Tag: open-source
-
Rspamd: Open-source spam filtering system
Rspamd is an open-source spam filtering and email processing framework designed to evaluate messages based on a wide range of rules, including regular… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/07/rspamd-open-source-spam-filtering/
-
MaLDAPtive: Open-source framework for LDAP SearchFilter parsing, obfuscation, and more!
MaLDAPtive is an open-source framework for LDAP SearchFilter parsing, obfuscation, deobfuscation, and detection. At its core, the project features a c… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/04/maldaptive-open-source-framework-for-ldap-searchfilter-parsing-obfuscation/
-
Recently patched CUPS flaw can be used to amplify DDoS attacks
A recently disclosed vulnerability in the Common Unix Printing System (CUPS) open-source printing system can be exploited by threat actors to launch d… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/recently-patched-cups-flaw-can-be-used-to-amplify-ddos-attacks/
-
CUPS vulnerability, a near miss, delivers another warning for open source
First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cups-vulnerability-near-miss-open-source/728424/
-
2024’s Best Open Source Cybersecurity Tools
There’s a prevailing myth that top-notch security solutions must come with a hefty price tag. Yet, this isn’t necessarily the case. Open-source tools … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/2024s-best-open-source-cybersecurity-tools/
-
Suricata: Open-source network analysis and threat detection
Suricata is an open-source network intrusion detection system (IDS), intrusion prevention system (IPS), and network security monitoring engine. Surica… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/02/suricata-open-source-network-analysis-threat-detection/
-
A quartet of Linux CVEs draws exploit fears among open source community
First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/linux-cves-open-source/728310/
-
Open source maintainers: Key to software health and security
Open source has become the foundation of modern application development, with up to 98% of applications incorporating open-source components and open-… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/30/open-source-maintainers-video/
-
SCCMSecrets: Open-source SCCM policies exploitation tool
SCCMSecrets is an open-source tool that exploits SCCM policies, offering more than just NAA credential extraction. SCCM policies are a key target for … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/30/sccmsecrets-open-source-sccm-policies-exploitation-tool/
-
Tosint: Open-source Telegram OSINT tool
Tosint is an open-source Telegram OSINT tool that extracts useful information from Telegram bots and channels. It’s suited for security researchers, i… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/27/tosint-open-source-telegram-osint-tool/
-
CUPS flaws enable Linux remote code execution, but there’s a catch
Under certain conditions, attackers can chain a set of vulnerabilities in multiple components of the CUPS open-source printing system to execute arbit… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cups-flaws-enable-linux-remote-code-execution-but-theres-a-catch/
-
New Mallox Ransomware Linux Variant Attacking Enterprise Linux Servers
Kryptina RaaS, a free and open-source RaaS platform for Linux, initially struggled to attract attention. Still, after a Mallox affiliate’s staging ser… First seen on gbhackers.com Jump to article: gbhackers.com/mallox-llinux-ransomware-attacks/
-
Strengthening Open-Source Security: Effective and Best Practices
Open-source security requires a multi-faceted approach due to the transparency of open-source software exposing potential vulnerabilities. Malicious a… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/strengthening-open-source-security-effective-and-best-practices/
-
NetAlertX: Open-source Wi-Fi intruder detector
NetAlertX is an open-source Wi-Fi/LAN intruder detection tool that scans your network for connected devices and alerts you when new or unknown devices… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/25/netalertx-open-source-wi-fi-intruder-detector/
-
Open Source C3 Frameworks Used In Red Teaming Assessments Vulnerable To RCE Attacks
C2 frameworks, crucial for post-exploitation operations, offer open-source alternatives to Cobalt Strike. They streamline the management of compromise… First seen on gbhackers.com Jump to article: gbhackers.com/c3-framework-rce-vulnerability/
-
Open Source C2 Frameworks Used In Red Teaming Assessments Vulnerable To RCE Attacks
C2 frameworks, crucial for post-exploitation operations, offer open-source alternatives to Cobalt Strike. They streamline the management of compromise… First seen on gbhackers.com Jump to article: gbhackers.com/c2-framework-rce-vulnerability/
-
The Llama is freed: Winamp goes open source after 27 years
Tags: open-sourceFirst seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/software/the-llama-is-freed-winamp-goes-open-source-after-27-years/
-
Certainly: Open-source offensive security toolkit
Certainly is an open-source offensive security toolkit designed to capture extensive traffic across various network protocols in bit-flip and typosqua… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/23/certainly-open-source-offensive-security-toolkit/
-
Jenkins Penetration Testing
Jenkins is an open-source automation server used for continuous integration (CI) and continuous delivery (CD). It’s built on Java and utilizes a scrip… First seen on hackingarticles.in Jump to article: www.hackingarticles.in/jenkins-penetration-testing/
-
Paid open-source maintainers spend more time on security
Tags: open-sourcePaid maintainers are 55% more likely to implement critical security and maintenance practices than unpaid maintainers and are dedicating more time to … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/23/open-source-maintainers-security/
-
Nextcloud Hub 9 released: New features, more security, updated performance
Nextcloud has launched Nextcloud Hub 9, a significant update to its open-source cloud-based collaboration platform. It introduces several new features… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/20/nextcloud-hub-9-released/
-
Open source maintainers underpaid, swamped by security, going gray
Tags: open-sourceFirst seen on theregister.com Jump to article: www.theregister.com/2024/09/18/open_source_maintainers_underpaid/
-
Open source maintainers, under security pressure, remain largely unpaid after XZ Utils
A report by Tidelift shows an;equity gap remains;between;open source developers and well-resourced software users who are pushing for higher security … First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/open-source-maintainers-unpaid-xz-utils/727216/
-
Clever ‘GitHub Scanner’ campaign abusing repos to push malware
A clever threat campaign is abusing GitHub repositories to distribute malware targeting users who frequent an open source project repository or are su… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/clever-github-scanner-campaign-abusing-repos-to-push-malware/
-
CrowdSec: Open-source security solution offering crowdsourced protection
Crowdsec is an open-source solution that offers crowdsourced protection against malicious IPs. CrowdSec features For this project, the developers have… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/18/crowdsec-open-source-crowdsourced-protection/
-
Seven ways to secure open-source software
First seen on scmagazine.com Jump to article: www.scmagazine.com/perspective/seven-ways-to-secure-open-source-software
-
Two QEMU Vulnerabilities Fixed in Ubuntu 24.04 LTS
Recently, two memory-related flaws were discovered in QEMU, a popular open-source machine emulator and virtualizer. The vulnerabilities, identified as… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/two-qemu-vulnerabilities-fixed-in-ubuntu-24-04-lts/
-
Swatting: Open-Source-Entwickler vor laufender Kamera durch Polizei abgeführt
Tags: open-sourceFirst seen on heise.de Jump to article: www.heise.de/news/Polizeibesuch-im-Linux-Livestream-Open-Source-Entwickler-Opfer-von-Swatting-9873744.html
-
EchoStrike: Generate undetectable reverse shells, perform process injection
EchoStrike is an open-source tool designed to generate undetectable reverse shells and execute process injection on Windows systems. >>EchoStrike allo… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/16/echostrike-reverse-shells-process-injection/
-
Trends and dangers in open-source software dependencies
A C-suite perspective on potential vulnerabilities within open-source dependencies or software packages reveals that, while remediation costs for depe… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/09/16/open-source-software-dependencies/