AIOstack

AI 에이전트는 항상 권한이 있는 것처럼 보입니다. AIOStack은 그렇지 않을 때를 알려줍니다. AI 에이전트는 사용자를 대신하여 작업합니다. 실제 자격 증명을 사용하고, 실제 API 호출을 수행하며, 도구를 호출하고, API에 접근하고, 프로덕션 시스템을 건드립니다. 대부분의 보안 도구는 이 활동을 합법적인 것으로 간주합니다. 기술적으로는 그렇기 때문입니다. 실제 문제는 권한 없는 접근만이 아닙니다. 더 큰 문제는 런타임에 권한 있는 접근이 부적절해질 때 입니다. AIOStack은 Aurva의 AI 워크로드를 위한 무료...

sysflow

SysFlow: 클라우드 네이티브 시스템 텔레메트리 파이프라인 이 저장소는 모든 SysFlow 프로젝트에 대한 문서와 이슈 트래커를 호스팅합니다. 빠른 참조 문서 : SysFlow 문서 도움말 : SysFlow 커뮤니티 Slack 이슈 제출 : GitHub 이슈 트래커 설명 출처 : 저장소 README 히스토리 Docker 이미지 : Docker Hub | GHCR SysFlow란? SysFlow 텔레메트리 파이프라인은 클라우드 워크로드를 모니터링하고 성능 및 보안 분석을 생성하기 위한 프레임워크입니다. 이 프로젝트의 목표는...

log4shell-cloud-scanner

.. image:: images/Mitigalogo.png 简介 我们为 DevOps 和安全团队提供脚本，用于识别其 AWS 账户中可能受 Log4j 漏洞 Log4Shell 影响的云工作负载。 我们目前支持 "CVE-2021-44228" 和 "CVE-2021-45046" RCE 漏洞。该脚本使安全团队能够通过对外部 AWS 资产执行漏洞利用来识别它们，从而能够映射它们并快速修补它们。 通用信息 CVE-2021-44228 相关信息：https://nvd.nist.gov/vuln/detail/CVE-2021-44228 CVE-2021-45046...

PacketStreamer

PacketStreamer Deepfence PacketStreamerは、高性能なリモートパケットキャプチャおよび収集ツールです。DeepfenceのThreatStrykerセキュリティ可観測性プラットフォームで使用され、クラウドワークロードからネットワークトラフィックをオンデマンドで収集し、フォレンジック分析を行います。 主な設計目標： 軽量で、キャプチャとストリーミングのみを行い、追加処理は行わない 移植性：仮想マシン、Kubernetes、AWS Fargate で動作。LinuxおよびWindowsに対応 PacketStreamer センサー...

iron-proxy

iron-proxy The problem CI jobs, AI coding agents, and sandboxed containers can make arbitrary outbound requests. A compromised dependency, a prompt injection, or a malicious build step can exfiltrate secrets, phone home, or open a reverse shell. Most teams have zero visibility into what's leaving...

Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.21.2 product release

The components for Red Hat OpenShift for Windows Containers 10.21.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...

Astra Linux – Vulnerability in OVN

A flaw was discovered in the Open Virtual Network OVN. In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from within unprivileged workloads, including virtual machines or containers, which can trigger a denial of...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9558: MDR: Post-upgrade 4.21 to 4.22 DRPolicy validation failure in Metro DR DFBUGS-9404: Backport to...

CVE-2026-15970 L7 intention authorization bypass via custom public listener

Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service proxy is configured with a custom public listener. An authenticated mesh workload may reach HTTP paths that are blocked by a path-based deny intention. This...

Important: Red Hat Security Advisory: RHTAS 1.4.3 - Tech Preview Release Of the Go based Model Transparency CLI

The Tech Preview release of the Go based RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The Go based RHTAS Model Transparency CLI image can be used to sign and verify AI/M...

Important: Red Hat Security Advisory: RHTAS 1.4 - GA Release of Model Transparency 1.0.3

The GA release of the RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads...

Important: Red Hat Security Advisory: RHTAS 1.4 - GA Release of Model Transparency 1.0.2

The GA release of the RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads...

Important: Red Hat Security Advisory: RHTAS 1.4.2 - Tech Preview Release Of the Go based Model Transparency CLI

The Tech Preview release of the Go based RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The Go based RHTAS Model Transparency CLI image can be used to sign and verify AI/M...

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either. Forums are talking, researchers are finding easy cracks, and defenders have more cleanup waiting...

CVE-2026-12039 Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution

Docker Sandboxes sbx enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the host resolver whenever the network is internet-connected, without consulting the policy. A workload inside a sandbox, which t...

PT-2026-50676

Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes sbx fail to re-apply the ICMP egress authorizer to networks rebuilt from disk after a Docker daemon restart. This allows a restart-surviving sandbox to forward ICMP...

Important: Red Hat Security Advisory: RHTAS 1.4 - GA Release of Model Transparency 1.0.1

The GA release of the RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads...

PT-2026-46191

Name of the Vulnerable Software and Affected Versions OpenShift Pipelines operator affected versions not specified Description A flaw in the OpenShift Pipelines operator occurs because the tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue...

Optimize AI Inference: Real-Time NodeBalancers Metrics for AI Workloads

...

KubeSec V1 Kubernetes Scanner

KubeSec is a Kubernetes security auditing tool designed to identify dangerous RBAC permissions, insecure pod configurations, exposed secrets, privileged workloads, risky host mounts, weak network exposure, and cluster hardening weaknesses across Kubernetes environments. performs automated read-on...