kubeshark

Network Observability for SREs & AI Agents Live Demo · Docs Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics. What you can do: Download Retrospective PCAPs — cluster-wide packet...

conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

tracee

Antes de continuar, por favor considera darnos una estrella en GitHub ⭐️. ¡Gracias! Acerca de Tracee Tracee es una herramienta de seguridad y observabilidad en tiempo de ejecución que te ayuda a entender cómo se comportan tu sistema y tus aplicaciones. Utiliza la tecnología eBPF para acceder a tu...

Aegis

AEGIS Independent, OS-level observability for AI coding agents Watches what AI agents actually do on your machine — processes, files, network — from outside the agents, no hooks required. AEGIS is an independent, OS-level observer for AI agents. It watches agent processes, file access, and networ...

tetragon

El nuevo componente Tetragon de Cilium permite una potente observabilidad de seguridad y aplicación en tiempo real basada en eBPF. Tetragon detecta y puede reaccionar ante eventos de seguridad significativos, como Eventos de ejecución de procesos Actividad de llamadas al sistema Actividad de E/S...

agensic

Know what ran, where, when and who executed it The missing observability layer for AI-powered terminal workflows Signed Provenance Tracked Sessions Git Time Travel Replayable Sessions IDE style Tab Autocomplete Agensic upgrades your existing terminal workflow for the AI era. It is built for...

cloud-doctor

cloud-doctor Un solo comando evalúa toda tu cuenta en la nube: configuraciones incorrectas, falta de observabilidad y postura de seguridad, clasificadas por las cinco cosas que arreglar primero. Apúntalo a AWS, Cloudflare, Vercel, Supabase, Render, Fly.io o Railway y devuelve una puntuación, lo q...

kestrel

The kernel-level visibility of Falco, with the live UI the kernel-native tools don't ship. Quickstart · Spec · Views · Roadmap Kestrel traces kernel events process exec, file access, network connections with an eBPF agent and streams them to a SvelteKit web app that renders a live activity feed,...

CVE-2026-89060

A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference ClusterLogForwarder or OpenTelemetryCollector resources outside the permitted namespace. If those resources reference...

CVE-2026-89060 Stolostron/multicluster-observability-addon: cross-namespace secret disclosure in multicluster-observability-addon via unvalidated configuration references

A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference ClusterLogForwarder or OpenTelemetryCollector resources outside the permitted namespace. If those resources reference...

CVE-2026-89060

Stolostron multicluster-observability-addon is affected by a cross-namespace secret disclosure flaw. A managed-cluster identity can reference configuration resources outside its designated namespace, allowing an attacker-controlled managed cluster to access sensitive hub Secrets . The CVSS 3.1 sc...

EUVD-2026-75948

A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference ClusterLogForwarder or OpenTelemetryCollector resources outside the permitted namespace. If those resources reference...

CVE-2026-89060

A cross-namespace authorization flaw in multicluster-observability-addon allows a user with permission to modify a managed cluster’s ManagedClusterAddOn configuration to reference ClusterLogForwarder or OpenTelemetryCollector resources outside the permitted namespace. If those resources reference...

Kibana 9.1.7 < 9.4.5 / 9.5.x < 9.5.1 DoS (ESA-2026-115)

The version of Kibana installed on the remote host is 9.1.7 or later prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-115 advisory. - Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulatio...

CVE-2025-27591-PoC

CVE-2025-27591-PoC CVE-2025-27591 PoC — Below Local Privilege Escalation This repository contains a Proof of Concept PoC demonstrating the local privilege escalation vulnerability identified as CVE-2025-27591 in Below , a Linux system observability tool. Made for...

CVE-2026-19283

IBM Instana Agent Operator (part of IBM Observability with Instana, builds 1.0.303 through 1.0.323) is vulnerable to information disclosure caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system namespace into an attacker-contro...

CVE-2026-72644

Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...

EUVD-2026-69563

Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...

CVE-2026-72644 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...

CVE-2026-72644 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248 in Kibana can lead to a denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only the low-privileged feature access required to use the Observability AI Assistant can submit a specially crafted request that produces an unhandled error...