open source - Security Ticks

5 free vulnerability scanners you should check out

Don't miss, Hot stuff, News, open source, scanning, software, vulnerability assessment / SecurityTicks

5 free vulnerability scanners you should check out 26/09/2023 at 08:02 By Help Net Security Vulnerability scanners delve into systems to uncover security gaps. The primary mission? To fortify organizations against breaches and shield sensitive data from exposure. Beyond merely pinpointing weaknesses, vulnerability scanning is a proactive measure to anticipate potential attacker entry points. The […]

React to this headline:

5 free vulnerability scanners you should check out Read More »

GitLab fixes critical vulnerability, patch now! (CVE-2023-5009)

DevOps, Don't miss, GitLab, Hot stuff, News, open source, security update, vulnerability / SecurityTicks

GitLab fixes critical vulnerability, patch now! (CVE-2023-5009) 22/09/2023 at 13:31 By Helga Labus GitLab has fixed a critical vulnerability (CVE-2023-5009) in the Enterprise Edition (EE) and Community Edition (CE) of its widely used DevOps platform. They flaw may allow a threat actor to abuse scan execution policies to run pipelines as another user. About the

React to this headline:

GitLab fixes critical vulnerability, patch now! (CVE-2023-5009) Read More »

You can build your own Trezor, but here’s the price — DIY wallet engineer

Hardware Wallet, open source, Technology, Trezor / SecurityTicks

You can build your own Trezor, but here’s the price — DIY wallet engineer 21/09/2023 at 14:02 By Cointelegraph By Helen Partz An electronics design manager who made his own Trezor One has assessed the difficulty of building a DIY crypto wallet from scratch. This article is an excerpt from Cointelegraph.com News View Original Source

React to this headline:

You can build your own Trezor, but here’s the price — DIY wallet engineer Read More »

LLM Guard: Open-source toolkit for securing Large Language Models

Artificial Intelligence, ChatGPT, Don't miss, GitHub, News, open source / SecurityTicks

LLM Guard: Open-source toolkit for securing Large Language Models 19/09/2023 at 07:34 By Mirko Zorz LLM Guard is a toolkit designed to fortify the security of Large Language Models (LLMs). It is designed for easy integration and deployment in production environments. It provides extensive evaluators for both inputs and outputs of LLMs, offering sanitization, detection

React to this headline:

LLM Guard: Open-source toolkit for securing Large Language Models Read More »

PostgreSQL 16: Where enhanced security meets high performance

database management, database security, News, open source, PostgreSQL / SecurityTicks

PostgreSQL 16: Where enhanced security meets high performance 18/09/2023 at 06:03 By Help Net Security PostgreSQL is an open-source object-relational database platform with a track record of over 25 years of ongoing development. Its reputation is solid for its reliability, extensive features, and high performance. PostgreSQL 16 enhances its performance through significant upgrades in query

React to this headline:

PostgreSQL 16: Where enhanced security meets high performance Read More »

Generative AI lures DevOps and SecOps into risky territory

Application Security, Artificial Intelligence, cybersecurity, DevOps, generative AI, Government, News, open source, regulation, report, Sonatype, survey / SecurityTicks

Generative AI lures DevOps and SecOps into risky territory 15/09/2023 at 06:36 By Help Net Security Application security leaders are more optimistic than developer leaders on generative AI, though both agree it will lead to more pervasive security vulnerabilities in software development, according to Sonatype. According to the surveyed DevOps and SecOps leaders, 97% are

React to this headline:

Generative AI lures DevOps and SecOps into risky territory Read More »

CISA Releases Open Source Software Security Roadmap

Application Security, open source / SecurityTicks

CISA Releases Open Source Software Security Roadmap 13/09/2023 at 16:47 By Ionut Arghire CISA details its plan to support the open source software ecosystem and secure the use of open source software within the federal government. The post CISA Releases Open Source Software Security Roadmap appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

CISA Releases Open Source Software Security Roadmap Read More »

