# AppSec Newsletter 0007

### Links

* \[video\] [From SSRF to EKS Cluster takeover](https://www.youtube.com/watch?v=7I5VdX4ArME) by Crowsec
    
* \[video\] [JWT Authentication Bypass via Algorithm Confusion](https://www.youtube.com/watch?v=d-X9CmpnJdE) by Intigriti
    
* \[artigo\] [Cloud storage security: What’s new in the threat matrix](https://www.microsoft.com/en-us/security/blog/2023/09/07/cloud-storage-security-whats-new-in-the-threat-matrix/) by Microsoft
    
* \[tool\] [charmbracelet/gum](https://github.com/charmbracelet/gum): Uma tool para criar CLIs com várias features, como select, input, etc. Beeem bacana.
    
* \[artigo\] [Results of Major Technical Investigations for Storm-0558 Key Acquisition](https://msrc.microsoft.com/blog/2023/09/results-of-major-technical-investigations-for-storm-0558-key-acquisition/)
    
* \[certificação\] [Free Mock Exams](https://secops.group/free-mock-pentesting-exams/) by SecOps
    

### Siga o Guia de AppSec nas redes!

Site: [https://www.guiadeappsec.com.br/](https://www.guiadeappsec.com.br/)  
Youtube: [https://www.youtube.com/@GuiadeAppSec](https://www.youtube.com/@GuiadeAppSec)  
Twitter / X: [https://twitter.com/guiadeappsec](https://twitter.com/guiadeappsec)