<h3 id="heading-seclinks">seclinks</h3>
<ul>
<li><a target="_blank" href="https://security.googleblog.com/2023/08/ai-powered-fuzzing-breaking-bug-hunting.html">Google Online Security Blog: AI-Powered Fuzzing: Breaking the Bug Hunting Barrier</a>
</li>
<li><a target="_blank" href="https://ophionsecurity.com/blog/shopify-acount-takeover">Customer account takeover in Shopify stores</a>
</li>
<li><a target="_blank" href="https://mystic0x1.github.io/posts/AWS-Privilege-Escalation-Part-01/">Privilege Escalation in AWS - Part 01</a>
</li>
<li><a target="_blank" href="https://llm-attacks.org/">Universal and Transferable Attacks on Aligned Language Models</a>
</li>
<li><a target="_blank" href="https://cycode.com/blog/exposing-vscode-secrets/">VS Code's Token Security: Keeping Your Secrets... Not So Secretly - Cycode</a>
</li>
<li><a target="_blank" href="https://owasp.org/www-project-top-10-for-large-language-model-applications/">OWASP Top 10 for Large Language Model Applications</a>
</li>
<li><a target="_blank" href="https://schema.ocsf.io/1.0.0/?extensions=">Open Cybersecurity Schema Framework</a>
</li>
<li><a target="_blank" href="https://arxiv.org/abs/2308.00121">Getting pwn'd by AI: Penetration Testing with Large Language Models</a>
</li>
<li><a target="_blank" href="https://jrhawley.ca/2023/08/07/blocked-by-cloudflare">Blocked by Cloudflare</a>
</li>
<li><a target="_blank" href="https://joshua.hu/nmap-speedup-service-scanning-16x">Speeding up nmap service scanning 16x</a>
</li>
<li><a target="_blank" href="https://www.hahwul.com/2023/08/03/hello-noir/">Hello Noir 👋🏼</a>
</li>
<li><a target="_blank" href="https://maikypedia.gitlab.io/posts/finding-vulns-with-mrva-codeql/">Finding Vulnerabilities with MRVA CodeQL</a>
</li>
<li><a target="_blank" href="https://blog.apnic.net/2023/07/26/hsts-preload-adoption-and-challenges/">HSTS preload adoption and challenges</a>
</li>
<li><a target="_blank" href="https://www.sidechannel.blog/en/attacking-js-engines/">Attacking JS engines: Fundamentals for understanding memory corruption crashes</a>
</li>
<li><a target="_blank" href="https://blog.chromium.org/2023/08/towards-https-by-default.html">Towards HTTPS by default</a>
</li>
</ul>
<h3 id="heading-secgit">secgit</h3>
<ul>
<li><a target="_blank" href="https://github.com/magisterquis/chromecookiestealer">magisterquis/chromecookiestealer</a>
</li>
<li><a target="_blank" href="https://github.com/cyfinoid/CFYVuln-android">cyfinoid/CFYVuln-android</a>
</li>
<li><a target="_blank" href="https://github.com/lmammino/jwt-cracker">lmammino/jwt-cracker</a>
</li>
<li><a target="_blank" href="https://github.com/facebookincubator/TTPForge">facebookincubator/TTPForge</a>
</li>
<li><a target="_blank" href="https://github.com/dnakov/little-rat">dnakov/little-rat</a>
</li>
</ul>

### seclinks

* [Google Online Security Blog: AI-Powered Fuzzing: Breaking the Bug Hunting Barrier](https://security.googleblog.com/2023/08/ai-powered-fuzzing-breaking-bug-hunting.html)
    
* [Customer account takeover in Shopify stores](https://ophionsecurity.com/blog/shopify-acount-takeover)
    
* [Privilege Escalation in AWS - Part 01](https://mystic0x1.github.io/posts/AWS-Privilege-Escalation-Part-01/)
    
* [Universal and Transferable Attacks on Aligned Language Models](https://llm-attacks.org/)
    
* [VS Code's Token Security: Keeping Your Secrets... Not So Secretly - Cycode](https://cycode.com/blog/exposing-vscode-secrets/)
    
* [OWASP Top 10 for Large Language Model Applications](https://owasp.org/www-project-top-10-for-large-language-model-applications/)
    
* [Open Cybersecurity Schema Framework](https://schema.ocsf.io/1.0.0/?extensions=)
    
* [Getting pwn'd by AI: Penetration Testing with Large Language Models](https://arxiv.org/abs/2308.00121)
    
* [Blocked by Cloudflare](https://jrhawley.ca/2023/08/07/blocked-by-cloudflare)
    
* [Speeding up nmap service scanning 16x](https://joshua.hu/nmap-speedup-service-scanning-16x)
    
* [Hello Noir 👋🏼](https://www.hahwul.com/2023/08/03/hello-noir/)
    
* [Finding Vulnerabilities with MRVA CodeQL](https://maikypedia.gitlab.io/posts/finding-vulns-with-mrva-codeql/)
    
* [HSTS preload adoption and challenges](https://blog.apnic.net/2023/07/26/hsts-preload-adoption-and-challenges/)
    
* [Attacking JS engines: Fundamentals for understanding memory corruption crashes](https://www.sidechannel.blog/en/attacking-js-engines/)
    
* [Towards HTTPS by default](https://blog.chromium.org/2023/08/towards-https-by-default.html)
    

### secgit

* [magisterquis/chromecookiestealer](https://github.com/magisterquis/chromecookiestealer)
    
* [cyfinoid/CFYVuln-android](https://github.com/cyfinoid/CFYVuln-android)
    
* [lmammino/jwt-cracker](https://github.com/lmammino/jwt-cracker)
    
* [facebookincubator/TTPForge](https://github.com/facebookincubator/TTPForge)
    
* [dnakov/little-rat](https://github.com/dnakov/little-rat)

OWASP Top 10 for Large Language Model Applications, Customer takeover in Shopify, Open Cybersecurity Schema Framework, Blocked by Cloudflare etc.

Seclog - #37

Stay informed with Seclog your weekly update on the latest cybersecurity news, threats, and trends.


Stay informed with Seclog - Securify Spotlight: your weekly update on the latest cybersecurity news, threats, and trends.