Eran J. Leib

⚠️ 28 Years of Nmap – Simple Port Scanner to Network Security Suite | https://lnkd.in/gjfFW2yH Nmap has remained at the forefront of network discovery and security assessment for nearly three decades. Originally introduced on September 1, 1997, in Phrack magazine as a modest, 2,000-line Linux-only port scanner, Nmap has since matured into a sprawling toolkit encompassing OS and version detection, scripting, packet crafting, and more. Today, Nmap consists of core tools, including nmap, Ncat, Nping, and Ndiff—plus the Zenmap GUI, all of which are maintained in a public Subversion repository. #cybersecuritynews

668

8 Comments

Prompt Now Supports the OpenAI Agents SDK ☣️ The Risk? Developers can now build agents that reason, take action, and call tools. But with this power come real security risks: - Prompt injections & jailbreaks - Data leakage - Unauthorized actions - Toxic responses 💁‍♂️ How Do We Help? We provide seamless input and output guardrails for agents built with the SDK. 💡 The best part? It’s incredibly easy to integrate. With just a few lines of code (see example 👇), you can secure your agents without slowing down development. Read more - https://lnkd.in/da4kUwFc

50

1 Comment

Linux has a major weakness: invisible rootkit abuses security systems’ blind spot. Attackers can hack Linux systems undetected. ARMO, a Tel Aviv-based cloud runtime security company, warns of a critical gap in most modern Linux security detection solutions. Hackers can abuse the “io_uring” method to perform malicious activities that bypass traditional detection mechanisms. Most CISOs aren’t aware of this gap. The “io_uring” mechanism has been present in Linux since version 5.1, released on May 5th, 2019. ARMO explains that “io_uring” provides a gap for attackers to perform malicious operations without triggering the typical system calls security products rely on. It provides many capabilities – 61 possible operations, including network and file system operations. They found that the attack method affects eBPF, a widely adopted monitoring and security technology highly popular with cloud security vendors and adopters. This affects security tools like Falco and Tetragon... [Source in comments section]

44

15 Comments

Wiz Just Hacked DeepSeek-Major Security Exposure! During a routine subdomain enumeration, Wiz discovered two assets exposing ports 9000 and 8123. This led us to an internal ClickHouse database, which is a core part of DeepSeek’s infrastructure. Shockingly, these exposed assets contained plain-text chat messages, DeepSeek API keys, operational data, and other highly sensitive information—all publicly accessible without any authentication!!!!! This incident underscores a critical security lesson: Before focusing on securing AI models and chatbots, the foundational infrastructure must be protected first! That's where SURF SECURITY can help you , block GEN AI tools, or allow them with caution. See video below. https://lnkd.in/eD9YFSuV Ziv Yankowitz Moty JacobYoni Kelman 🎗Nick Knupffer Tzviya Haziz Ilan Saguy Frederic Benichou

54

4 Comments

Many SCA tools and eBPF-based tracing solutions (that don’t offer built-in code analysis) often generate a high volume of false positives and unnecessary noise. To truly prioritize what matters for your specific product and environment, code-driven detections are key. They offer the precision in scoping the impact correctly and the context needed to make the right security decisions. Example Binarly Transparency Platform output from CVE-2024-5535 (CWE-200) detection👇

26

2 Comments