AppSec Newsletter 0039

Café Seguro - Typo Squatting e C2 via Blockchain

Links

• https://github.com/ossf/package-analysis: The Package Analysis project analyses the capabilities of packages available on open source repositories.

• s1r1us blog: a nice security blog =)

• Hacking Discord for $5000 Bounty: A video of Mrgavyadha explaing a bug report in Discord BBP.

• Chainguard Images: Build secure applications on a foundation of minimal, hardened container images to protect against vulnerabilities and attacks.

• CVE-2024-39025 by cnetsec: Vulnerability in LettaAI

• Shock News: SHA-256, ECDH, ECDSA and RSA Not Approved by ASD in Australia for 2030 by Prof Bill Buchanan

• OWASP SAMM v2.1.0 Core: New version of SAMM

• XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

• 3 DevSecOps success stories by Michael Nadeau and Dan Swinhoe

Siga o Guia de AppSec nas redes!

• Youtube: youtube.com/@GuiadeAppSec

• Twitter / X: twitter.com/guiadeappsec

• Site: guiadeappsec.com.br