23 matches found
dependency-track
OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...
amlsec
Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...
amlsec
使用基于AutomationML的工程数据自动识别信息物理生产系统中的安全风险 该原型实现了以下两篇论文中提出的方法： 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. 使用基于AutomationML的工程数据自动识别安全风险. IEEE Transactions on Dependable and Secure Computing. 2. Eckhart, M., Ekelhart, A., Biffl S., Lüder A., & Weippl, E. R. 2022...
PyRIT
Herramienta Python de Identificación de Riesgos para IA generativa PyRIT La herramienta Python de Identificación de Riesgos para IA generativa PyRIT es un marco de código abierto creado para capacitar a los profesionales de la seguridad y a los ingenieros a identificar riesgos de forma proactiva ...
kubeeye
English | 中文 KubeEye 是为 Kubernetes 设计的云原生集群巡检工具，用于根据自定义规则发现 Kubernetes 集群中存在的问题及风险。 快速开始 安装 可从 Releases 中下载安装包（其中包含helm chart，demo rules 以及 供离线环境部署的镜像） VERSION=v1.0.3 wget https://github.com/kubesphere/kubeeye/releases/download/$VERSION/kubeeye-offline-$VERSION.tar.gz tar -zxvf...
PyRIT
Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. !WARNING PyRIT has moved! Please see...
PyRIT v1.1.0
Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. Check out our website for more information...
EUVD-2023-3049
Malicious code in bioql PyPI...
Towards Scalable and Interpretable Mobile App Risk Analysis Via Large Language Models
Mobile application marketplaces are responsible for vetting apps to identify and mitigate security risks. Current vetting processes are labor-intensive, relying on manual analysis by security professionals aided by semi-automated tools. To address this inefficiency, we propose Mars, a system that...
Developing a Risk Identification Framework for Foundation Model Uses
As foundation models grow in both popularity and capability, researchers have uncovered a variety of ways that the models can pose a risk to the model's owner, user, or others. Despite the efforts of measuring these risks via benchmarks and cataloging them in AI risk taxonomies, there is little...
CGA-9M6F-8G89-5VXR
Bulletin has no description...
CVE-2025-26533 SQL injection risk in course search module list filter
An SQL injection risk was identified in the module list filter within course search...
CVE-2024-54002
Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Performing a login request against the /api/v1/user/login endpoint with a username that exist in the system takes significantly longer than performing the same...
What goes into testing a ship?
TL;DR Testing a ship involves identifying and mitigating cybersecurity risks using the "Identify, Prevent, Detect, Respond, Recover" framework. Guidelines include MSC.42898, BIMCO, IACS UR E26/E27, and ISO standards. New builds and existing vessels require proper documentation and network securit...
Microsoft Releases PyRIT - A Red Teaming Tool for Generative AI
Microsoft has released an open access automation framework called PyRIT short for Python Risk Identification Tool to proactively identify risks in generative artificial intelligence AI systems. The red teaming tool is designed to "enable every organization across the globe to innovate responsibly...
Command Execution Vulnerability in Elkeid of Beijing Jitterbug Information Service Co.
Elkeid is a cloud-native host-based security intrusion detection and risk identification solution. A command execution vulnerability exists in Elkeid by Beijing Jitterbug Information Service Co. that can be exploited by an attacker to execute arbitrary commands with elevated privileges on HOST...
How CNAPPs identify and prioritize excessive risk in a single platform, according to Gartner®
Insights from the March 2023 Gartner Market Guide for CNAPP...
US Websites Targeted by 40% of the Bad Bot Traffic Worldwide
Bad bot attacks are often the first indicator of fraudulent activity targeting your website. This activity may be over-the-top, like validating stolen user credentials and credit card information to later be sold on the dark web or scraping proprietary data to gain a competitive advantage. Bot...
Insider Threat: Employees indicted for stealing $88 million of license keys
Two insiders and an accomplice were indicted on Tuesday for multiple counts of fraud. According to documents unsealed by the Wester District of Oaklahoma, a grand jury charged Raymond Bradley Pearce aka Brad Pearce, a former employee of Avaya; Dusti O. Pearce, his wife; and Jason M. Hines aka Joe...
How to improve risk management using Zero Trust architecture
“Compliance is all about risk management and lessening risk, and the same is true of Zero Trust.” —Abbas Kudrati Whats risk management and why is it important? Risk management, the process of developing a strategy for addressing risk throughout its lifecycle, normally involves four phases: risk...