Checkmarx KICS Actions Compromised
Checkmarx KICS, an open-source security scanner, was compromised in the TeamPCP campaign. Credentials from Trivy were used to attack its GitHub Actions.
Tag: Open Source
Spark RAT: Open-Source Go-Based RAT Used in Cambodia Campaign
Spark RAT is an open-source, Go-based cross-platform remote access trojan that enables remote control of compromised devices. It is delivered via a…
Critical Gitea RCE CVE-2026-60004 Actively Exploited in Cryptojacking Campaign
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Gitea, tracked as CVE-2026-60004 (CVSS…
Marimo: Open-Source Notebook Software
Marimo is the company behind the Marimo notebook, an open-source Python notebook that emphasizes reproducibility and interactivity. It recently patched multiple security…
AI Coding and Open Source Risk Webinar: Insights from ActiveState
This webinar, presented by ActiveState's Rebecca Banks and Moris Chen, discusses how AI coding affects open-source remediation workloads, compares enterprise programs, and…
ActiveState: Managing Open Source Risk in AI-Driven Development
ActiveState is a company that provides solutions for managing open source software. In the context of this article, ActiveState conducted a survey…
Wazuh: Open-Source Security Platform
Wazuh is an open-source security platform that provides SIEM and XDR capabilities. It offers AI-powered features like the Wazuh AI Analyst for…
Llama 3: Open-Source AI Model
Llama 3 is an open-source large language model developed by Meta. It can be self-hosted for privacy-sensitive applications, such as threat hunting…
Critical isolated-vm Sandbox Escape Flaw Could Lead to Remote Code Execution
Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source Node.js sandbox library with over 2,900 stars on GitHub.…
CISA Adds Actively Exploited Ray Flaw to KEV Catalog: Browser-Based RCE via DNS Rebinding
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Ray, an open-source Python-native distributed computing framework, to…