Manuel D'Orso @cirku17@infosec.exchange

https://www.reddit.com/r/netsec/comments/i6g662/redis_security_map_rsm_antihacking_for_redis/?utm_medium=android_app&utm_source=share

Technology and Enterprise Leaders Combine Efforts to Improve Open Source Security https://www.linuxfoundation.org/press-release/2020/08/technology-and-enterprise-leaders-combine-efforts-to-improve-open-source-security/

RT @ORARiccardo
Sembra quasi una beffa. Avevo chiesto info sul riconoscimento facciale a Torino per il progetto AxTo—in quel caso non c'era nulla. Oggi esce questo (c'è paywall). Metadati, tag e sul cartaceo dicono anche colore dei capelli, genere e comportamenti anomali https://www.lastampa.it/topnews/edizioni-locali/torino/2020/08/04/news/torino-360-occhi-elettronici-sulla-citta-via-libera-al-progetto-argo-ecco-le-prime-zone-sorvegliate-1.39159220

Testing out @GitKraken Boards for Vulnerability Management.
Looks good enough with labels, a bit of automation and calendar/timeline view.
https://app.gitkraken.com/glo/board/Xyl7DqNfyAAS19sc
#ambassador

#DevSecOps methodology concept : Writing security requirements in Gherkin
https://write.as/cirku17/security-as-code-add-security-requirements-for-devsecops-in-gherkin-lrvv

OWASP DevSecOps Guideline
https://github.com/OWASP/DevSecOpsGuideline (new project)

Opening Spaces for Digital Rights Activism: Multilateral Trade Negotiations https://www.citizen.org/article/51451-2/

RT @defcon
We don't know who needs to hear this right now, but #defconsafemode is free to attend. You don't have to register. It starts in one week. You should join us.

http://defcon.org

RT @ExploitDB
[webapps] Wordpress Plugin Maintenance Mode by SeedProd 5.1.1 - Persistent Cross-Site Scripting http://dlvr.it/Rccftw

Watch Your Containers: Doki Infecting Docker Servers in the Cloud https://www.intezer.com/container-security/watch-your-containers-doki-infecting-docker-servers-in-the-cloud/

The map of #cybersecurity domains
#mindmaps

https://www.secjuice.com/how-serverless-reduces-your-attack-surface/

Twilio: Someone broke into our unsecured AWS S3 silo, added 'non-malicious' code to our JavaScript SDK https://www.theregister.com/2020/07/21/twilio_sdk_code_injection/ via @TheRegister

https://www.boredpanda.com/tik-tok-reverse-engineered-data-information-collecting/

https://resources.whitesourcesoftware.com/blog-whitesource/june-2020-open-source-security-vulnerabilities-snapshot

Open Source IDS Tools: Comparing Suricata, Snort, Bro (Zeek), Linux
https://cybersecurity.att.com/blogs/security-essentials/open-source-intrusion-detection-tools-a-quick-overview