cscan

cscan Faraday 지속적 스캐닝 추가 정보: http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html http://blog.infobytesec.com/2015/09/faraday-continuous-scanning.html...

bleah

This repository is DEPRECATED, please usebettercap as this tool has been ported to its BLE modules...

FreeMOCA

악성 코드 분석에서 리플레이 없는 통합을 위한 메모리로서의 지속 학습 궤적 !NOTE 이는 논문 Continual Learning Trajectory as Memory for Replay-Free Consolidation in Malicious Code Analysis 의 공식 구현입니다. FreeMOCA 파이프라인 FreeMOCA는 다음과 같은 과정으로 동작합니다: 1. 작업이 순차적으로 도착하며, 각 작업은 새로운 악성코드 패밀리를 도입합니다. 2. 각 작업의 모델은 이전 작업에서 초기화됩니다warm-start. 이는 파라...

CVE-2026-57546

A Buffer Over-read vulnerability exists in the WLAN HAL component. The flaw occurs during the processing of a continuous receive command when a zero-sized global configuration override is present, leading to a transient Denial of Service (DoS) . No specific software versions or remediation steps ...

EUVD-2026-92981

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

PT-2026-106355

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

sentrygrid

SentryGrid ML 기반 위협 탐지 및 지속적 모니터링 플랫폼으로, 연방 제로 트러스트 아키텍처를 위해 구축되었습니다. OSCAL 네이티브, FedRAMP Moderate 정렬, 해시 체인 감사, 3-모델 이상 징후 앙상블. 빠른 시작 make setup install bun + python deps make dev-up bring up the local stack via docker compose make dev turbo dev across workspaces make smoke end-to-end smoke test...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

ARES

オペレーター主導のレッドチームオーケストレーション & 継続的セキュリティ検証プラットフォーム エンタープライズレッドチーム、MSSP、セキュリティオペレーションセンターが、標的型攻撃エンゲージメントを実行し、決定論的攻撃パスを発見し、決定論的スコープ強制とフェイルクローズド分離制御により防御態勢を継続的に検証できるようにするオープンコアプラットフォーム。 プラットフォームショーケース • なぜARESなのか? • 競合比較マトリクス • アーキテクチャ • MITREマトリクス • クイックスタート • スポンサーシップ • クレジット • ゼロトラストセキュリティ • ドキュメント...

Continuous Assurance of Agentic Security Auditors for Software Delivery Decision Gates

Large language model LLM-based repository auditors are increasingly deployed as security controls within continuous integration CI pipelines, where their findings admit, block, or delay software changes. As Agentic Software Development Life Cycle SDLC Security Controls, their non-deterministic...

DORA Year Two: Can Your SOC Actually See the Attack?

When the Digital Operational Resilience Act DORA became enforceable across the European Union in January 2025, it triggered an administrative sprint. Financial entities spent the first year establishing risk governance, assessing third-party service providers, updating contract clauses, and...

CVE-2026-55060

GoCD , a continuous delivery server, has an authorization bypass in the /go/api/support/process_list endpoint from versions 13.1.0 through 26.1.0 . The endpoint does not enforce its intended administrator-only authorization, allowing an authenticated internal user to view command-line arguments, ...

EUVD-2026-83948

GoCD is a continuous deliver server. From 13.3.0 until 26.1.0, GoCD does not correctly encode and escape malicious material modification comments that mimic the special trackback format used by package materials when rendering the Stage Detail, Job/Build Detail, Value Stream Map, and Pipeline...

CISO's Expert Guide to Agentic Pentesting for Websites

Attackers now weaponize new vulnerabilities in about five days Mandiant, part of Google Cloud. The median organization takes 43 days to patch one Verizon DBIR 2026. A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereferencing in v3djobupdatestats The following kernel error was recently reported by Mesa CI: 800.139824 Unable to handle NULL pointer dereferencing at virtual address 0000000000000588 800.148619...

Astra Linux – Vulnerability in ORC

A stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked into processing a specially crafted file using the affected ORC compiler, arbitrary code may be executed on the developer’s build environment. This may lead to compromise of...

secureCodeBox v5.9.0-rc.0

OWASP secureCodeBox secureCodeBox is a kubernetes based, modularized toolchain for continuous security scans of your software project. Its goal is to orchestrate and easily automate a bunch of security-testing tools out of the box. Overview OWASP secureCodeBox Overview Purpose of this Project...

Your Critical Vulnerabilities Might Not Be Your Biggest Risk

Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually create a path to compromise. A critical vulnerability may look alarming on a scanner report, but if ...

CVE-2026-87063

A flaw was found in konflux-operator-tasks. The Continuous Integration CI process installs the tkn command-line interface CLI from a network download without verifying its integrity through checksums or digital signatures. This vulnerability could allow a compromised distribution channel to...

4 Questions to Ask When Evaluating an Exposure Management Platform

Executive Summary Exposure management platforms are increasingly evaluated based on post-detection actions rather than detection itself. This piece sets out four questions to ask when evaluating one: whether it narrows vulnerabilities to the exploitable using environment context rather than...