cloud-sniper

Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...

IRM

IRM-2022 인시던트 대응 방법론 2022 CERT Societe Generale은 CERT aDvens와 협력하여 사용하기 쉬운 실무형 인시던트 모범 사례를 제공합니다. 이 치트 시트는 인시던트 처리에 전념하며 CERT 팀이 관여할 수 있는 여러 분야를 다룹니다. 저희가 흔히 다루는 각 보안 인시던트에 대해 하나의 IRM이 존재합니다. CERT Societe Generale은 일부 IRM에 주요 영감의 원천이 되어 주신 SANS와 Lenny Zeltser에게 감사의 말씀을 전합니다. 또한 협업과 프랑스어 번역에 기여해 주...

Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive

Security teams have never had more IP data at their disposal. Every day, analysts ingest enrichment feeds, geolocation data, reputation scores, telemetry, and threat intelligence from a growing ecosystem of vendors and platforms. Yet despite this abundance of information, many organizations...

The API Weak Spot: Study Shows AI Is Compounding Security Pressures

Nearly 90% of businesses faced API security incidents last year at an average cost of US$700,000. A new study shows how AI is increasing API risks...

Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis

Agent Skills is an emerging open standard that defines a modular, filesystem-based packaging format enabling LLM-based agents to acquire domain-specific expertise on demand. Despite rapid adoption across multiple agentic platforms and the emergence of large community marketplaces, the security...

Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors

In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining. In August 2025, malicious Nx packages leaked 2,349 GitHub, cloud, and AI credentials. Throughout 2024, ChatGPT vulnerabilities allowed...

New IDC research highlights a major cloud security shift

Cloud security is at a tipping point. While moving to the cloud powers both growth and speed for organizations, it can also bring new risks. According to IDC’s latest research, organizations experienced an average of nine cloud security incidents in 2024, with 89% reporting a year-over-year...

New IDC research highlights a major cloud security shift

Cloud security is at a tipping point. While moving to the cloud powers both growth and speed for organizations, it can also bring new risks. According to IDC’s latest research, organizations experienced an average of nine cloud security incidents in 2024, with 89% reporting a year-over-year...

EUVD-2022-45386

Malicious code in bioql PyPI...

2025 Cybersecurity Reality Check: Breaches Hidden, Attack Surfaces Growing, and AI Misperceptions Rising

Bitdefender's 2025 Cybersecurity Assessment Report paints a sobering picture of today's cyber defense landscape: mounting pressure to remain silent after breaches, a gap between leadership and frontline teams, and a growing urgency to shrink the enterprise attack surface. The annual research...

CVE-2022-50031

creationtimestamp| type| source ---|---|--- 2025-08-07 02:11:21+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lvrnwmnqqo2v 2025-08-07 02:13:24+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lvrnwriorv42...

CVE-2025-26469

creationtimestamp| type| source ---|---|--- 2025-07-28 13:56:19+00:00| seen| https://bsky.app/profile/potato.software/post/3luzqnz3jio2m 2025-07-28 15:37:03+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3luzwc47lt52v...

Evasion under Blockchain Sanctions

Sanctioning blockchain addresses has become a common regulatory response to malicious activities. However, enforcement on permissionless blockchains remains challenging due to complex transaction flows and sophisticated fund-obfuscation techniques. Using cryptocurrency mixing tool Tornado Cash as...

GHSA-JFH8-C2JP-5V3Q

creationtimestamp| type| source ---|---|--- 2025-07-16 08:23:40+00:00| seen| https://gist.github.com/safer-bot/ef60ba5b8082b173c2019a18ade46e96 2025-07-16 09:35:26+00:00| seen| https://gist.github.com/safer-bot/36999e3d8163b7f4c1934f5db4c70cc6 2025-07-16 09:45:24+00:00| seen|...

GHSA-GM62-RW4G-VRC4

creationtimestamp| type| source ---|---|--- 2025-07-16 03:41:01+00:00| seen| https://gist.github.com/safer-bot/1311a1d6fbeee3ebfc44b603cc3c1e8e 2025-07-16 03:46:52+00:00| seen| https://gist.github.com/safer-bot/8f576481ae0b25c2f9292db6db5e2aa7 2025-07-16 04:20:43+00:00| seen|...

GHSA-PR98-23F8-JWXV

creationtimestamp| type| source ---|---|--- 2025-07-16 03:20:51+00:00| seen| https://gist.github.com/safer-bot/4a0c1681f4dce611ef9b2d8ad2491ce6 2025-07-16 03:41:01+00:00| seen| https://gist.github.com/safer-bot/1311a1d6fbeee3ebfc44b603cc3c1e8e 2025-07-16 03:46:52+00:00| seen|...

GHSA-GWRP-PVRQ-JMWV

creationtimestamp| type| source ---|---|--- 2025-07-16 03:12:53+00:00| seen| https://gist.github.com/safer-bot/48d4d415e550f60b744171da16b87501 2025-07-16 03:28:42+00:00| seen| https://gist.github.com/safer-bot/685bc6d74a8ba9535ec0a502d8e83d05 2025-07-16 03:44:39+00:00| seen|...

SoK: Stablecoin Designs, Risks, and the Stablecoin LEGO

Stablecoins have become significant assets in modern finance, with a market capitalization exceeding USD 246 billion May 2025. Yet, despite their systemic importance, a comprehensive and risk-oriented understanding of crucial aspects like their design trade-offs, security dynamics, and...

CVE-2021-42106

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the abili...

CVE-2025-0855

creationtimestamp| type| source ---|---|--- 2025-05-06 23:22:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15237 2025-05-07 00:03:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lok3r3qtkse2 2025-05-07 02:21:07+00:00| seen|...