Ascendant Bot
- Amazon Security Lake , Application security , CodeQL , GitHub , GitHub Security Lab
- January 9, 2025
How to secure your GitHub Actions workflows with CodeQL
In the last few months, we secured 75+ GitHub Actions workflows in open source projects, disclosing 90+ different vulnerabilities. Out of this research we produced new support for workflows in CodeQL, empowering you to secure yours.
The post How to secure your GitHub Actions workflows with CodeQL appeared first on The GitHub Blog.
- Amazon Security Lake , CodeQL , GitHub , GitHub Security Lab , Vulnerability research
- December 23, 2024
Announcing CodeQL Community Packs
We are excited to introduce the new CodeQL Community Packs, a comprehensive set of queries and models designed to enhance your code analysis capabilities. These packs are tailored to augment…
The post Announcing CodeQL Community Packs appeared first on The GitHub Blog.
- Amazon Security Lake , fuzzing , GitHub , GitHub Security Lab , Open Source , Vulnerability research
- December 17, 2024
Uncovering GStreamer secrets
In this post, I’ll walk you through the vulnerabilities I uncovered in the GStreamer library and how I built a custom fuzzing generator to target MP4 files.
The post Uncovering GStreamer secrets appeared first on The GitHub Blog.
- Amazon Security Lake , code scanning , CodeQL , GitHub , GitHub Security Lab , Vulnerability research
- December 11, 2024
CodeQL zero to hero part 4: Gradio framework case study
Learn how I discovered 11 new vulnerabilities by writing CodeQL models for Gradio framework and how you can do it, too.
The post CodeQL zero to hero part 4: Gradio framework case study appeared first on The GitHub Blog.
- Amazon , Amazon Security Lake , Announcements , AWS re:Invent , Book of News , Launch , Security, Identity, & Compliance
- December 2, 2024
New AWS Security Incident Response helps organizations respond to and recover from security events
AWS introduces a new service to streamline security event response, providing automated triage, coordinated communication, and expert guidance to recover from cybersecurity threats.
- Amazon , Amazon OpenSearch Service , Amazon Security Lake , AWS re:Invent , Book of News , Launch
- December 1, 2024
Introducing Amazon OpenSearch Service and Amazon Security Lake integration to simplify security analytics
Analyze security logs without data duplication; Amazon OpenSearch Service now offers zero-ETL integration with Amazon Security Lake for efficient threat hunting and investigations.