LibreOffice: Stability, security, and continued development

cyber resilience, Don't miss, EU, Features, Hot stuff, legislation, LibreOffice, News, open source, product development, vulnerability management / SecurityTicks

LibreOffice: Stability, security, and continued development 07/09/2023 at 08:31 By Zeljka Zorz LibreOffice, the most widely used open-source office productivity suite, has plenty to recommend it: it’s feature-rich, user-friendly, well-documented, reliable, has an active community of developers working on improving it, and it’s free. The suite includes Writer (word processor), Calc (a spreadsheet app), Impress

React to this headline:

LibreOffice: Stability, security, and continued development Read More »

MITRE Caldera for OT now available as extension to open-source platform

CISA, critical infrastructure, DHS, GitHub, HSSEDI, MITRE, News, open source, USA / SecurityTicks

MITRE Caldera for OT now available as extension to open-source platform 06/09/2023 at 09:32 By Help Net Security MITRE Caldera for OT is now publicly available as an extension to the open-source Caldera platform, allowing security teams to run automated adversary emulation exercises that are specifically focused on threats to operational technology (OT). The first

React to this headline:

MITRE Caldera for OT now available as extension to open-source platform Read More »

Micro $3 Bitcoin miners won’t make bank, but that’s not the point: Inventors

Bitaxe, Bitmain Antminers, BitMaker, Close-Source, open source, Portable Bitcoin Miners / SecurityTicks

Micro $3 Bitcoin miners won’t make bank, but that’s not the point: Inventors 05/09/2023 at 06:02 By Cointelegraph By Brayden Lindrea Pocket-sized Bitcoin miners are a stand against the “secrecy and exclusivity” of the Bitcoin mining industry, according to their inventors. This article is an excerpt from Cointelegraph.com News View Original Source React to this

React to this headline:

Micro $3 Bitcoin miners won’t make bank, but that’s not the point: Inventors Read More »

Reaper: Open-source reconnaissance and attack proxy workflow automation

Don't miss, Ghost Security, GitHub, News, open source, software / SecurityTicks

Reaper: Open-source reconnaissance and attack proxy workflow automation 05/09/2023 at 06:01 By Mirko Zorz Reaper is an open-source reconnaissance and attack proxy, built to be a modern, lightweight, and efficient equivalent to Burp Suite/ZAP. It focuses on automation, collaboration, and building universally distributable workflows. Reaper is a work in progress, but it’s already capable of

React to this headline:

Reaper: Open-source reconnaissance and attack proxy workflow automation Read More »

Polygon makes new sidechain developer stack opensource, supporting ZK-powered Layer 2s on Ethereum

Chain Development Kit, developers, layer 2, open source, Polygon, protocol, scaling, ZK-proof / SecurityTicks

Polygon makes new sidechain developer stack opensource, supporting ZK-powered Layer 2s on Ethereum 01/09/2023 at 17:02 By Cointelegraph By Gareth Jenkinson Polygon’s Chain Development Kit allows developers to freely build, customize and deploy layer 2 chains connected to the wider Ethereum ecosystem. This article is an excerpt from Cointelegraph.com News View Original Source React to

React to this headline:

Polygon makes new sidechain developer stack opensource, supporting ZK-powered Layer 2s on Ethereum Read More »

A closer look at the RFI on open-source software security

cybersecurity, Don't miss, Government, Hot stuff, open source, regulation, software, strategy, Tidelift, Video / SecurityTicks

A closer look at the RFI on open-source software security 30/08/2023 at 07:02 By Help Net Security The U.S. Office of the National Cyber Director (ONCD) released a request for information (RFI) entitled Open-Source Software Security: Areas of Long-Term Focus and Prioritization, which indicates that the U.S. Government’s effort to invest in open-source software and

React to this headline:

A closer look at the RFI on open-source software security Read More »

Velociraptor: Open-source digital forensics and incident response

cybersecurity, digital forensics, GitHub, Incident Response, News, open source / SecurityTicks

