GitHub - Security Ticks

364,000 Impacted by Data Breach at LexisNexis Risk Solutions

Data Breaches, Fraud & Identity Theft, GitHub, LexisNexis, Maine, PII, Ransomware / SecurityTicks

364,000 Impacted by Data Breach at LexisNexis Risk Solutions 2025-05-28 at 19:49 By Ionut Arghire Data broker giant LexisNexis Risk Solutions says personal information was stolen from 364,000 people in a December 2024 data breach. The post 364,000 Impacted by Data Breach at LexisNexis Risk Solutions appeared first on SecurityWeek. This article is an excerpt […]

React to this headline:

364,000 Impacted by Data Breach at LexisNexis Risk Solutions Read More »

Woodpecker: Open-source red teaming for AI, Kubernetes, APIs

Don't miss, GitHub, News, open source, Operant AI, red team, software / SecurityTicks

Woodpecker: Open-source red teaming for AI, Kubernetes, APIs 2025-05-28 at 08:17 By Mirko Zorz Woodpecker is an open-source tool that automates red teaming, making advanced security testing easier and more accessible. It helps teams find and fix security weaknesses in AI systems, Kubernetes environments, and APIs before attackers can exploit them. Key features of Woodpecker

React to this headline:

Woodpecker: Open-source red teaming for AI, Kubernetes, APIs Read More »

GitHub becomes go-to platform for malware delivery across Europe

cybercrime, Europe, generative AI, GitHub, Netskope, News, phishing, report, survey / SecurityTicks

GitHub becomes go-to platform for malware delivery across Europe 2025-05-28 at 07:32 By Help Net Security Phishing has become the go-to method for attackers looking to get past security controls and access sensitive environments in Europe, according to Netskope. Users are now constantly dealing with phishing attempts, which have become so common and credible that

React to this headline:

GitHub becomes go-to platform for malware delivery across Europe Read More »

Hottest cybersecurity open-source tools of the month: May 2025

cybersecurity, Don't miss, GitHub, News, open source, software / SecurityTicks

Hottest cybersecurity open-source tools of the month: May 2025 2025-05-28 at 07:03 By Help Net Security This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments. Vuls: Open-source agentless vulnerability scanner Vuls is an open-source tool that helps users find and manage security vulnerabilities. It was created

React to this headline:

Hottest cybersecurity open-source tools of the month: May 2025 Read More »

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks

Artificial Intelligence, Don't miss, framework, GitHub, Hot stuff, Meta, News, open source, software / SecurityTicks

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks 2025-05-26 at 08:52 By Mirko Zorz LlamaFirewall is a system-level security framework for LLM-powered applications, built with a modular design to support layered, adaptive defense. It is designed to mitigate a wide spectrum of AI agent security risks including jailbreaking and indirect prompt injection,

React to this headline:

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks Read More »

AutoPatchBench: Meta’s new way to test AI bug fixing tools

Artificial Intelligence, Don't miss, GitHub, Meta, News, open source, software / SecurityTicks

AutoPatchBench: Meta’s new way to test AI bug fixing tools 2025-05-21 at 08:02 By Mirko Zorz AutoPatchBench is a new benchmark that tests how well AI tools can fix code bugs. It focuses on C and C++ vulnerabilities found through fuzzing. The benchmark includes 136 real bugs and their verified fixes, taken from the ARVO

React to this headline:

AutoPatchBench: Meta’s new way to test AI bug fixing tools Read More »

Hanko: Open-source authentication and user management

access management, authentication, Don't miss, GitHub, Hanko, Hot stuff, News, open source, software / SecurityTicks

Hanko: Open-source authentication and user management 2025-05-19 at 07:32 By Mirko Zorz Hanko is an open-source, API-first authentication solution purpose-built for the passwordless era. “We focus on helping developers and organizations modernize their authentication flows by migrating users towards passkeys, while still supporting all common authentication methods like email/password, MFA, OAuth, as well as SAML

React to this headline:

Hanko: Open-source authentication and user management Read More »

Cerbos: Open-source, scalable authorization solution

Don't miss, GitHub, News, open source, software / SecurityTicks

Cerbos: Open-source, scalable authorization solution 2025-05-14 at 07:34 By Help Net Security Cerbos is an open-source solution designed to simplify and modernize access control for cloud-native, microservice-based applications. Instead of hardcoding authorization logic into your application, Cerbos lets you write flexible, context-aware access policies using a YAML syntax. These policies are managed separately from your

React to this headline:

Cerbos: Open-source, scalable authorization solution Read More »

SPIRE: Toolchain of APIs for establishing trust between software systems

GitHub, News, open source, software / SecurityTicks

SPIRE: Toolchain of APIs for establishing trust between software systems 2025-05-12 at 08:00 By Help Net Security SPIRE is a graduated project of the Cloud Native Computing Foundation (CNCF). It’s a production-ready implementation of the SPIFFE APIs that handles node and workload attestation to securely issue SVIDs to workloads and verify the SVIDs of other

React to this headline:

SPIRE: Toolchain of APIs for establishing trust between software systems Read More »

Analyze resource-based policy dependencies across your AWS Organizations accounts

Amazon, AWS, cloud security, GitHub, News, open source, software / SecurityTicks

Analyze resource-based policy dependencies across your AWS Organizations accounts 2025-05-09 at 08:02 By Help Net Security Managing multiple AWS accounts in an organization can get complicated, especially when trying to understand how services and permissions are connected. The Account Assessment for AWS Organizations open-source tool helps simplify this process by giving you a central place

React to this headline:

Analyze resource-based policy dependencies across your AWS Organizations accounts Read More »

Autorize: Burp Suite extension for automatic authorization enforcement detection

Don't miss, GitHub, News, open source, penetration testing, software / SecurityTicks

