cloud-custodian

Cloud Custodian c7n Cloud Custodian, also known as c7n, is a rules engine for managing public cloud accounts and resources. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized. It consolidates many of the adhoc scripts...

MISP

MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...

CVE-2026-25769

CVE-2026-25769 what is CVE-2026-25769 ? CVE-2026-25769 is a critical Remote Code Execution RCE vulnerability in Wazuh, the open-source security platform used for threat prevention, detection, and response. what is wazuh ? Wazuh is a free and open-source security platform used for threat preventio...

CVE-2026-105044

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform Host Monitoring V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection...

EUVD-2026-106928

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform Host Monitoring V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection...

CVE-2026-105044 OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform Host Monitoring V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection...

CVE-2026-105044

The Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 is vulnerable to OS command injection in the Security Toolbox component. The root cause is the improper neutralization of special elements used in an OS command. This flaw affects versions prior to 20260929 and allows an authenti...

PT-2026-120287

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform Host Monitoring V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection...

​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

In this article 1. Why you should attend Microsoft Ignite 2. Make the most of your time at Microsoft Ignite 3. Explore the Security sessions at Microsoft Ignite 2026 4. Build your schedule In the agentic era, the stakes are higher: AI agents now act with real access to your identities, your data,...

stackrox v4.11.4-rc.1

Table of Contents StackRox Kubernetes Security Platform Table of Contents Community Deploying StackRox Quick Installation using Helm Manual Installation using Helm Installation using the Operator Installation via Scripts Kubernetes Distributions EKS, AKS, GKE OpenShift Docker Desktop, Colima, or...

yakit v1.4.8-0905

YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language Whitepaper • Official documentation • Issue feedback • Official website • Community • Architecture :book:Language： English • 中文 Introduction Security integration is a reform of security operations and management for enterprises in t...

kubescape v4.0.13

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

MISP v2.5.45

MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...

CVE-2026-73264

Prowler (cloud security platform) contains an SSRF risk prior to version 5.33.1. An authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compatible provider via POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/...

PT-2026-71084

Name of the Vulnerable Software and Affected Versions Prowler versions prior to 5.36.0 Description The Kubernetes provider connection test fails to properly validate kubeconfig content containing a legacy GCP auth-provider. Specifically, the kubeconfig contains exec auth function in...

stackrox v4.11.3-rc.1

Table of Contents StackRox Kubernetes Security Platform Table of Contents Community Deploying StackRox Quick Installation using Helm Manual Installation using Helm Installation using the Operator Installation via Scripts Kubernetes Distributions EKS, AKS, GKE OpenShift Docker Desktop, Colima, or...

yakit v1.4.8-0807

YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language Whitepaper • Official documentation • Issue feedback • Official website • Community • Architecture :book:Language： English • 中文 Introduction Security integration is a reform of security operations and management for enterprises in t...

​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

As organizations adopt AI, they must secure both cloud and AI environments through a unified security control plane as their attack surface expands. Because modern applications and AI workloads are built and run in the cloud, security teams must understand which exposures matter most, prioritize...

yakit v1.4.8-0731

YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language Whitepaper • Official documentation • Issue feedback • Official website • Community • Architecture :book:Language： English • 中文 Introduction Security integration is a reform of security operations and management for enterprises in t...

CVE-2026-17561 Unauthenticated RCE in Innotim Software's Logsign SIEM

Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115...