Between certain staff (e.g., accountant -> CFO), it may make sense to share a secret passphrase to authenticate each other. If you want to get fancy, share a TOTP seed to reduce the risk further.

After a few months of catching up on AI - I have condensed some thoughts on LLMs into a presentation called 'Demystifying LLMS and Threats' : youtube.com/watch?v=q_gDtO… and I hate just video material so I also turned it into a VERY long post here: medium.com/csima/demystif…

Introducing Forager! Check to see if anyone using your company's email domain posted LIVE SECRETS to GitHub and NPM: forager.trufflesecurity.com

Want to play with an api of a tool that does one thing well?

api.httpx.me/projectdiscove…

#hackwithautomation #bugbounty #appsec

Closing arguments today at 8:30am PT for Joe’s trial cand-uscourts.zoomgov.com/j/1611812513?p…

At Robinhood we believe the best way to help keep our customers safe is to combine security with a great user experience. That is why we are proud to be one of the first to support Apple's Passkey feature - a step towards a passwordless world.

Sitting in Joe Sullivan’s trial - every CISO needs to listen to this. Streaming here: cand.uscourts.gov/judges/orrick-…

Something unique and thought provoking but also extreme with no grey. That way it generates debate and discussion with no practical outcome

This is an incredible milestone for Robinhood. 24/7 phone support gives everyone the opportunity to make informed, secure, and timely decisions.

It is a giant step in making the markets more accessible to all. Congrats team!📞☎️📳

blog.robinhood.com/news/2021/10/5…

🥳🥳 WE ARE GOING FULL-TIME. We just secured $1.7mn of funding in our seed round from some amazing people from the security community. Here is the blog —blog.projectdiscovery.io/we-are-going-f…

#opensource #community #security #announcement

This is the best security tool released in probably 10 years. Maybe longer.

It’s Nessus—except transparent and automatable—and for AppSec as well.

Nuclei v2.2 is out, This time — Fuzz all the things

We wrote quick release blog-post to list out few notable additions — blog.projectdiscovery.io/post/nuclei-fu…

#hackwithautomation #pentest #bugbounty #appsec #fuzzing

Answer the question 'What is exposed to the internet in my AWS accounts?' #BlackHat2020
github.com/BishopFox/smog…

All, Please help Kathy Fang out on Fang Restaurant & House of Nanking. She is trying to come up with new & unique ideas for the restaurants. Help her out by filling out this survey to help them get back in business. Re-post, share as much as you can.

docs.google.com/forms/d/e/1FAI…

I am in urgent need of a property manager for multiple residential and commercial properties. If you know of anyone that is top notch please connect with me directly

psychicpaper | iOS <13.5 sandbox escape/entitlement 0day - this is mind blowing! siguza.github.io/psychicpaper/

I think I may have just achieved the impossible.. 5 weeks paternity leave just caught up with my team for status - no fires!!, everything working smoothly! I must be dreaming

Good thing toilet paper hoarders don’t know about the forever roll which has a subscription

I just want to reemphasize how incredibly useful Clint Gibler tldr;sec newsletter is. I’m excited every time I see a new one come in

“What I learned at Capital One” by Caleb Sima link.medium.com/PPJeMnSN1Y