CramHacks

CramHacks
Topics
newsletter

Feb 19, 2025

CramHacks Chronicles #73: Weekly Cybersecurity Newsletter!

The biggest supply-chain attacks in 2024, Top 10 web hacking techniques, whoAMI: A cloud image name confusion attack, Malicious Code & Vulnerabilities

Kyle Kelly

newsletternewsletter

Feb 05, 2025

CramHacks Chronicles #72: Weekly Cybersecurity Newsletter!

Measuring LLM Package Hallucination, Reviving Abandoned S3 Buckets, Maven begins validating Sigstore signatures, and Go Module Proxy cache abuse

Kyle Kelly

newsletternewsletter

Jan 29, 2025

CramHacks Chronicles #71: Weekly Cybersecurity Newsletter!

I have a new Job! OSS usage trends, us-east-1.com DNS insights, CVEs for EOL versions, Palantir's security practices, OSS health checks, OSV-Scanner v2.0.0-beta1

Kyle Kelly

newsletternewsletter

Jan 22, 2025

CramHacks Chronicles #70: Weekly Cybersecurity Newsletter!

Executive Order 14144, Homebrew warnings, Google’s Patch Rewards, StackOverflow's decline, GitHub antics, and insights on the Cyber Resilience Act

Kyle Kelly

newsletternewsletter

Jan 15, 2025

CramHacks Chronicles #69: Weekly Cybersecurity Newsletter!

Exploring OSS Vulnerabilities, Google’s OSV Growth, GitHub Actions Security, Snyk's Controversy, CNCF Fuzzing Insights, and More

Kyle Kelly

newsletternewsletter

Jan 01, 2025

CramHacks Chronicles #67: Weekly Cybersecurity Newsletter!

Happy New Year! GitHub Cache-Native Malware, Hijacking Chrome Extensions, 2024 Blog Recap, Microsoft using third-party domains

Kyle Kelly

newsletternewsletter

Dec 18, 2024

CramHacks Chronicles #66: Weekly Cybersecurity Newsletter!

GitHub tackles workflow vulnerabilities, finding undisclosed vulnerabilities using LLMs, container image signing, chasing quality OSS license data, OSS funding report

Kyle Kelly

newsletternewsletter

Dec 04, 2024

CramHacks Chronicles #64: Weekly Cybersecurity Newsletter!

@solana/web3.js Breach, Census III Insights, Encrypted Apps Warning, Dependency Confusion Challenges, Redis Crate Controversy, WordPress Auth Flaw

Kyle Kelly

newsletternewsletter

Nov 27, 2024

CramHacks Chronicles #63: Weekly Cybersecurity Newsletter!

CWE Top 25, OSS Dataset for Malware, Arch Linux RFC for upstream package handling, GitHub Wiki Malware Tactics, AI Fuzzing, Malicious linPEAS Fork

Kyle Kelly

newsletternewsletter

Nov 20, 2024

CramHacks Chronicles #62: Weekly Cybersecurity Newsletter!

From Repo Swatting to PyPI Attestations: Supply Chain Security, eBPF Research, and Tools to Mitigate Emerging Threats

Kyle Kelly

newsletternewsletter

Nov 13, 2024

CramHacks Chronicles #61: Weekly Cybersecurity Newsletter!

CISA's Top Exploited CVEs, Snyk's Probely Acquisition, Dependabot's Copilot Autofix, OSS Maintainers on Vulnerability Management, and Perforce’s Puppet Source Shift

Kyle Kelly

newsletternewsletter

Nov 06, 2024

CramHacks Chronicles #60: Weekly Cybersecurity Newsletter!

Fuzzing, Security Audits, and New Tools: A Look at Recent Developments in the Open Source Software Security Landscape.

Kyle Kelly