opencspm

OpenCSPM إدارة الوضع الأمني السحابي المفتوحة OpenCSPM هي منصة مفتوحة المصدر لاكتساب رؤية أعمق في تكوين السحابة والبيانات الوصفية الخاصة بك للمساعدة في فهم وتقليل المخاطر بمرور الوقت. لمن تم تصميم OpenCSPM؟ فرق الأمان التي تدير البنية التحتية في بيئات السحابة والتي تسعى إلى الحصول على رؤية للمخاطر...

legitify

عزز الموقف الأمني لإدارة كود المصدر الخاص بك! اكتشف وأصلح الأخطاء في التهيئة، والمشكلات الأمنية والامتثال عبر جميع أصول GitHub وGitLab الخاصة بك بسهولة 🔥 بواسطة Legit Security. أتساءل ما الذي تفعله Legit Security؟ Legit Security هي حل لإدارة الوضع الأمني للتطبيقات ASPM وأمان سلسلة توريد البرمجيات...

aws-recon

AWS Recon أداة متعددة الخيوط لجمع قوائم جرد AWS موجهة للأمان، مكتوبة بلغة Ruby. تم إنشاء هذه الأداة لتسهيل الجمع الفعّال لعدد كبير من سمات وبيانات وصف موارد AWS. تهدف إلى جمع كل ما هو تقريبًا ذو صلة بتكوين الأمان ووضعية بيئة AWS. الأدوات الحالية مثل AWS Config التي تقوم بجمع الموارد تفتقر إلى...

ElectricEye

ElectricEye ElectricEye هي أداة سطر أوامر CLI مكتوبة بلغة Python وتعمل عبر السحابات المتعددة وSaaS المتعددة، مخصصة لإدارة الأصول، وإدارة الوضع الأمني، ومراقبة سطح الهجوم. تدعم المئات من الخدمات وعمليات التقييم لتعزيز بيئات مزودي خدمات السحابة وSaaS لديك، مع ضوابط مُعيّنة لأكثر من 20 إطارًا صناعيً...

honeypot

🍯 Projet de recherche sur les honeypots Qu'est-ce qu'un honeypot ? Un honeypot est un système informatique ou un réseau volontairement laissé vulnérable aux pirates afin de détecter, d'analyser et de répondre aux menaces de sécurité potentielles. L'objectif d'un honeypot est de recueillir des...

internal-security-detect

Détection de sécurité interne via Safebase Les portails SafeBase exposés servent deux publics à la fois : les prospects qui ont besoin de preuves de votre posture de sécurité, et les chercheurs en sécurité blue et red teams. Chaque coche verte révèle un contrôle qui existe soi-disant aujourd'hui ...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

cloud-doctor

cloud-doctor أمر واحد يقيم حساب السحابة بالكامل — التكوينات الخاطئة، ونقص المراقبة، والحالة الأمنية، مرتبة وفقًا لأهم خمسة أشياء يجب إصلاحها أولاً. وجِّهه إلى AWS، Cloudflare، Vercel، Supabase، Render، Fly.io، أو Railway وسيعود بتقييم، وما هو مكسور، وإصلاح لكل مشكلة — مكتفٍ ذاتيًا بحيث يمكن تسليم...

node9-proxy v1.67.3

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with Claude Code · Codex CLI · Antigravity agy ...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: mc, jaeger, minio-operator, amazon-cloudwatch-agent-operator, aws-otel-collector, metrics-server, istio, splunk-otel-collector, trillian, telegraf, certificate-transparency, datadog-agent, prometheus-pushgateway, mcp-grafana, opentelemetry-collector-contrib,...

Qualys Expands Serverless Security with Vulnerability Scanning for AWS Lambda

Key Takeaways Qualys now delivers automated AWS Lambda vulnerability scanning , extending serverless security beyond posture checks CSPM into workload-level risk visibility. CSPM alone only catches misconfigurations excessive permissions, exposure, logging, encryption — it can't detect vulnerable...

node9-proxy v1.67.0

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with Claude Code · Codex CLI · Antigravity agy ...

node9-proxy v1.66.0

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with Claude Code · Codex CLI · Antigravity agy ...

node9-proxy v1.65.1

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with Claude Code · Codex CLI · Antigravity agy ...

EUVD-2026-48727

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...

SQUIRO: A Framework for Security-Aware Quantum-Classical Scheduling on Kubernetes

Distributed infrastructure schedulers traditionally optimise capacity, locality, and cost, but provide limited support for security posture and emerging quantum-classical workloads. As hybrid quantum-classical computing becomes increasingly practical and post-quantum security requirements begin t...

Evaluating Frontier AI Agents As Autonomous Clinical Security Auditors

Clinical AI models can expose patients to harm when adversarial vulnerabilities go undetected, yet formal security auditing requires statistical expertise, specialized tools, and significant time. We present an open evaluation task, built on METR Task Standard v0.3.0, that tests whether frontier ...

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

AI models have reached a threshold where they exhibit expert-level capabilities in vulnerability discovery, exploit chaining, and proof-of-concept generation. As AI-powered vulnerability discovery matures, every organization that builds or runs software at scale needs continuous proactive...

5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management

Cloud security posture management CSPM is being redefined as two forces collide: Cloud environments are becoming more interconnected—spanning workloads, identities, data, APIs, and development pipelines—while security teams must reduce risk faster with fewer tools and less time. Frost & Sullivan’...