PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Better generic secrets detection starts with finding non-secrets

aikido.dev | blog | #appsec | #secrets | #detection-engineering | #aikido | #false-positives | #secrets-scanning | #betterleaks | #credential-detection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Aikido cut generic secrets false positives by ~2% with suppression rules for publishable credentials; these rules now ship by default in Betterleaks as part of a staged noise-reduction plan.
Published
Collected

Related coverage

blog · aikido.dev
How Aikido helps you meet SOC 2 Type 1 and Type 2
# How Aikido helps you meet SOC 2 Type 1 and Type 2 Written by Jens Gellynck Published on: Oct 7, 2026 If you've ever gone through a SOC 2 audit, you know the drill. It’s weeks of screenshotting...
blog · aikido.dev
Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
If you run PHP anywhere in your stack and did not upgrade, stop reading this and go upgrade to a patched version. More information on this is on our advisory blog, and check out php2shell.aikido.io to see if your service is potentially vulnerable.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · aikido.dev
How to patch PHP2Shell with free Aikido Images
PHP2Shell is a pair of critical remote code execution (RCE) vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. Both score 9.2 on CVSS v4.0, and either one can let an unauthenticated attacker run code on a server that handles PHP requests. Cloudflare reports that exploitation has started.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · aikido.dev
eMudhra CA compromise: eight private keys, and one of them is 4
Aikido reports the compromise of certificate authority eMudhra: eight private keys were exposed, including one 4096-bit RSA key, raising concerns about potentially forged certificates.
Back