#tldrsec
LightNews LightNews
scottpiper.bsky.social
This is excellent. Also available in video.
allan.reyes.sh/posts/keepin...

h/t tldrsec
Keeping Secrets Out of Logs
There's no silver bullet, but if we put some "lead" bullets in the right places, we have a good shot at keeping sensitive data out of logs.
allan.reyes.sh
December 4, 2025 at 5:24 PM
manishrawat21.bsky.social
Community-recognized detection engineering project featured by TLDRSec and Detection Engineering Weekly.

Github: github.com/manishrawat2...

#DetectionEngineering #SecurityAutomation #ThreatIntelligence #BlueTeam #OpenSource
GitHub - manishrawat21/Cisa-KEV-Threat-Intel-Orchestrator: Zero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities (KEV) catalog into production-ready Sigma ...
Zero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities (KEV) catalog into production-ready Sigma detection rules, automatically, every week. - manishrawa...
github.com
August 4, 2026 at 5:46 AM
scottpiper.bsky.social
I really like that Google has created OSS Rebuild. In my experience of having tried to do something similar for a single application, it's a hard problem to confirm that source code matches the release artifacts. h/t tldrsec for linking to it. security.googleblog.com/2025/07/intr...
Introducing OSS Rebuild: Open Source, Rebuilt to Last
Posted by Matthew Suozzo, Google Open Source Security Team (GOSST) Today we're excited to announce OSS Rebuild, a new project to strengthen ...
security.googleblog.com
July 24, 2025 at 3:23 PM
antitree.com
Juicy post about EDR and anti-EDR methods (shared via @tldrsec). This isn't k8s focused but the themes are exactly the same -- TOCTOU risks, performance impact... really like this.

blog.deeb.ch/posts/how-ed...
The (Anti-)EDR Compendium
blog.deeb.ch
January 17, 2025 at 1:30 PM
praetorianlabs.bsky.social
Our open-source tool Vespasian got a mention in tl;dr sec (#323) this week. It watches real HTTP traffic and generates API specifications (OpenAPI, GraphQL SDL, WSDL) — catching the dynamically-constructed API calls that static analysis completely misses.

#OpenSource #tldrsec #PraetorianGuard
GitHub - praetorian-inc/vespasian: API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs
API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs - praetorian-inc/vespasian
github.com
April 9, 2026 at 6:06 PM
semgrep.com
Recently, Clint Gibler was joined by Scott Behrens of Netflix
for a deep dive into secure code review with Vibe Coding IDEs!

Missed it? You can still:

🎥 Watch the full recording → semgrep.dev/events/video...

📂 Explore the Vibe Hacking GitHub repo → github.com/tldrsec/vibe...
August 15, 2025 at 5:51 PM
hacksilon.infosec.exchange.ap.brid.gy
Did not expect the day to end with me watching K-Pop music videos. Also did not expect this to be triggered by reading an infosec newsletter.

Anyway. #kpopdemonhunters is a great movie and the songs are super catchy, thanks #tldrsec for the recommendation.
September 6, 2025 at 8:01 PM