366 matches found
owtf
Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...
kube-score
kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...
kube-monkey
kube-monkey는 Kubernetes 클러스터를 위한 Netflix의 Chaos Monkey 구현체입니다. 클러스터의 Kubernetesk8s Pod를 무작위로 삭제하여 장애 복원력이 뛰어난 서비스 개발을 장려하고 검증합니다. Kubernetes Slack의 kube-monkey에 참여하세요. kube-monkey는 평일의 사전 설정된 시간runhour, 기본값은 오전 8시에 실행되며, 같은 날 중 임의의 시점에 무작위 Pod 종료를 겪게 될 Deployment들의 일정을 생성합니다. 무작위 Pod 종료가 발생할 수 있는...
toxiproxy
Toxiproxy Toxiproxy는 네트워크 상태를 시뮬레이션하기 위한 프레임워크입니다. 테스트, CI 및 개발 환경에서 작동하도록 특별히 만들어졌으며, 연결에 대한 결정적 변조를 지원하면서도 무작위 혼란과 사용자 지정도 지원합니다. Toxiproxy는 테스트를 통해 애플리케이션에 단일 실패 지점이 없음을 입증하는 데 필요한 도구입니다. 우리는 2014년 10월부터 Shopify의 모든 개발 및 테스트 환경에서 이를 성공적으로 사용해 왔습니다. 복원력에 대한 자세한 내용은 블로그 게시물blog을 참조하세요. Toxiproxy...
chaosmonkey
Chaos Monkey는 프로덕션 환경에서 실행되는 가상 머신 인스턴스와 컨테이너를 무작위로 종료합니다. 엔지니어가 장애를 더 자주 경험하게 하여 탄력적인 서비스를 구축하도록 유도합니다. Chaos Monkey 사용 방법에 대한 자세한 내용은 문서를 참조하세요. Chaos Monkey는 Chaos Engineering 원칙을 따르는 도구의 예입니다. 요구 사항 이 버전의 Chaos Monkey는 Netflix에서 사용하는 지속적 전달 플랫폼인 Spinnaker와 완전히 통합되어 있습니다. Chaos Monkey를 사용하여...
EUVD-2026-56724
CVET-EOP...
Siemens Desigo CC
SUMMARY OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service DoS or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends to update to the latest...
GO-2026-5815 nebula-mesh: Signed-poll nonce LRU is in-memory and bounded; replay survives restart + eviction in github.com/juev/nebula-mesh
nebula-mesh: Signed-poll nonce LRU is in-memory and bounded; replay survives restart + eviction in github.com/juev/nebula-mesh...
kernel: libceph: make decode_pool() more resilient against corrupted osdmaps
In the Linux kernel, the following vulnerability has been resolved: libceph: make decodepool more resilient against corrupted osdmaps If the osdmap is maliciously corrupted such that the encoded length of cephpgpool envelope is less than what is expected for a particular encoding version,...
Smarter Saboteurs, Better Fixers: Scaling and Security in Linear Multi-Agent Workflows
As LLM-based multi-agent systems MAS are deployed in the wild, the resilience of their collaboration structures against adversarial compromise becomes a critical safety concern. Attackers may leverage prompt-injection or jailbreaking to sabotage individual agents within MAS workflows, but the...
How Leading Organizations Are Turning EDR Into Operational Resilience
Most organizations now recognize that endpoint protection alone is no longer sufficient. That's why adoption of endpoint detection and response EDR has accelerated rapidly in recent years. Organizations understand that modern attacks move faster, evade traditional prevention controls, and require...
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Bluetooth: MGMT: Fix possible UAFs CVE-2025-39981 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr...
DORA Compliance Cybersecurity Guide for Finance
DORA Compliance Cybersecurity: A Practical Guide for Financial Services Teams DORA compliance cybersecurity is now a board-level priority for banks, insurers, investment firms, payment providers, and the ICT providers that support them. The Digital Operational Resilience Act shifts the conversati...
CISO Guide: Building a Business Case for CTEM
Every CISO knows the frustration: you understand the exposure risk facing your organization, you know that a Continuous Threat Exposure Management program would fundamentally change your security posture, and yet, when budget season arrives, CTEM is one of the first line items questioned. Ready t...
Strategic Commitments Shape Collective Cybersecurity under AI Inequality
The growing integration of AI into cybersecurity is reshaping the balance between attackers and defenders. When access to advanced AI-enabled defence tools is uneven, resource-limited defenders may be unable to adopt effective protection, creating persistent system vulnerabilities. We study the...
Scalable and Verifiable Federated Learning for Cross-Institution Financial Fraud Detection
The global financial ecosystem confronts a critical asymmetry: while fraud syndicates operate as borderless, distributed networks, banking institutions remain constrained by regulatory data silos, limiting visibility into cross-institutional threat patterns under strict privacy laws such as GDPR...
A Practical Semi-Quantum Signature Protocol with Improved Eavesdropping Detection
Semi-quantum signature SQS schemes aim to enable quantum signature functionality in scenarios where only a subset of participants possess full quantum capabilities, thereby improving practical deployability while preserving quantum security advantages. Within this framework, we present a practica...
Half-Moon Cookie: Private, Similarity-Based Blocklisting with TOCTOU-Attack Resilience
Blocklisting is a common technique for preventing the use of known malicious content. However, conventional blocklisting infrastructures require either the blocklist to be public or clients to reveal their queries to the blocklist server. In this work, we introduce a private blocklisting framewor...
Windows Persistence Bits Job
This module establishes persistence through a BITS job that downloads and executes a payload. Background Intelligent Transfer Service BITS is a Windows service for transferring files in the background using idle network bandwidth. BITS jobs are persistent and will resume across reboots until...
