jsDelivr: Free CDN for Open Source Projects
jsDelivr is a free content delivery network for open source projects. It was used by the G2 module to fetch remote JavaScript…
Tag: Open Source
Caeruleus: Open-Source Bluetooth Low Energy Testing Toolkit
Caeruleus is a free open-source toolkit from Praetorian that consolidates Bluetooth Low Energy testing into a single Go binary. It supports scanning,…
PhantomFS: Open-Source Windows Honeypot Using Projected File System
PhantomFS is a free open-source Windows honeypot that uses the Projected File System to project decoy files in memory. When accessed, it…
Evilginx: Open-Source Adversary-in-the-Middle Phishing Framework
Evilginx is an open-source adversary-in-the-middle (AiTM) phishing framework used to bypass multi-factor authentication by proxying live login sessions. It has been forked…
Unpatched XRING Flaw in Alibaba’s XQUIC Lets Remote Clients Crash HTTP/3 Servers
A critical unpatched vulnerability, dubbed XRING, has been disclosed in XQUIC, Alibaba's open-source QUIC and HTTP/3 library. Discovered by FoxIO researcher Sébastien…
BestShell: Open-Source Chinese Webshell
An open-source Chinese webshell from which the WP-SHELLSTORM main backdoor (down.php) was derived. It allows file management, command execution, reverse shells, and…
RabbitMQ Message Broker Patches Critical OAuth and Authorization Flaws
RabbitMQ, a widely used open-source message broker, has released patches for two vulnerabilities (CVE-2026-57219 and CVE-2026-57221) that could leak OAuth secrets and…
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
GitHub has officially released npm version 12, introducing significant security changes to reduce software supply chain risks. The most notable change is…
Friendly Fire Attack: AI Coding Agents Tricked Into Running Malicious Code
Researchers at the AI Now Institute have published a proof-of-concept attack called 'Friendly Fire' that exploits AI coding agents designed to catch…
Elastic to Contribute Research and Tools to Open Secure AI Alliance
Elastic will contribute research, tools, and architectural knowledge across security, search, observability, and AI-powered detection.