red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

legitify

Rafforza la postura di sicurezza del tuo sistema di gestione del codice sorgente! Rileva e correggi facilmente errori di configurazione, problemi di sicurezza e conformità su tutte le risorse GitHub e GitLab 🔥 da Legit Security. Ti chiedi cosa fa Legit Security?...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

opencspm

OpenCSPM Open Cloud Security Posture Management Gestão de Postura de Segurança em Nuvem Aberta, OpenCSPM, é uma plataforma de código aberto para obter uma visão mais aprofundada da sua configuração e metadados da nuvem, ajudando a entender e reduzir riscos ao longo do tempo. Para quem é o OpenCSP...

aws-recon

AWS Recon Uno strumento di raccolta inventario orientato alla sicurezza AWS, multi-threaded, scritto in Ruby. Questo strumento è stato creato per facilitare la raccolta efficiente di una grande quantità di attributi e metadati delle risorse AWS. Mira a raccogliere quasi tutto ciò che è rilevante...

honeypot

🍯 Honeypot-Forschungsprojekt Was ist ein Honeypot Ein Honeypot ist ein Computersystem oder Netzwerk, das absichtlich verwundbar für Hacker gelassen wird, um potenzielle Sicherheitsbedrohungen zu erkennen, zu analysieren und darauf zu reagieren. Das Ziel eines Honeypots ist es, Informationen über...

internal-security-detect

Rilevamento della Sicurezza Interna tramite Safebase I portali SafeBase esposti servono due tipi di pubblico contemporaneamente: i potenziali clienti che necessitano di prove della tua postura di sicurezza e i ricercatori di sicurezza blue team e red team. Ogni spunta verde rivela un controllo ch...

ElectricEye

ElectricEye ElectricEye ist ein Multi-Cloud-, Multi-SaaS-Python-CLI-Tool für Asset Management, Sicherheitsposturmanagement und Angriffsflächenüberwachung, das hunderte von Diensten und Bewertungen unterstützt, um Ihre CSP- und SaaS-Umgebungen zu härten, mit Kontrollen, die mehr als 20...

cloud-doctor

cloud-doctor Un comando valuta l’intero account cloud — misconfigurazioni, mancanza di osservabilità e postura di sicurezza, classificati in base alle prime cinque cose da correggere. Puntalo su AWS, Cloudflare, Vercel, Supabase, Render, Fly.io o Railway e restituisce un punteggio, cosa è rotto e...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: trillian, cloud-sql-proxy, datadog-agent, opentelemetry-collector-contrib, prometheus-pushgateway, istio, telegraf, jaeger, minio, mcp-grafana, aws-otel-collector, tempo, fluent-bit-plugin-loki, opentelemetry-operator, k8sgpt, metrics-server, opentelemetry-collector,...

Qualys Expands Serverless Security with Vulnerability Scanning for AWS Lambda

Key Takeaways Qualys now delivers automated AWS Lambda vulnerability scanning , extending serverless security beyond posture checks CSPM into workload-level risk visibility. CSPM alone only catches misconfigurations excessive permissions, exposure, logging, encryption — it can't detect vulnerable...

Revive Adserver 6.0.6 Security Auditor

This script is a defensive security auditing utility designed to identify exposed services, review configuration weaknesses, and collect security posture information from a Revive Adserver deployment without performing direct exploitation...

PT-2026-45725

Name of the Vulnerable Software and Affected Versions Apache Kafka affected versions not specified Description An improper authorization issue exists in the 'CONSUMER GROUP DESCRIBE' 69 API. The implementation validates the DESCRIBE operation on the GROUP resource, which contradicts the READ...

Cross-Vendor Sola ISPM Benchmark: Evaluating Agentic AI for Federated Identity Security Reasoning

The rapid proliferation of multi-cloud and SaaS platforms has transformed Identity Security Posture Management ISPM into a fundamentally cross-vendor challenge: critical misconfigurations and privilege escalation paths increasingly span multiple identity providers, infrastructure layers, and...

Lessons from Penetration Tests on Large-Scale Agent Systems

As AI systems gain increasing autonomy and execution capability, the number of discovered security vulnerabilities continues to rise. However, many of these vulnerabilities are not fundamentally novel, but instead reflect recurring classes of weaknesses long observed in prior computing systems...

CSPM vs Exposure Management: Key Differences

Your CSPM tool flags 4,000 misconfigurations every month. Your team remediates 400. Attackers only need one. That gap between what your posture tools report and what actually puts your organization at risk is exactly where exposure management picks up. Book a demo to see how Hive Pro's Uni5 Xposu...

On Microsoft’s Lousy Cloud Security

ProPublica has a scoop: In late 2024, the federal government's cybersecurity evaluators rendered a troubling verdict on one of Microsoft's biggest cloud computing offerings. The tech giant's "lack of proper detailed security documentation" left reviewers with a "lack of confidence in assessing th...

A Guide to Continuous Monitoring for Cyber Threats

A Guide to Continuous Monitoring for Cyber Threats Most security teams still rely on periodic vulnerability scans and annual penetration tests to assess their risk. The problem? Attackers do not work on your schedule. Between those snapshots, new vulnerabilities emerge, configurations drift, and...

Can the Security Platform Finally Deliver for the Mid-Market?

Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With heightened awareness of supply chain attacks, your customers and business partners are defining the security level you must meet. What if you could be the enabler for your...

A CISO’s Guide to Threat Management Platforms

Attackers don’t see your organization as a list of CVEs. They see a web of interconnected assets, looking for a single weak link that will give them a path to your most valuable data. A traditional vulnerability scanner might miss these dangerous connections, but a threat management platform is...