Die Cyber Mühle

As I talk about in my article on Red, Blue, and Purple Teams, there are many advocating for other team types beyond just those colors. In April Wright’s work—who appears to have started the idea of these alternative team colors—the new ones look like this. https://danielmiessler.com/blog/the-defi...

PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be checked before you run the actual line...

Spreadsheets are dumb. Okay, it’s not that spreadsheets are dumb, or that the people who use them are dumb. That’s not at all what I’m saying. What’s dumb is using spreadsheets to manage third-party information security risk. https://www.helpnetsecurity.com/2019/08/12/third-party-risk-management-...

SAML (Security Assertion Markup Language) and OIDC (OpenID Connect) are the most widely used federation protocols for web based single sign-on. In the case of SAML, the most commonly used flow is Redirect/POST Bindings (SP or IDP initiated) and in the case of OIDC, it is Authorization code flow. ...

HackTale is a new, innovative approach for teaching and training cyber experts via gamification. HackTale is a platform designed for the creation of cyber-games. Each game simulates a different attack scenario and focuses on different aspects of cyber-defense. https://www.hacktale.com

Trail of Bits recently completed a security assessment of Kubernetes, including its interaction with Docker. https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/