Sources & Methods Newsletter #20 - November 2024
📁 Sources
OSSF Malicious Package Registry - the Securing Critical Projects Working Group of the Open Source Security Foundation (OpenSSF) maintains
Sources & Methods Newsletter #19 - July 2024
Welcome to issue #19 of the Sources & Methods newsletter! I paused for a bit while visiting London and Dublin,
Sources & Methods Newsletter #18 - April 2024
Welcome to the April 2024 issue of the Sources & Methods newsletter! This month, we dive into the importance of
Backdoor Discovered in xz/liblzma Compression Library
A sophisticated backdoor was uncovered in recent versions of the widely-used xz/liblzma compression library, potentially compromising any Linux system
Sources & Methods Newsletter #17 - March 2024
📁 Sources
Cloud Threat Landscape - Cloud-focused compilation of incidents, targeted tech, threat groups, tools, and techniques. Maintained by Wiz, who
Sources & Methods Newsletter #16 - January 2024
Happy New Year! I hope your holidays were restful and you're ready to get back to it. At
Sources & Methods Newsletter #15 - December 2023
I hope everyone had a great year—it was for Sources & Methods:
* Moved the newsletter to Ghost.io to
Evilginx Phishing Proxy
Learn about the threat of free Adversary-in-the-Middle (AiTM) phishing proxy Evilginx and how to mitigate it.
Sources & Methods Newsletter #14 - November 2023
Have questions or suggestions? Send them my way at sources.methods@protonmail.com.
Thanks for reading,
Matthew Conway (@mattreduce)
📁 Sources
Sources & Methods Newsletter #13 - October 2023
📁 Sources
Living off the Foreign Land Cmdlets and Binaries - In the style of LOLBins, a collection of trusted Microsoft
