MISP

MISP - 위협 인텔리전스 공유 플랫폼 MISP는 사이버 보안 사고 분석 및 악성코드 분석에 관한 사이버 보안 지표와 위협을 수집, 저장, 배포 및 공유하기 위한 오픈 소스 소프트웨어 솔루션입니다. MISP는 사고 분석가, 보안 및 ICT 전문가 또는 악성코드 리버서에 의해, 그리고 그들을 위해 설계되었으며, 구조화된 정보를 효율적으로 공유하는 일상 업무를 지원합니다. MISP의 목표는 보안 커뮤니티 내부와 외부에서 구조화된 정보의 공유를 촉진하는 것입니다. MISP는 정보 교환을 지원하는 기능뿐만 아니라 네트워크 침입 탐지...

riskscanner

경고 이 프로젝트는 유지보수가 중단되었으며, CloudExplorer Lite의 보안 규정 준수 모듈로 이전되었습니다. RiskScanner 오픈소스 멀티 클라우드 보안 규정 준수 스캔 플랫폼 RiskScanner는 오픈소스 멀티 클라우드 보안 규정 준수 스캔 플랫폼으로, Cloud Custodian, Prowler 및 Nuclei 엔진을 기반으로 주요 공용사설 클라우드 리소스의 보안 규정 준수 스캔 및 취약점 스캔을 수행합니다. 기능 장점 등급 보호 2.0 사전 검사: 등급 보호 2.0 규정을 준수하며, 보안 감사, 접근 제...

CVE-2026-25769

CVE-2026-25769 CVE-2026-25769とは何か？ CVE-2026-25769は、脅威の防止、検出、対応に使用されるオープンソースのセキュリティプラットフォームであるWazuhにおける、重大なリモートコード実行（RCE）の脆弱性です。 Wazuhとは何か？ Wazuhは、脅威の防止、検出、対応に使用される無料のオープンソースセキュリティプラットフォームです。セキュリティ情報およびイベント管理（SIEM）および拡張検出および対応（XDR）ソリューションとして、企業全体で広く導入されています。 CVE-2026-25769の根本原因は何か？...

kubescape v4.0.13

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

CVE-2026-73264

Prowler (cloud security platform) contains an SSRF risk prior to version 5.33.1. An authenticated user with Lighthouse provider configuration access could supply an unvalidated base_url for the openai_compatible provider via POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/...

PT-2026-71084

Name of the Vulnerable Software and Affected Versions Prowler versions prior to 5.36.0 Description The Kubernetes provider connection test fails to properly validate kubeconfig content containing a legacy GCP auth-provider. Specifically, the kubeconfig contains exec auth function in...

CVE-2026-17561 Unauthenticated RCE in Innotim Software's Logsign SIEM

Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: before 6.4.115...

EUVD-2026-47853

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with access to the physical...

The vulnerability in the virtual machine of the cloud security platform Palo Alto Networks Cortex XDR Broker VM, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the virtual machine on Palo Alto Networks Cortex XDR Broker VM in cloud security platforms relates to insecure privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

New Forrester Total Economic Impact™ study projects a 124% ROI from unifying with Microsoft Security

Across many industries, organizations are unifying security and putting AI agents to work. Security teams are utilizing agents that reason, decide, and act on their behalf, under their governance. At Microsoft, we see this firsthand—more than 80% of the Fortune 500 are already using AI.1 The...

EUVD-2026-36550

An incorrect authorization vulnerability in MISP allows an organization administrator to target site administrator accounts belonging to the same organization through the administrative email functionality. The affected code restricted organization administrators to users within their own...

PT-2026-54541

Уязвимость плагина CommvaultSecurityIQ платформ безопасности Cortex XSOAR и Cortex XSIAM связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие ограничения безопасности...

CVE-2026-11226

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-09 18:00:00+00:00| seen|...

OWASP FinBot CTF 0.2

FinBot is an Agentic AI security CTF platform from OWASP. Interact with AI agents, exploit real vulnerabilities, and learn to secure agentic systems. All from your browser...

DarkMoon - the Open-Source AI-Powered Autonomous Penetration Testing Platform

DarkMoon is an automated penetration testing tool that orchestrates complete security assessments using artificial intelligence security agents. Built as an open-source cybersecurity tool, it enables organizations to run professional-grade vulnerability assessments without manual intervention...

CyberAId: AI-Driven Cybersecurity for Financial Service Providers

European financial institutions face mounting regulatory pressure while their security operations centres remain constrained not by data or staffing but by reasoning capacity: enterprise SIEMs cover only a fraction of MITRE ATT&CK techniques, two thirds of SOC teams cannot keep pace with alert...

CTEM Platform: Operationalize All 5 Gartner CTEM Stages With Uni5 Xposure

Your security team runs scans, generates reports, and hands them to IT. Three weeks later, maybe some patches get applied. Meanwhile, attackers exploit the exposures you missed. Uni5 Xposure is the only CTEM platform that unifies all 5 Gartner CTEM stages, from scoping through mobilization, in a...

ai-security-poc

AI Security POC A fully containerised proof-of-concept for te...

The vulnerability of the Microsoft Teams integration package with the security platforms Cortex XSOAR and Cortex XSIAM arises from improper verification of the cryptographic signature. This allows an attacker to gain access to read and modify data.

The vulnerability of the Microsoft Teams integration package with the security platforms Cortex XSOAR and Cortex XSIAM is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker operating remotely to gain read and modify access to data...

CVE-2026-0234 Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...