FEATURED REPORT
New Chainguard Images November 2024: Bun, CockroachDB, Open Liberty
Check out the new zero-CVE Chainguard Images built in November 2024, including offerings for Bun, CockroachDB, Open Liberty, Selenium, and more.
Category index
Cyber Security
3862 articles
3862 ARTICLES
CYBERSECURITY
Unpacking Diicot - Evolving Campaign Targeting Linux Environments
Wiz Threat Research uncovered a new malware campaign targeting Linux environments attributed to the Diicot threat group.
1 MIN READ
arrow_forward
CYBERSECURITY
Panic! At The Distro: A Study of Malware Prevention in Linux Distributions
Chainguard wanted to know more about malware prevention in Linux distributions. So we did a study to see what maintainers are doing about it. See the results.
1 MIN READ
arrow_forward
CYBERSECURITY
Under the Radar: Exploring Spring Boot Actuator Misconfigurations
Wiz Threat Research investigates misconfigurations in Spring Boot Actuator’s endpoints that can leak environment variables, passwords, and API keys, and even lead to remote code execution.
1 MIN READ
arrow_forward
CYBERSECURITY
New Developments in LLM Hijacking Activity
Discover the latest in LLM hijacking activity, including a dive into the JINX-2401 campaign targeting AWS environments with IAM privilege escalation tactics.
1 MIN READ
arrow_forward
CYBERSECURITY
Advanced Schema Management with Atlas & Prisma ORM
Use Atlas with Prisma ORM 7 for advanced schema management: CI/CD linting, schema monitoring, versioning, and low-level features like views and triggers.
1 MIN READ
arrow_forward
CYBERSECURITY
Top AWS re:Invent Announcements for Security Teams in 2024
AWS re:Invent 2024 brought an avalanche of announcements, with over 500 updates since November. Let’s spotlight the most impactful ones for security teams, from Resource Control Policies to centrally managed root access.
1 MIN READ
arrow_forward
CYBERSECURITY
Snyk’s risk-based approach to prioritization
With Snyk’s approach and Snyk AppRisk, implementing risk-based prioritization is easy. Here’s how Snyk’s developer-first, holistic approach works.
1 MIN READ
arrow_forward
CYBERSECURITY
Ultralytics AI Pwn Request Supply Chain Attack
Discover the details of the Ultralytics AI supply chain attack, a sophisticated two-phase breach targeting PyPI releases and GitHub Actions with cryptocurrency mining malware. Learn how to detect exposure, secure your projects, and protect against future vulnerabilities using tools like Snyk.
1 MIN READ
arrow_forward
CYBERSECURITY
A Cloud-First Approach to Vulnerability Remediation: A Holistic Approach
Learn about how Wiz helps organizations operationalize vulnerability remediation with true code-to-cloud visibility
1 MIN READ
arrow_forward
CYBERSECURITY
How to Mitigate SSRF Vulnerabilities in Go
Dive into Server-Side Request Forgery (SSRF) vulnerabilities in Go applications and explore mitigation techniques. Learn how to secure your Go code and leverage tools like Snyk Code for proactive security.
1 MIN READ
arrow_forward
CYBERSECURITY