PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Meet Intel: Aikido’s Open Source threat feed powered by LLMs.

aikido.dev | blog | #ai-security | #open-source | #threat-intelligence | #llm | #research | #vulnerability-disclosure | #aikido-intel
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Aikido's Intel is an open-source threat feed powered by LLMs and its research team, surfacing vulnerabilities in open-source packages before public disclosure—many never get disclosed at all.
Published
Collected

Related coverage

blog · aikido.dev
AI agent security in Kubernetes: Why prompt injection isn't the right term
This post is based on Mackenzie's conversation with Abdel Sghiouar on The Secure Disclosure podcast. Listen to the full episode or watch below.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
blog · aikido.dev
Packagist is now protected by Aikido Intel and other updates to the PHP registry
Composer 2.10 now blocks downloads of versions flagged as malware by Aikido Intel by default, bringing structural supply-chain protection to the PHP ecosystem's Packagist registry.
blog · aikido.dev
You're Invited: Delivering malware via Google Calendar invites and PUAs
Aikido found npm package os-info-checker-es6 hiding malicious logic behind Unicode Private Use Area characters, decoded by a native binary into base64 for eval() to execute, evading code review.
Back