Ascendant Bot
- Amazon Security Lake , Application security , Career in Cybersecurity , GitHub , security research , Vulnerability Detection , Vulnerability research
- January 29, 2025
Cybersecurity researchers: Digital detectives in a connected world
Discover the exciting world of cybersecurity research: what researchers do, essential skills, and actionable steps to begin your journey toward protecting the digital world.
The post Cybersecurity researchers: Digital detectives in a connected world appeared first on The GitHub Blog.
- Amazon Security Lake , exploit development , GitHub , java , maven , Supply chain security , Vulnerability research
- January 22, 2025
Attacks on Maven proxy repositories
Learn how specially crafted artifacts can be used to attack Maven repository managers. This post describes PoC exploits that can lead to pre-auth remote code execution and poisoning of the local artifacts in Sonatype Nexus and JFrog Artifactory.
The post Attacks on Maven proxy repositories appeared first on The GitHub Blog.
- Amazon Security Lake , Book of News , Diversity and Inclusion , GitHub , Maintainers , NVIDIA Research , Open Source
- January 21, 2025
Seven years of open source: A more secure and diverse ecosystem
Explore insights into open source community growth, innovation, and inclusivity with an updated survey dataset.
The post Seven years of open source: A more secure and diverse ecosystem appeared first on The GitHub Blog.
- Amazon Security Lake , Application security , CodeQL , GitHub , GitHub Security Lab
- January 9, 2025
How to secure your GitHub Actions workflows with CodeQL
In the last few months, we secured 75+ GitHub Actions workflows in open source projects, disclosing 90+ different vulnerabilities. Out of this research we produced new support for workflows in CodeQL, empowering you to secure yours.
The post How to secure your GitHub Actions workflows with CodeQL appeared first on The GitHub Blog.
- Amazon Security Lake , CodeQL , GitHub , GitHub Security Lab , Vulnerability research
- December 23, 2024
Announcing CodeQL Community Packs
We are excited to introduce the new CodeQL Community Packs, a comprehensive set of queries and models designed to enhance your code analysis capabilities. These packs are tailored to augment…
The post Announcing CodeQL Community Packs appeared first on The GitHub Blog.
- Amazon Security Lake , fuzzing , GitHub , GitHub Security Lab , Open Source , Vulnerability research
- December 17, 2024
Uncovering GStreamer secrets
In this post, I’ll walk you through the vulnerabilities I uncovered in the GStreamer library and how I built a custom fuzzing generator to target MP4 files.
The post Uncovering GStreamer secrets appeared first on The GitHub Blog.
- Amazon Security Lake , code scanning , CodeQL , GitHub , GitHub Security Lab , Vulnerability research
- December 11, 2024
CodeQL zero to hero part 4: Gradio framework case study
Learn how I discovered 11 new vulnerabilities by writing CodeQL models for Gradio framework and how you can do it, too.
The post CodeQL zero to hero part 4: Gradio framework case study appeared first on The GitHub Blog.
- Amazon , Amazon Security Lake , Announcements , AWS re:Invent , Book of News , Launch , Security, Identity, & Compliance
- December 2, 2024
New AWS Security Incident Response helps organizations respond to and recover from security events
AWS introduces a new service to streamline security event response, providing automated triage, coordinated communication, and expert guidance to recover from cybersecurity threats.
- Amazon , Amazon OpenSearch Service , Amazon Security Lake , AWS re:Invent , Book of News , Launch
- December 1, 2024
Introducing Amazon OpenSearch Service and Amazon Security Lake integration to simplify security analytics
Analyze security logs without data duplication; Amazon OpenSearch Service now offers zero-ETL integration with Amazon Security Lake for efficient threat hunting and investigations.
(AI)ways a Cut Above: GeForce RTX 50 Series Accelerates New DaVinci Resolve 20 Studio Video Editing Software
