• Hive Five
  • Posts
  • What's Buzzin' - The Best of InfoSec, Tech, and Productivity of May 2024

What's Buzzin' - The Best of InfoSec, Tech, and Productivity of May 2024

5 Most Popular resources, Hive Five newsletters, Premium content, and My Latest Work.

Author

Bee
June 23, 2024

Hi friends,

Another month has flown by. That means, another roundup of the monthly buzz on Infosec, Technology, and Productivity.

If you're a subscriber to the weekly Hive Five newsletter, then you know each week, I curate and share resources from the community that enable people to thrive.

Whether you're a longtime subscriber or new to the Hive, I’ll keep exploring meaningful content to help you become more effective and efficient.

Send()-ing Myself Belated Christmas Gifts - GitHub.com's Environment Variables & GHES Shell

CVE-2024-0200, a deceptively simple, one-liner vulnerability. Spoiler: The vulnerability enabled disclosure of all environment variables of a production container on GitHub.

starlabs.sg/blog/2024/04-sending-myself-github-com-environment-variables-and-ghes-shell

Relative Path File Injection: The Next Evolution in RPO

The author has discovered a technique named Relative Path File Injection (RPFI) while exploring injection vulnerabilities. RPFI allows injecting arbitrary file data into a user’s download via…

blog.ionatomics.org/2024/05/08/relative-path-file-injection-the-next-evolution-in-rpo

The Monsters in Your Build Cache – GitHub Actions Cache Poisoning

GitHub Actions caching has some insecure design decisions that allow for some unique attacks. It’s considered working as intended, but there are many ways it can go wrong. Learn how I identif…

adnanthekhan.com/2024/05/06/the-monsters-in-your-build-cache-github-actions-cache-poisoning

Content

🍯 Bee-side 169 - From the Transistor to the Web Browser

Hive Five explores how technology and the internet can help you thrive. Get my free weekly newsletter on security, technology, and productivity.

www.hivefive.community/p/beeside-169-transistor-web-browser

What's Buzzin' - The Best of InfoSec, Tech, and Productivity of April 2024

Top 5 Most Popular links, Hive Five newsletters, Premium content, and My Latest Work.

www.hivefive.community/p/whats-buzzin-best-infosec-tech-productivity-april-2024

🐝 Hive Five 170 - No Web Without Women

The great intergenerational theft, 10 Things Your First Security Hire Shouldn’t Do, and more...

www.hivefive.community/p/hive-five-170-no-web-without-women

🍯 Bee-side 170 - 2024 AI & Business Report

Copilot Workspace, Meta Llama 3, Underrated Neovim plugins, and more

www.hivefive.community/p/beeside-170-2024-ai-business-report

🐝 Hive Five 171 - The Power of Recon

BetterHelp sharing personal data, iPad > MacBook, the Anti-To-Do list, and more...

www.hivefive.community/p/hive-five-171-power-recon

🍯 Bee-side 171 - Go Where You Don’t Belong

Books that covers 90% of what matters today, Must-watch Documentaries, and more...

www.hivefive.community/p/beeside-171-go-dont-belong

🐝 Hive Five 172 - The Worst Website In The Entire World

Exploring secret web hacking knowledge, Messy thinking > Clear thinking, NahamCon2024, The Rise Of The Generalist, and more ...

www.hivefive.community/p/hive-five-172-worst-website-entire-world

🍯 Bee-side 172 - Beware of these hacks in 2024

Community Impact: Insights from The Obama Foundation, Neovim plugin: leap.nvim, and more...

www.hivefive.community/p/beeside-172-beware-hacks-2024

🐝 Hive Five 173 - Where Are The Builders?

When privacy expires, NahamCon 2024 Workshops, Dealing with Uncertainty, and more...

www.hivefive.community/p/hive-five-173-builders

See you next month!

Stay buzzworthy 🐝