cornucopia

Progetto OWASP Cornucopia OWASP Cornucopia è un meccanismo sotto forma di gioco di carte per aiutare i team di sviluppo software a identificare i requisiti di sicurezza nei processi di sviluppo Agile, convenzionali e formali. È indipendente dal linguaggio, dalla piattaforma e dalla tecnologia...

ccs

Code-Anmeldedaten-Scanner Dieses Skript soll eine große, vielfältige Codebasis nach fest codierten Anmeldedaten oder in Konfigurationsdateien vorhandenen Anmeldedaten durchsuchen. Diese stellen ein ernstes Sicherheitsproblem dar und sind äußerst schwer zu erkennen und zu verwalten. Der spezifisch...

ConcoLLMic

ConcoLLMic: Agentische konkolische Ausführung Veröffentlichung : IEEE S&P 2026 ConcoLLMic ist der erste sprach- und theorieunabhängige konkolische Ausführer, der von LLM-Agenten betrieben wird. Im Gegensatz zu traditionellen symbolischen Ausführungswerkzeugen, die sprachspezifische...

MalTotal: Cost-Effective and Language-Agnostic Malicious Code Poisoning Detection for Millions of Repositories

The widespread adoption of open source software OSS has introduced significant security risks, with malicious code poisoning attacks increasingly targeting public package registries and open-source platforms. Existing detection approaches, including heuristic-, learning-, and LLM-based methods,...

[SECURITY] Fedora 42 Update: moby-engine-29.1.3-1.fc42

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...

MalCodeAI: Autonomous Vulnerability Detection and Remediation Via Language Agnostic Code Reasoning

The growing complexity of cyber threats and the limitations of traditional vulnerability detection tools necessitate novel approaches for securing software systems. We introduce MalCodeAI, a language-agnostic, multi-stage AI pipeline for autonomous code security analysis and remediation. MalCodeA...