Seclog - #123

"All cyber battles are won before they are fought; prepare your code as you prepare your troops." - The Art of Cyber War

📰 SecLinks

• GCP Cloud Configuration Review Templates - Nuclei Templates v10.2.0 🎉 — ProjectDiscovery Blog - Read More

• Active Exploitation of SAP CVE-2025-31324 Zero-Day | Onapsis - Read More

• Threat Modelling Cloud Service Providers in 2025 - Chris Farris - Read More

• The curious case of the evt parameter - The Spanner - Read More

• Making the Unexploitable Exploitable with X-Mixed-Replace on Firefox - The Spanner - Read More

• Android Improves Its Security - Schneier on Security - Read More

• CVE-2025-3248: RCE vulnerability in Langflow | ThreatLabz - Read More

• Research finds 12,000 ‘Live’ API Keys and Passwords in DeepSeek's Training Data ◆ Truffle Security Co. - Read More

• How I made $64k from deleted files — a bug bounty story | by Sharon Brizinov | Apr, 2025 | Medium - Read More

• Everyone knows your location, Part 2: try it yourself and share the results - Read More

• Repello AI - MCP tool poisoning to RCE - Read More

• How I Used AI to Create a Working Exploit for CVE-2025-32433 Before Public PoCs Existed | Platform Security Blog - Read More

• Getting RCE on browser-use/web-ui AI Agent Instances – Kudelski Security Research - Read More

• When /etc/h*sts Breaks Your Substack Editor: An Adventure in Web Content Filtering - Read More

• The Jailbroken Unitree Robot Dog | DARKNAVY - Read More

• io_uring Rootkit Bypasses Linux Security Tools - ARMO - Read More

  • New Linux Rootkit - Schneier on Security - Read More

🎥 SecVideo

• How NSA Can Spy on Air-Gapped Networks? Meet FIREWALK Watch Here

• ProjectDiscovery v1.2 | New Template Editor, host view and many more Watch Here

💻 SecGit

• LukasOgunfeitimi/TikTok-ReverseEngineering Explore on GitHub

• armosec/curing: io_uring based rootkit Explore on GitHub

• ccbrown/cloud-snitch: Map visualization and firewall for AWS activity, inspired by Little Snitch for macOS. Explore on GitHub

• jopohl/urh: Universal Radio Hacker: Investigate Wireless Protocols Like A Boss Explore on GitHub

• mubix/redteam-collab: Red Team Collaboration Infrastructure Explore on GitHub

• likvidera/GhidraChatGPT: Brings the power of ChatGPT to Ghidra! Explore on GitHub

• atiilla/sqlmap-ai: This script automates SQL injection testing using SQLMap with AI-powered decision making. Explore on GitHub

For suggestions and any feedback, please contact: securify@rosecurify.com