你可能会喜欢
Artificial intelligence is redefining industries at a staggering pace, and the field of cybersecurity is no exception. @decodebytes @stacklokhq
Nice round up by @0xpoppaea on supply chain attacks in popular OSS packages !
How Supply-Chain Attackers Maximize Their Blast Radius | By Poppaea McDermott, thanks to @StackLokHQ thenewstack.io/how-supply-cha…
🔒Today @StackLokHQ introduced CodeGate —local, open source privacy controls that work with your AI code assistant. You deploy a single container locally that encrypts secrets before they find their way into your prompts and alerts you when dangerous dependencies are suggested
At @StackLokHQ we released codegate today, an open-source, privacy-focused local proxy that acts as an essential layer of security within a developers generative AI workflow. Support is available for copilot and @continuedev with others on the way github.com/stacklok/codeg…
I love the little nod 'I got you bruv'.
The King's Guard guides his horse closer to a special tourist x.com/visualfeastwan…
🎉 Welcome to the OpenSSF family, Minder! 📣 @StackLokHQ is contributing Minder to OpenSSF as a sandbox project! Minder streamlines #OSSSecurity, auto-remediates issues, and flags key risks for devs & security teams. 🔍 Learn more about Minder: openssf.org/guest-blog/202…
Bandit is now more capable of scanning AI models. v1.7.10 flags insecure use of torch.load where untrusted data can lead to arbitrary code execution, and improper use of torch.save might expose sensitive data or lead to data corruption: github.com/PyCQA/bandit/r…
In London? Our CTO @decodebytes will be keynoting @DevSecOpsLG tonight with a talk on "Secure Repo Management as Scale, with Minder" at Google's (Central Saint Giles) London Office. Sign up here👇 meetup.com/devsecops-lond…
The CFP deadline for SigstoreCon has been extended to Wednesday, September 18, 2024 at 11:59 pm Mountain Daylight Time (UTC-6). events.linuxfoundation.org/sigstorecon-su…
Interesting thing here; @projectsigtore was used as one of many signals to sense the attack
DPRK-aligned threat actors have launched a new surge of activity targeting developers in the cryptocurrency and Web3 sectors using malicious NPM packages. Our investigation revealed the stealer and loader BeaverTail embedded in these packages: stacklok.com/blog/dependenc… #malware
Another nasty one picked up by @TrustyPkg. This one was quite interesting, as it had a Go binary baked in. One interesting obs, some well established (will remain nameless) infosec vendor DBs were showing this with 90+ scores for 'software supply chain' 🫣stacklok.com/blog/cross-pla…
TSC Member @rdcallaw and community chair @haydentherapper from the Google OS Sec Team chatted with @puerco on the @StackLokHQ hosted 🌮 Securi-Taco Tuesdays 📺show. Lot's on sigstore and & software supply chain security. Catch it here: youtube.com/watch?v=JwfTCe…
youtube.com
YouTube
Securi-Taco Tuesdays: Trust and Verify: How Code Signing & Sigstore...
Listen to the full episode with @DarinPope, @decodebytes and @vfarcic at devopsparadox.com/episodes/makin…
Honored to be a Rising Star ⭐ in Forbes 2024 Cloud ☁️ 100. This list is impressive, and we’re excited to be part of the cloud’s future. 🎉 Grateful for the recognition @BessemerVP @Forbes @SalesforceVC @cloud100 bit.ly/4fsf2tv #Cloud100 #RisingStar
So much malware and other nasty’s out there, but lucky for us we have the awesome @0xpoppaea tracking it down and giving a run down post autopsy like below.
Attackers continue to abuse open source ecosystems as a vector to deliver malware. In this incident, at least 4 trojanized npm packages silently collected and exfiltrated users' cryptocurrency wallet secrets upon installation. Read @0xpoppaea's analysis of this attack here:…
Attackers continue to abuse open source ecosystems as a vector to deliver malware. In this incident, at least 4 trojanized npm packages silently collected and exfiltrated users' cryptocurrency wallet secrets upon installation. Read @0xpoppaea's analysis of this attack here:…
Minder can now provision the @openssf scorecard action: github.com/stacklok/minde…
United States 趋势
- 1. Stanford 10.8K posts
- 2. Norvell 4,159 posts
- 3. Florida State 10.1K posts
- 4. #AEWWrestleDream 68.8K posts
- 5. sabrina 65.9K posts
- 6. SPENCER SMITH N/A
- 7. #byucpl N/A
- 8. Darby 11.4K posts
- 9. Hugh Freeze 3,047 posts
- 10. Utah 32.8K posts
- 11. Mizzou 6,274 posts
- 12. Bama 16.6K posts
- 13. Lincoln Riley 2,911 posts
- 14. Sperry N/A
- 15. Castellanos 3,759 posts
- 16. brendon 5,682 posts
- 17. Sting 14.9K posts
- 18. Kentucky 25.1K posts
- 19. Nobody's Son 3,346 posts
- 20. Arch 25.8K posts
你可能会喜欢
-
Syft
@SyftProject -
developer-guy
@developerguyba -
Dan Lorenc
@lorenc_dan -
Chainguard ⛓️
@chainguard_dev -
Grype
@GrypeProject -
OpenSSF
@openssf -
Rahul Singh Rana
@owlrana -
Matt Moore ⛓🚀
@mattomata -
Kim Lewandowski
@kimsterv -
Bob Callaway
@rdcallaw -
Carlos Santana
@csantanapr -
Duffie Cooley
@mauilion -
🦄 Frederick Kautz (Emeritus KubeCon Co-Chair)
@ffkiv -
Amim Knabben
@ak_ndb -
Andrew Block
@sabre1041
Something went wrong.
Something went wrong.