This blog post demonstrates how to reverse-engineered Cursor's LLM client by setting up TensorZero as a self-hosted proxy service, enabling you to observe, analyze, and experiment with different LLM models while maintaining the full Cursor experience.   #ai   #explain

Learn how to use open-source rules files to improve the security of AI-powered coding tools like Copilot, Claude, and Cursor.   #ai   #defend

Critical vulnerabilities in OneLogin's AD Connector leaked authentication credentials, enabling account impersonation.   #attack   #iam   #saas

What if all it took to compromise a GitHub organization, and thus the organization's supply chain, was an eight-digit code and a phone call?   #attack   #ci/cd   #supply-chain

Wiz fine-tuned a 1B LLM to detect secrets in code with 86% precision, outperforming regex-based methods while staying lean, private, and CPU-efficient.   #ai   #defend

Post covering some methods attackers may use now or in the near future to maintain access to Entra ID (formerly Azure AD) once they've obtained a privileged foothold.   #attack   #azure

PaloAlto predicts a surge in cloud attacks leveraging reworked Linux Executable and Linkage Format (ELF) files.   #attack   #strategy

This examination of the AWS Roles Anywhere service looks at potential risks, analyzed from both defender and attacker perspectives.   #attack   #aws   #defend   #iam

The first weaponizable zero-click attack chain on an AI agent, resulting in the complete compromise of Copilot data integrity.   #ai   #attack

Visualise a git repository by diff activity.

A tool for creating and running Linux containers using lightweight virtual machines on a Mac.

Self-Hosted Platform for Secure Execution of Untrusted User/AI Code.

Google Security Operations and Threat Intelligence MCP Server.

AWS now provides daily updates of Smithy API models on GitHub, enabling developers to build custom SDK clients, understand AWS API behaviors, and create developer tools for better AWS service integration.

The Security Champion Knowledge path is an educational framework designed to empower developers and software engineers with essential AWS cloud security knowledge and best practices.

AWS announced support for on-demand rotation of symmetric encryption AWS Key Management Service (AWS KMS) keys with imported key material (EXTERNAL origin). This new capability enables you to rotate the cryptographic key material of these keys without changing the key identifier.

AWS now requires specific claims in IAM role trust policies using OIDC for new/updated roles.