Eight principles to help you to implement your own zero trust network architecture in an enterprise environment.   #explain   #strategy

Wis introduced SITF, an open framework to map and block supply chain attacks. Visualize threats across Endpoint, VCS, CI/CD, and Registry with 70+ techniques.   #strategy   #announcement

An authorization bypass in Kubernetes RBAC allows for nodes/proxy GET permissions to execute commands in any Pod in the cluster.   #kubernetes   #attack

This post details a method for stealing Salesforce OAuth tokens by exploiting an XSS vulnerability and leveraging the Cloudflare Web Application Firewall (WAF).   #attack   #saas

Block's BinauthZ plugin extends their OPA-based admission controller to cryptographically verify container image signatures and attestations at Kubernetes admission time, enforcing SLSA using Sigstore/cosign with AWS KMS.   #kubernetes   #containers   #build

Dependency cooldowns delay automatic dependency updates, providing a free and effective mitigation against most open source supply chain attacks. Tools like Dependabot and Renovate support configurable cooldown periods before adopting new dependency versions.   #supply-chain   #ci/cd

Multi-platform SDK for integrating GitHub Copilot Agent into apps and services. You can also refer to the companion blog post.

A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE. You can also refer to the companion blog post.

An open-source containerized toolkit designed for red teaming AI models, including Large Language Models (LLMs) and classical machine learning (ML) models. You can also refer to the companion blog post.

C2 Platform with Cloudflare Tunnel Integration.

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

This is the first in a series exploring Palantir AIP's Agentic Runtime, the integrated toolchain for building, deploying, and managing agents in mission-critical settings.

Varonis Threat Labs discovered a way to bypass Copilot's safety controls, steal users' darkest secrets, and evade detection.

Block's AI engineering approach includes: 95% of engineers using AI assistants, providing freedom to explore multiple tools, launching an AI Champions program focused on repo readiness and context engineering, implementing automated PRs, and planning team-based workshops for multi-agent workflows.