33 matches found
Elkeid
Elkeid - Bytedance Cloud Workload Protection Platform English | 简体中文 Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices. With the business...
rasputin
RASPutin الموارد والأوراق البحثية المتعلقة بمؤتمراتي وعملي على unRASPs. هذا العمل قيد التقدم، يرجى التحلي بالصبر : لا تتردد في المساهمة / التواصل معي / إرسال طلبات السحب PR! المحاضرات Insomni'hack 2022 - صياغة مطرقة ذهبية ضد حمايات تطبيقات أندرويد هذه المحاضرة هي الأولى من سلسلة جديدة. الشرائح...
JYso
JYso It can be used as a tool for ysoserial and JNDIExploit at the same time, and has the bypass function of multiple JNDI high versions, WAF, and RASP 🚀 Getting Started Guide 📢 Please take a moment to read this document, it will help you quickly get familiar with JYso! 🧐 Use the Documentation...
cloudrasp-log4j2
CloudArmor · Runtime Application Self-Protection Module - Log4j2 Version 简体中文 This project is a local version from CloudArmor specifically built for defending Log4j2 CVE-2021-44228 . No network connection is required to run this project. Please DO TESTING before deploying it to production...
NodeSecurityShield
Node Security Shield Node Security Shield NSS is an Open source Runtime Application Self-Protection RASP tool which aims at bridging the gap for comprehensive NodeJS security by enabling Developer and Security Engineer to declare what resources an application can access. Inspired by the Log4Shell...
EUVD-2024-26213
Malicious code in bioql PyPI...
Understanding and Mitigating the MOVEit Incidents
Over the last several weeks, attackers have taken advantage of vulnerabilities in MOVEit, a popular file transfer application developed by Progress. Cyber attackers have successfully performed ransomware and exfiltrated data by uploading web shells into vulnerable MOVEit instances deployed...
CVE-2023-34362 – MOVEit Transfer – An attack chain that retrieves sensitive information
MOVEit Transfer is a popular secure file transfer solution developed by Progress, a subsidiary of Ipswitch. At the moment, there are more than 2,500 MOVEit Transfer servers that are accessible from the internet, according to Shodan. On May 31, 2023, Progress released a security advisory affecting...
Malicious code in rasp-vault (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617da77b8370755ce77e45af7493864f59db88899f6d19414de75f18b2b166d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-720 Malicious code in rasp-vault (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617da77b8370755ce77e45af7493864f59db88899f6d19414de75f18b2b166d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview rasp-vault is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
How DevOps can protect cloud applications from cyberattacks
Many organizations today are moving away from centralized on-prem operations and towards highly scalable cloud solutions such as Amazon’s AWS Lambda functionality. This provides cost-saving benefits and reduces the overall management of an enterprise tech stack. Cloud computing architecture also...
Imperva Protects from New Spring Framework Zero-Day Vulnerabilities
New zero-day Remote Code Execution RCE vulnerabilities were discovered in Spring Framework, an application development framework and inversion of control container for the Java platform. The vulnerability potentially leaves millions of applications at risk of compromise. In two separate...
RASP: The World Cup’s Last Line of Cyber Defense
No greater sporting event exists that brings the peoples of the world together more effectively than the FIFA World Cup, with the first match kickoff set for Monday, 21 November 2022, in Doha, Qatar, at the Al Bayt stadium in Al Khor. Football fans from all across the globe will pour into the Gul...
How We’re Protecting Customers & Staying Ahead of CVE-2021-44228
CVE-2021-44228 is a high profile vulnerability impacting multiple versions of a widely distributed Java software component, Apache Log4j 2. The specific vulnerability allows for unauthenticated remote code execution. For additional technical information, the team at LunaSec has an excellent...
How RASP Protects Apache Servers from zero-day Path Traversal Attacks (CVE-2021-41773)
In late September of 2021, a path traversal and file disclosure vulnerability was disclosed and reported as CVE-2021-41773 in Apache HTTP Server version 2.4.29. Both Windows and Linux servers are affected. This vulnerability, which occurs via remote code execution RCE, exposes a path traversal bu...
How to mitigate security vulnerabilities automatically with RASP
In a world where DevOps is oiling the wheels of accelerated software development, it’s hardly surprising that automation, code re-use and third-party libraries are integral parts of our high-speed app development cycle. But what happens when the pace of development outstrips security? Or when the...
5 Ways Your Software Supply Chain is Out to Get You, Part 3: Exploit Open Source Libraries
In previous posts, we explained how two kinds of supply chain attack methods, Vendor Compromise and Exploit Third Party Applications, are threatening software supply chains, transferring an extraordinary amount of risk downstream to the organizations and users that trust and depend on them. In th...
How to protect serverless and container applications with RASP
With increased demand for container and serverless technology, the need for enhanced security is inevitable. Learn how to secure serverless and container applications using runtime application self-protection RASP...