PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

New Aikido Security Features: August 2023

aikido.dev | blog | #cloud | #aws | #container-security | #product-update | #aikido | #autofix | #reachability-analysis | #container-registry | #pnpm | #aikido-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Aikido's August 2023 release adds container registry scanning for GitLab, DigitalOcean, and Scaleway, PNPM reachability analysis, expanded AWS config rules, and Python support for Autofix PRs.
Published
Collected

Related coverage

blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
research · wiz.io
Announcing the EKS Cluster Games
A Wiz-sponsored cloud security CTF covering five real-world Amazon EKS misconfigurations: players act as the attacker in a controlled environment and earn certificates and leaderboard spots.
research · calif.io
Privilege escalation in AWS Elastic Kubernetes Service
# Privilege escalation in AWS Elastic Kubernetes Service How a pod with the wrong permissions becomes control of the whole cluster. An Trinh and Duc Nguyen April 2, 2023 cloud Update · August 19,...
blog · aikido.dev
Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
If you run PHP anywhere in your stack and did not upgrade, stop reading this and go upgrade to a patched version. More information on this is on our advisory blog, and check out php2shell.aikido.io to see if your service is potentially vulnerable.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
Back