<h3 id="heading-seclinks">seclinks</h3>
<ul>
<li><a target="_blank" href="https://www.lastweekasavciso.com/p/i-read-the-dod-zero-trust-doc">I Read The DoD Zero Trust Doc, Here's What You Need To Know...</a>
</li>
<li><a target="_blank" href="https://explained-from-first-principles.com/">Explained from First Principles</a>
</li>
<li><a target="_blank" href="https://ermetic.com/blog/azure/emojideploy-smile-your-azure-web-service-just-got-rced/">EmojiDeploy: Smile! Your Azure Web Service Got RCE’d Ermetic</a>
</li>
<li><a target="_blank" href="https://earda.net/ss-monitor-socket-connections/">SS - Monitor Socket Connections</a>
</li>
<li><a target="_blank" href="https://arxiv.org/pdf/2207.11171.pdf">Prototype Pollution Leads to Remote Code Execution in Node.js</a>
</li>
<li><a target="_blank" href="https://sysdig.com/blog/top-owasp-kubernetes/">OWASP Kubernetes Top 10 – Sysdig</a>
</li>
<li><a target="_blank" href="https://medium.com/airbnb-engineering/airbnbs-approach-to-access-management-at-scale-cfa66c32f03c">Airbnb’s Approach to Access Management at Scale</a>
</li>
<li><a target="_blank" href="https://aws.amazon.com/blogs/security/how-to-use-granular-geographic-match-rules-with-aws-waf/">How to use granular geographic match rules with AWS WAF | AWS Security Blog</a>
</li>
<li><a target="_blank" href="https://www.rohitsalecha.com/project/eks_playground/">AWS EKS Playground using Terraform | Rohit Salecha</a>
</li>
<li><a target="_blank" href="https://kostas-ts.medium.com/threat-hunting-series-detection-engineering-vs-threat-hunting-f12f3a72185f">Threat Hunting Series: Detection Engineering VS Threat Hunting</a>
</li>
<li><a target="_blank" href="https://attackshipsonfi.re/p/exploiting-api-framework-flexibility">Exploiting API Framework Flexibility</a>
</li>
<li><a target="_blank" href="https://yayimorphology.org/ssh-identities-made-easy.html">yayi - Managing several SSH identities explained</a>
</li>
<li><a target="_blank" href="https://h1pmnh.github.io/post/writeup_spring_el_waf_bypass/">Bug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass</a>
</li>
<li><a target="_blank" href="https://research.nccgroup.com/2023/01/31/threat-modelling-cloud-platform-services-by-example-google-cloud-storage/">Threat Modelling Cloud Platform Services by Example: Google Cloud Storage – NCC Group Research</a>
</li>
</ul>
<h3 id="heading-secgit">secgit</h3>
<ul>
<li><a target="_blank" href="https://github.com/nemesida-waf/waf-bypass">nemesida-waf/waf-bypass: Check your WAF before an attacker does this one</a></li>
</ul>
<h3 id="heading-secservices">secservices</h3>
<ul>
<li><a target="_blank" href="https://zrok.io/">Home - zrok</a>
</li>
<li><a target="_blank" href="http://Poste.io">Poste.io</a> <a target="_blank" href="https://poste.io/">~ complete mail server</a>
</li>
<li><a target="_blank" href="https://12ft.io/">12ft Ladder</a>
</li>
<li><a target="_blank" href="http://dns0.eu">dns0.eu</a> <a target="_blank" href="https://www.dns0.eu/">— The European public DNS that makes your Internet safer</a>
</li>
</ul>

### seclinks

* [I Read The DoD Zero Trust Doc, Here's What You Need To Know...](https://www.lastweekasavciso.com/p/i-read-the-dod-zero-trust-doc)
    
* [Explained from First Principles](https://explained-from-first-principles.com/)
    
* [EmojiDeploy: Smile! Your Azure Web Service Got RCE’d Ermetic](https://ermetic.com/blog/azure/emojideploy-smile-your-azure-web-service-just-got-rced/)
    
* [SS - Monitor Socket Connections](https://earda.net/ss-monitor-socket-connections/)
    
* [Prototype Pollution Leads to Remote Code Execution in Node.js](https://arxiv.org/pdf/2207.11171.pdf)
    
* [OWASP Kubernetes Top 10 – Sysdig](https://sysdig.com/blog/top-owasp-kubernetes/)
    
* [Airbnb’s Approach to Access Management at Scale](https://medium.com/airbnb-engineering/airbnbs-approach-to-access-management-at-scale-cfa66c32f03c)
    
* [How to use granular geographic match rules with AWS WAF | AWS Security Blog](https://aws.amazon.com/blogs/security/how-to-use-granular-geographic-match-rules-with-aws-waf/)
    
* [AWS EKS Playground using Terraform | Rohit Salecha](https://www.rohitsalecha.com/project/eks_playground/)
    
* [Threat Hunting Series: Detection Engineering VS Threat Hunting](https://kostas-ts.medium.com/threat-hunting-series-detection-engineering-vs-threat-hunting-f12f3a72185f)
    
* [Exploiting API Framework Flexibility](https://attackshipsonfi.re/p/exploiting-api-framework-flexibility)
    
* [yayi - Managing several SSH identities explained](https://yayimorphology.org/ssh-identities-made-easy.html)
    
* [Bug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass](https://h1pmnh.github.io/post/writeup_spring_el_waf_bypass/)
    
* [Threat Modelling Cloud Platform Services by Example: Google Cloud Storage – NCC Group Research](https://research.nccgroup.com/2023/01/31/threat-modelling-cloud-platform-services-by-example-google-cloud-storage/)
    

### secgit

* [nemesida-waf/waf-bypass: Check your WAF before an attacker does this one](https://github.com/nemesida-waf/waf-bypass)
    

### secservices

* [Home - zrok](https://zrok.io/)
    
* [Poste.io](http://Poste.io) [~ complete mail server](https://poste.io/)
    
* [12ft Ladder](https://12ft.io/)
    
* [dns0.eu](http://dns0.eu) [— The European public DNS that makes your Internet safer](https://www.dns0.eu/)

Spotlight: Zero Trust, EmojiDeploy, Prototype Pollution RCE, OWASP Kubernetes, Airbnb's Access Management, dns0, 12ft, etc.

Seclog - #15

Stay informed with Seclog your weekly update on the latest cybersecurity news, threats, and trends.


Stay informed with Seclog - Securify Spotlight: your weekly update on the latest cybersecurity news, threats, and trends.