Autorize: Burp Suite extension for automatic authorization enforcement detection 2025-05-07 at 08:02 By Help Net Security Autorize is an open-source Burp Suite extension that checks if users can access things they shouldn’t. It runs automatic tests to help security testers find authorization problems. Autorize installation To use Autorize, you’ll need Burp Suite and Jython. Here’s

React to this headline:

Autorize: Burp Suite extension for automatic authorization enforcement detection Read More »

Vuls: Open-source agentless vulnerability scanner

Don't miss, GitHub, News, open source, scanning, software / SecurityTicks

Vuls: Open-source agentless vulnerability scanner 2025-05-05 at 07:33 By Help Net Security Vuls is an open-source tool that helps users find and manage security vulnerabilities. It was created to solve the daily problems admins face when trying to keep servers secure. Many administrators choose not to use automatic software updates because they want to avoid

React to this headline:

Vuls: Open-source agentless vulnerability scanner Read More »

Hottest cybersecurity open-source tools of the month: April 2025

cybersecurity, Don't miss, GitHub, News, open source, software / SecurityTicks

Hottest cybersecurity open-source tools of the month: April 2025 2025-05-01 at 08:36 By Help Net Security This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments. GoSearch: Open-source OSINT tool for uncovering digital footprints GoSearch is an open-source OSINT tool built to uncover digital footprints linked to

React to this headline:

Hottest cybersecurity open-source tools of the month: April 2025 Read More »

Villain: Open-source framework for managing and enhancing reverse shells

Don't miss, framework, GitHub, News, open source, software / SecurityTicks

Villain: Open-source framework for managing and enhancing reverse shells 2025-04-30 at 08:04 By Mirko Zorz Villain is an open-source Stage 0/1 command-and-control (C2) framework designed to manage multiple reverse TCP and HoaxShell-based shells. Beyond simply handling connections, Villain enhances these shells with added functionality, offering commands and utilities, and allowing for shell sessions sharing across

React to this headline:

Villain: Open-source framework for managing and enhancing reverse shells Read More »

GoSearch: Open-source OSINT tool for uncovering digital footprints

digital forensics, Don't miss, GitHub, Hudson Rock, News, OSINT, penetration testing, software / SecurityTicks

GoSearch: Open-source OSINT tool for uncovering digital footprints 2025-04-28 at 08:01 By Help Net Security GoSearch is an open-source OSINT tool built to uncover digital footprints linked to specific usernames. Designed for speed and accuracy, it lets users quickly track someone’s online presence across multiple platforms. GoSearch incorporates data from Hudson Rock’s Cybercrime Database, offering

React to this headline:

GoSearch: Open-source OSINT tool for uncovering digital footprints Read More »

Files Deleted From GitHub Repos Leak Valuable Secrets

Data leak, Data Protection, GitHub, secrets scanning, secrets sprawl / SecurityTicks

Files Deleted From GitHub Repos Leak Valuable Secrets 2025-04-23 at 16:12 By Ionut Arghire A security researcher has discovered hundreds of leaked secrets by restoring files deleted from GitHub repositories. The post Files Deleted From GitHub Repos Leak Valuable Secrets appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

Files Deleted From GitHub Repos Leak Valuable Secrets Read More »

SWE-agent: Open-source tool uses LLMs to fix issues in GitHub repositories

Artificial Intelligence, Don't miss, GitHub, LLMs, News, open source, software / SecurityTicks

SWE-agent: Open-source tool uses LLMs to fix issues in GitHub repositories 2025-04-23 at 08:36 By Mirko Zorz By connecting powerful language models like GPT-4o and Claude Sonnet 3.5 to real-world tools, the open-source tool SWE-agent allows them to autonomously perform complex tasks: from fixing bugs in live GitHub repositories and solving cybersecurity challenges, to browsing

React to this headline:

SWE-agent: Open-source tool uses LLMs to fix issues in GitHub repositories Read More »

Hawk Eye: Open-source scanner uncovers secrets and PII across platforms

cybersecurity, Don't miss, GitHub, News, open source, scanner, software / SecurityTicks

Hawk Eye: Open-source scanner uncovers secrets and PII across platforms 2025-04-21 at 08:37 By Mirko Zorz Hawk Eye is an open-source tool that helps find sensitive data before it leaks. It runs from the command line and checks many types of storage for PII and secrets: passwords, API keys, and personal information. “Unlike most open-source

React to this headline:

Hawk Eye: Open-source scanner uncovers secrets and PII across platforms Read More »

Attack Flow: Learn how cyber adversaries combine and sequence offensive techniques

cybersecurity, Don't miss, GitHub, MITRE, News, open source, software / SecurityTicks

Attack Flow: Learn how cyber adversaries combine and sequence offensive techniques 2025-04-16 at 08:01 By Help Net Security MITRE’s Attack Flow project aims to translate complex cyber operations into a structured language. By describing how adversaries sequence and combine offensive techniques to reach their objectives, Attack Flow offers defenders, analysts, and decision-makers a tool to

React to this headline:

Attack Flow: Learn how cyber adversaries combine and sequence offensive techniques Read More »

Tirreno: Open-source fraud prevention platform

Don't miss, fraud, GitHub, News, open source, software / SecurityTicks

Tirreno: Open-source fraud prevention platform 2025-04-14 at 08:01 By Mirko Zorz Tirreno is an open-source fraud prevention platform designed as a universal analytics tool to monitor online platforms, web applications, SaaS products, digital communities, mobile apps, intranets, and e-commerce websites. “Our aim is to liberate online fraud protection technologies, making them widely available for organizations

React to this headline:

Tirreno: Open-source fraud prevention platform Read More »