Velociraptor: Open-source digital forensics and incident response 30/08/2023 at 06:32 By Help Net Security Velociraptor is a sophisticated digital forensics and incident response tool designed to improve your insight into endpoint activities. Velociraptor enables you to conduct precise and rapid collection of digital forensic data across multiple endpoints simultaneously. Persistently gather events from endpoints, including

React to this headline:

Velociraptor: Open-source digital forensics and incident response Read More »

Customizing LLMs for domain-specific tasks

Artificial Intelligence, cybersecurity, enterprise, generative AI, News, open source, Predibase, Privacy, report / SecurityTicks

Customizing LLMs for domain-specific tasks 28/08/2023 at 06:02 By Help Net Security The expansion of large language models (LLMs) in recent times has brought about a revolutionary change in machine learning processes and has introduced fresh perspectives on the potential of AI, according to Predibase. Based on survey data from organizations experimenting with LLMs, researchers

React to this headline:

Customizing LLMs for domain-specific tasks Read More »

Meta launches community-licensed AI coding tool to the public

ChatGPT, Meta, open source, OpenAI / SecurityTicks

Meta launches community-licensed AI coding tool to the public 24/08/2023 at 21:48 By Cointelegraph By Tristan Greene Code Llama is available for both personal and business use under the Llama2 community license agreement. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Meta launches community-licensed AI coding tool to the public Read More »

Bitwarden launches E2EE Secrets Manager

Bitwarden, credentials, DevOps, Don't miss, Hot stuff, key management, News, open source, software development / SecurityTicks

Bitwarden launches E2EE Secrets Manager 24/08/2023 at 13:24 By Helga Labus Bitwarden, a popular open-source password management service, has released Bitwarden Secrets Manager, an open-source, end-to-end encrypted solution that helps development, IT and DevOps teams store, manage, automate, and share secrets. About Bitwarden Secrets Manager Bitwarden Secrets Manager stores unlimited secrets – database passwords, API

React to this headline:

Bitwarden launches E2EE Secrets Manager Read More »

Kali Linux 2023.3 released: Kali NetHunter app redesign, 9 new tools, and more!

Don't miss, Hot stuff, Kali Linux, Linux, News, OffSec, open source, penetration testing / SecurityTicks

Kali Linux 2023.3 released: Kali NetHunter app redesign, 9 new tools, and more! 24/08/2023 at 09:32 By Help Net Security Offensive Security has released Kali Linux 2023.3, the latest version of its penetration testing and digital forensics platform. New tools in Kali Linux 2023.3 Besides updates to current tools, new versions of Kali typically introduce

React to this headline:

Kali Linux 2023.3 released: Kali NetHunter app redesign, 9 new tools, and more! Read More »

8 open-source OSINT tools you should try

Don't miss, Features, GitHub, Hot stuff, News, open source, OSINT, OWASP, penetration testing, reconnaissance, Shodan, software / SecurityTicks

8 open-source OSINT tools you should try 22/08/2023 at 06:01 By Help Net Security Open-Source Intelligence (OSINT) refers to gathering, assessing, and interpreting public information to address specific intelligence queries. All the tools listed here are available for free. Amass The OWASP Amass project performs network mapping of attack surfaces and external asset discovery using

React to this headline:

8 open-source OSINT tools you should try Read More »

Kubernetes clusters face widespread attacks across numerous organizations

Aqua Security, cybersecurity, Don't miss, Hot stuff, Kubernetes, misconfiguration, open source, threats, Video / SecurityTicks

Kubernetes clusters face widespread attacks across numerous organizations 17/08/2023 at 07:02 By Help Net Security In this Help Net Security video, Assaf Morag, Lead Threat Intelligence Analyst at Aqua Security, discusses research that discovered openly accessible and unprotected Kubernetes clusters belonging to more than 350 organizations, open-source projects, and individuals. At least 60% of these

React to this headline:

Kubernetes clusters face widespread attacks across numerous organizations Read More »