Government and private use of face recognition technology each present a wealth of concerns. Privacy, safety, and amplification of carceral…

Another security company discloses a brush with the threat actor behind Solorigate. Advice on hardening Microsoft 365 against that same…

Attackers behind an espionage campaign that exploited software built by the federal contractor SolarWinds separated their most prized hacking tool…

bettercap is a powerful, easily extensible and portable framework written in Go which aims to offer to security researchers, red…

kube-bench kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the CIS…

MISP – Malware Information Sharing Platform and Threat Sharing MISP, Malware Information Sharing Platform, and Threat Sharing is an open-source…

grafana Grafana allows you to query, visualize, alert on, and understand your metrics no matter where they are stored. Create,…

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML…

The OWASP Zed Attack Proxy (ZAP) is easy to use integrated penetration testing tool for finding vulnerabilities in web applications.…

Semgrep Semgrep is a command-line tool for offline static analysis. Use pre-built or custom rules to enforce code and security standards in…