sysflow

SysFlow: 云原生系统遥测管道 此仓库托管所有 SysFlow 项目的文档和问题追踪。 快速参考 文档 : SysFlow 文档 获取帮助的渠道 : SysFlow 社区 Slack 提交问题的位置 : GitHub 问题追踪器 此描述的来源 : 仓库的 readme 历史 Docker 镜像 : docker hub | GHCR 什么是 SysFlow？ SysFlow 遥测管道是一个用于监控云工作负载并创建性能和安全分析的框架。该项目的目标是构建系统遥测所需的所有基础设施，以便用户能够专注于在可扩展的、通用的开源平台上编写和分享分析。遥测管道的核心是一种名为 SysFlow...

PacketStreamer

PacketStreamer Deepfence PacketStreamer 是一款高性能远程数据包捕获与收集工具。它被 Deepfence 的 ThreatStryker 安全可观测性平台用于按需从云工作负载中采集网络流量，以供取证分析。 主要设计目标： 保持轻量，仅负责捕获和传输，不做额外处理 可移植性，支持 虚拟机、Kubernetes 和 AWS Fargate 。Linux 和 Windows 均可使用 PacketStreamer 传感器 部署在目标服务器上。传感器捕获流量、应用过滤器，然后将流量传输到中央接收器。流量流可选择通过 TLS 进行压缩和/或加密。...

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

In this article 1. Vulnerability details 2. Mitigation and protection guidance 3. Microsoft Defender XDR detections 4. References 5. Learn more Microsoft Defender is investigating a high-severity local privilege escalation vulnerability CVE-2026-31431 affecting multiple major Linux distributions...

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

In this article 1. Vulnerability details 2. Mitigation and protection guidance 3. Microsoft Defender XDR detections 4. References 5. Learn more Microsoft Defender is investigating a high-severity local privilege escalation vulnerability CVE-2026-31431 affecting multiple major Linux distributions...

PT-2026-36100

CVE-2026-31431 is another reminder that one unpatched vulnerability can turn a small foothold into full system compromise. For businesses running remote teams, cloud workloads, or distributed infrastructure, secure access and layered protection matter more than ever. Patch fast. Limit exposure...

Wazuh 4.14.5

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

The Best Vulnerability Scanning Tools for 2026: A Complete Guide

Your vulnerability scanner found 14,000 issues last quarter. Your team patched 800. The other 13,200 are sitting in a spreadsheet that nobody opens anymore. This is the reality for most security teams. The scanner works. It finds vulnerabilities. But without context, prioritization, or a clear pa...

Wazuh 4.14.4

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

Lockbox -- a Zero Trust Architecture for Secure Processing of Sensitive Cloud Workloads

Enterprises increasingly rely on cloud-based applications to process highly sensitive data artifacts. Although cloud adoption improves agility and scalability, it also introduces new security challenges such as expanded attack surfaces, a wider radius of attack from credential compromise, and...

CVE-2026-2408

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

CVE-2026-2408

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

CVE-2026-2408

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

CVE-2026-2408: Use After Free

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

Tanium Cloud Workloads 安全漏洞

Tanium Cloud Workloads is a security and management module provided by the American company Tanium. There is a security vulnerability present in Tanium Cloud Workloads, which stems from an attacker who may be allowed access to Tanium client containers, capable of executing denial-of-service attac...

CVE-2026-2408 Use-after-free in Cloud Workloads

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

CVE-2026-2408

Technical details for CVE-2026-2408 are not publicly provided in the supplied documents. The entries only state a use-after-free vulnerability in the Cloud Workloads Enforce client extension. Monitor for updates from vendors and CVE feeds.

CVE-2026-2408

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

CVE-2026-2408 Use-after-free in Cloud Workloads

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

PT-2026-20956

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

The Shai‑Hulud 2.0 supply chain attack represents one of the most significant cloud-native ecosystem compromises observed recently. Attackers maliciously modified hundreds of publicly available packages, targeting developer environments, continuous integration and continuous delivery CI/CD...