ccs

Scanner de Credenciais de Código Este script tem como objetivo analisar uma base de código grande e diversificada em busca de credenciais codificadas ou credenciais presentes em arquivos de configuração. Essas representam um grave problema de segurança e podem ser extremamente difíceis de detecta...

cornucopia

Progetto OWASP Cornucopia OWASP Cornucopia è un meccanismo sotto forma di gioco di carte per aiutare i team di sviluppo software a identificare i requisiti di sicurezza nei processi di sviluppo Agile, convenzionali e formali. È indipendente dal linguaggio, dalla piattaforma e dalla tecnologia...

ConcoLLMic

ConcoLLMic: Agentische konkolische Ausführung Veröffentlichung : IEEE S&P 2026 ConcoLLMic ist der erste sprach- und theorieunabhängige konkolische Ausführer, der von LLM-Agenten betrieben wird. Im Gegensatz zu traditionellen symbolischen Ausführungswerkzeugen, die sprachspezifische...

MalTotal: Cost-Effective and Language-Agnostic Malicious Code Poisoning Detection for Millions of Repositories

The widespread adoption of open source software OSS has introduced significant security risks, with malicious code poisoning attacks increasingly targeting public package registries and open-source platforms. Existing detection approaches, including heuristic-, learning-, and LLM-based methods,...

[SECURITY] Fedora 42 Update: moby-engine-29.1.3-1.fc42

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...

MalCodeAI: Autonomous Vulnerability Detection and Remediation Via Language Agnostic Code Reasoning

The growing complexity of cyber threats and the limitations of traditional vulnerability detection tools necessitate novel approaches for securing software systems. We introduce MalCodeAI, a language-agnostic, multi-stage AI pipeline for autonomous code security analysis and remediation. MalCodeA...