Amit Chita’s Post

Remember the scramble to patch the malicious "XZ Backdoor" hidden in a popular open-source library? This highlights why traditional security tools just aren't enough. You need to truly understand your code: what's inside, how it's used, and why. Here's the good news: Mend.io goes beyond basic dependency scanning. We reveal if a library is actively used and show exactly how it's accessed in your code. This granular insight lets you prioritize vulnerabilities with laser focus and minimize risk. Want to see how Mend.io can help you secure your code? Let's chat! Reach out to me for a personalized demo. #DevSecOps #appsec #codeanalysis

😬 Adversaries are getting creative and traditional security controls are no longer enough. In our upcoming webcast, Adversaries are Doing Stranger Things, Brian Almond will explore the unconventional tactics adversaries use to bypass defenses. From novel C2 methods to repurposed developer tools, join us and learn how to to identify and counteract these tactics. 👉 Register now: https://lnkd.in/e4XCbbeB #ThreatHunting #OffensiveOps #Infosec

A new critical vulnerability in Progress MOVEit Transfer is being actively exploited. If you're using MOVEit Transfer, #patch now! This issue allows attackers to bypass the #authentication process in the Secure File Transfer Protocol (SFTP) module. https://lnkd.in/gn_k8gZc

Most developers aren't secure coding experts. But now with Polaris Assist, they don't have to be. Polaris Assist will summarize vulnerability reports for them, explaining why the code is vulnerable, how it could be exploited, and what they need to change to fix it.

Runtime Security is the new Application Security paradigm

We have a new blog post from Marcello Delcaro describing our response to the #vulnerability in the #XZ Utils library. We reassured our customers that they were at no risk from this threat (and spared them the costly task of wading through false positives to find it). #liblzma #softwaresupplychain risk https://adol.us/4bbr3k8

New exploit blog post! ⚠️ Read all about the kernel heap sprays and overflows we had to do to build this privesc. If you're into memory corruptions, data only exploits, heap overflows and the art of crafting a multi purpose exploit, give it a look.

Check out this post on the scary #XZ open-source supply chain attack. These vulnerabilities were deliberately injected into the widely used secure shell service daemon #sshd by unknown attackers (IMHO a nation-state). Attacks like this certainly put our infrastructure at risk, but they also waste valuable resources while companies struggle to determine if they are impacted (and where). Marcello Delcaro shows how to quickly determine if you need to act or are unaffected and can move on to other pressing security tasks.

Harden. Detect. Respond. The first step? Harden, where you seek to find weaknesses in your systems, people, software, among other things. The vulnerabilities that you find can create gaps that allow attackers to exploit your company's livelihood. In Dustin S. Mooney's latest blog, he identifies the challenges you'll face, the industry obstacles that further complicate your efforts, and why the Hardening first step is so critical in your Harden, Detect, Respond journey. Read it here: https://hubs.li/Q02FXY2B0 #harden-detect-respond #vulnerabiliesbite #vulnerabilitymanagement

Say goodbye to the ordinary! 🚀🔐 Cyphertop is rewriting the rules of security. Unlike traditional software, we generate a new algorithm for every occasion. It's time to revolutionize your security experience. 💻✨   #CyphertopInnovates #SecureDatabases #Cyphertop