 20 years ago to build a room-temperature superconductor. Their journey hasn't been easy — to say the least.

If validated, LK-99 will change how we generate, transmit, and use energy. It could also lead to developing new and more powerful medical devices, faster trains, and quantum computers.

Following @altryne for the unfolding saga, and the LK-99 list: https://t.co/bmKN4eHMAU

Stay calm.

PS. Someone visited the Quantum Energy Research Center
https://t.co/HDh6PlLxgh

[Cyber Detective💙💛 @cyb_detective]

Famous Irish investigator @osintme compiled a list of 100+ hacker, cracker, carder & cyber criminal forums.

It comes in handy when investigating cybersecurity incidents, as well as just for educational purposes.

https://t.co/ckd6kA40mW

#osint #cybersecurity

[Ryan Basden @_rybaz]

Hacking resources that are free but are worth thousands:

[AppSecEngineer @AppSecEngineer]

Learning AWS Security?

You should know these underrated security practices:

🧵

#aws #appsec #cloudsecurity #awsevents @aws

[Clint Gibler @clintgibler]

🐐 CI/CD Goat

A deliberately vulnerable CI/CD environment

Learn and practice CI/CD security through a set of 10 challenges, enacted against a real, full blown CI/CD environment

By @cider_sec

#appsec #pentesting

https://t.co/7LNu6htIen

[Scott Piper @0xdabbad00]

😱😱😱 This is worse than ChaosDB for AWS. @orcasec gained access to all AWS resources in all AWS accounts! They accessed the AWS internal CloudFormation service.
https://t.co/2oCCRvo389
Separately, they did something similar for Glue.
https://t.co/BDFMLQI06B

[The Application Security Podcast @AppSecPodcast]

Are you ready to dive into the Analyzing and Mitigating phases of threat modeling? If so, be sure to register for @SecurityJourney's LIVE STREAMED event! https://t.co/QsRD1hUpvp

#SecurityJourney #ThreatModeling #ThreatModel #AppSec #CyberSecurity

[Nicolas Krassas @Dinosn]

GC2 - A Command And Control Application That Allows An Attacker To Execute Commands On The Target Machine Using Google Sheet And Exfiltrate Data Using Google Drive https://t.co/saOIh866P8

[Detectify @detectify]

Have you heard of these 10 obscure web vulnerabilities? @Farah_Hawaa and @hakluke share the top web vulnerabilities that are often missed during security testing. https://t.co/mo6qy3aEs6

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

We’re happy to announce the availability of the CycloneDX Learning Series. The series of short-form content provides an easy path to explore and learn the CycloneDX SBOM standard.

4 episodes available today. 30+ episodes total.

https://t.co/rGeR0M04Oj

#SBOM #OWASP

[RET2 Systems @ret2systems]

All Your Base Are [Still] Belong To Us: Fuzzing Modern UDP Game Protocols With Snapshot-based Fuzzers https://t.co/QzznS7GU5p

[John Wilander 🇺🇦 @johnwilander]

“This is due to a flaw in the git_diff dependency (…) which is used to parse a pull request’s diff for inspection. Due to this flaw, the parser can be spoofed into completely ignoring the offending lines, resulting in successfully approving a malicious pull request.”

[OWASP Cambridge UK @OwaspCambs]

Join us for our webinar @owaspcambs @ARUCyberRes @BCSForensics Thu 6 May 6 - 7.30 pm @AngliaRuskin @aru_se #Cambridge

@ChrFolini @OWASP @Modsecurity @CoreRuleSet Project Leader & Netnea SeC Engineer will be talking about “OWASP ModSecurity CRS Project”

https://t.co/g2CDutF2wM

[Salik Shah ✨🚀 @salik]

So proud #dai moment! Please RT and help spread the word. Thanks a ton!

@mintable_app #nfts #nftart #cryptoart #nftcollectors #nftcollector #ethereum #bitcoin #crypto

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

CycloneDX is an #opensource, security focused #SBOM standard with origins in the #OWASP community.

To get started, visit https://t.co/Dn2IXqebwq for examples, use cases, and a rapidly expanding directory of open source and proprietary tools that support the standard.

[OWASP Cambridge UK @OwaspCambs]

Join us for our next joint webinar @owaspcambs @ARUCyberRes @BCSForensics Tues 20th Apr 5.30-7pm @AngliaRuskin @aru_se #Cambridge

Stuart Clarke CTO, @Nuix talking about "Wildlife #Cybercrime Investigations using Open Source Data”

To register visit:  https://t.co/XQeSAojFeP

[Dependency-Track @DependencyTrack]

#OWASP Dependency-Track v4.2.0 now available and includes support for services (APIs, etc) in #CycloneDX #SBOM, interactive dependency graphs, and much more.

Changelog:
https://t.co/xx7H4dQd3u

Website:
https://t.co/mndsoz1O1T

#SoftwareSupplyChain

[Sabin Ranjit @thinksabin]

https://t.co/kwwmx4gx7N via @Amr_Thabet

[Mark Manning @antitree]

Istio vulnerability with an 8.2 CVSS. They're calling it a 0day. Also a lesson in JWT validation mistakes.

> If a JWT token is presented with an issuer that does not match the issuer field specified in JwtProvider, then the request is mistakenly accepted

https://t.co/Hrd06hgyMD

[Blue Team Labs Online @BlueLabsOnline]

💰GIVEAWAY!💰 From forensics to hunting, incident response to security ops, are you ready for our labs?

🥇= 6 Months PRO
🥈= 3 Months PRO
🥉= 1 Month PRO

1)👋 Follow Us
2)🔄 Retweet This
3)📢 Winners Announced @ Launch

#dfir #blueteam #soc #infosec #cybersecurity #labs