ClawGuard

ClawGuard 🛡️ 中文版 Notre projet :https://github.com/SafeAgent-Beihang/clawguard ClawGuard est une boîte à outils de sécurité conçue pour atténuer les risques associés aux agents autonomes, tels que OpenClaw et d'autres entités pilotées par LLM. Alors que les agents gagnent en autonomie pour exécuter...

azazel

Azazel Un traceur de sécurité léger basé sur eBPF, spécialement conçu pour les sandboxes d'analyse de malwares. Déposez un échantillon dans un conteneur isolé, et Azazel capture chaque appel système, accès fichier, connexion réseau et comportement suspect, puis vous livre un flux JSON clair de to...

AIOstack

Les agents IA semblent toujours autorisés. AIOStack vous dit quand ils ne le sont pas. Les agents IA agissent au nom des utilisateurs. Ils utilisent de véritables identifiants, effectuent de véritables appels API, invoquent des outils, accèdent à des API et touchent aux systèmes de production. La...

tarian

تاريان نريد الحفاظ على هذه الأداة مفتوحة المصدر لمكافحة الهجمات على نظام Kubernetes البيئي الذي نحبه. يمكننا مواجهة التهديدات معًا كمجتمع، من خلال المساهمة المستمرة. احمِ تطبيقاتك التي تعمل على Kubernetes من الهجمات الضارة عن طريق التسجيل المسبق لتوقيعات شفرة المصدر، ومراقبة العمليات أثناء التشغي...

Kubernetes Security Scanning: A DevSecOps Guide

A clean container image is not proof of a secure Kubernetes workload. New CVEs, unsafe configurations, and excessive permissions can turn an approved deployment into an active exposure. Contact Hive Pro to review your Kubernetes container security priorities. Kubernetes security scanning is the...

Extend Application Security Visibility from Code to Runtime

...

From Shadow APIs to Shadow AI: How the API Threat Model Is Expanding Faster Than Most Defenses

The shadow technology problem is getting worse. Over the past few years, organizations have scaled microservices, cloud-native apps, and partner integrations faster than corporate governance models could keep up, resulting in undocumented or shadow APIs. We’re now seeing this pattern all over aga...

How Public Container Registries Have Become a Silent Risk Multiplier in a Modern Supply Chain

Key Takeaways Pulling container images from public registries is a trust decision, not a neutral operational step. The impact extends to infrastructure stability, cloud spend, and security risk. Cryptomining is the most common form of malicious abuse in public container images, driven by the ease...

Anota: Identifying Business Logic Vulnerabilities Via Annotation-Based Sanitization

Detecting business logic vulnerabilities is a critical challenge in software security. These flaws come from mistakes in an application's design or implementation and allow attackers to trigger unintended application behavior. Traditional fuzzing sanitizers for dynamic analysis excel at finding...

Scale AI Securely with Qualys TotalAI’s Streamlined Onboarding, Deeper Risk Detection, and Compliance-Ready Reporting

Executive Summary Enterprises are entering a phase where AI systems function as decision engines that shape customer interactions, operational workflows, and business outcomes. This creates a new class of risk that is behavioral, contextual, and dynamic, driven by how models interpret instruction...

MCPGuard : Automatically Detecting Vulnerabilities in MCP Servers

The Model Context Protocol MCP has emerged as a standardized interface enabling seamless integration between Large Language Models LLMs and external data sources and tools. While MCP significantly reduces development complexity and enhances agent capabilities, its openness and extensibility...

SpyChain: Multi-Vector Supply Chain Attacks on Small Satellite Systems

Small satellites are integral to scientific, commercial, and defense missions, but reliance on commercial off-the-shelf COTS hardware broadens their attack surface. Although supply chain threats are well studied in other cyber-physical domains, their feasibility and stealth in space systems remai...