Seclog - #125

A single unpatched vulnerability can bring down even the most fortified network. - The Art of Cyber War

📚 SecMisc

• SEC Homepage – Security education resources for K–12 teachers. Read More

• The Cloud Hunting Games CTF – Cloud-focused Capture The Flag platform. Read More

📰 SecLinks

• What Happened To WWW.? – A dive into how and why the “www.” prefix disappeared. Read More

• A First Glimpse of the Starlink User Ternimal – An early look at the Starlink terminal. Read More

• 5 MCP Security Tips – Guidance on managing Microsoft Cloud security. Read More

• CVE-2024-10095: Telerik UI RCE – Deserialization vulnerability in Telerik UI. Read More

• Passkeys for Normal People – A beginner’s guide to passkeys. Read More

• Multiple Rundeck RCEs – Command injection vulnerabilities in Rundeck. Read More

• Unofficial Signal App Used by Officials – TM SGNL used for sensitive communication. Read More

• Bug Bounty Etiquette – Principles for respectful bug bounty submissions. Read More

🎥 SecVideo

• Reviewing RSA 2025 w/ Jason Haddix – Post-RSA insights and reflections. Watch Here

• Hacking Phone Calls (MITM/VoIP) – Demonstrating VoIP call interception. Watch Here

• CyberCareer Talks #1 - Sena Yakut – Career stories in cloud security. Watch Here

• Splitting the Email Atom – Email parser exploitation techniques. Watch Here

• Signal Clone HACKED – Gov Chats Exposed – Signal clone compromised in minutes. Watch Here

💻 SecGit

• aliasrobotics/cai – Cybersecurity AI ready for bug bounty work. Explore on GitHub

• asgeirtj/system_prompts_leaks – Collection of leaked system prompts. Explore on GitHub

• qpoint-io/qtap – eBPF agent for deep process-level telemetry. Explore on GitHub

• TaurusOmar/pulsegram – Telegram-integrated keylogger tool. Explore on GitHub

• OSINT-TECHNOLOGIES/dpulse – Comprehensive domain OSINT utility. Explore on GitHub

For suggestions and any feedback, please contact: securify@rosecurify.com