dep-scan is a fully open-source security audit tool for project dependencies based on known vulnerabilities, advisories and license limitations. Both local repositories and container images are supported as input. The tool is ideal for...
Pip-audit leverages the PyPI JSON API to compare dependencies against the Python Packaging Advisory Database – a repository of security advisories that collects much of its data from the NVD CVE feed. click here...
Trend Micro found that around 13 million malware attacks targeted Linux-based cloud environments, with ransomware and coin miners accounting for 54% of attacks in the first half of 2021. Web shells accounted for around...
Created by David French (@threatpunter) at Elastic Security Dorothy is a tool to help security teams test their monitoring and detection capabilities for their Okta environment. Dorothy has several modules to simulate actions that...
In a new release from Gartner, researchers have estimated that cyberattackers will have weaponised operational technology (OT) environments to successfully harm or kill humans by the year 2025. click here to read full Article...
TeamTNT operations have targeted and, after compromise, exfiltrated AWS credentials, targeted Kubernetes clusters, and created new malware called Black-T that integrates open source cloud-native tools to assist in their cryptojacking operations. click here to...
Using this tool, security professionals can conduct zero trust assessments of AWS environments to help identify the potential gaps in an organization’s AWS security posture that can put data at risk. click here to...
Dragos uncovers a total of 15 threat groups targeting industrial organizations, with four new groups joining in 2020. The new groups are efficient enough to sabotage control systems. Click here for image source link...
Based in Mountain View, California, and founded in 2007, HyTrust’s solutions automate security controls for software-defined computing, networking, and storage workloads. Click here for image source link and to read full Article Read more...
Amazon Web Solutions introduced the typical availability of AWS Nitro Enclaves, a new Amazon EC2 ability that can make it less difficult for buyers to securely course of action hugely sensitive info. AWS Nitro...
How company cloud VPN protects complex IT environments Impression and Posting Supply url Read More on latest Security Updates
SMB AutoRelay supplies the automation of SMB/NTLM Relay approach for pentesting and purple teaming routines in lively listing environments. Usage Syntax: ./smbAutoRelay.sh -i -t [-q] [-d] . Case in point: ./smbAutoRelay.sh -i eth0 -t...
