Security News

15 open-source cybersecurity tools you’ll wish you’d known earlier
2024-01-04 05:00

Open-source tools represent a dynamic force in the technological landscape, embodying innovation, collaboration, and accessibility. In cybersecurity, open-source tools are invaluable assets, empowering organizations to fortify their defenses against evolving threats.

Subdominator: Open-source tool for detecting subdomain takeovers
2023-12-20 04:00

Subdominator is a dependable and fast open-source command-line interface tool to identify subdomain takeovers. It boasts superior accuracy and reliability, offering improvements compared to other tools.

EMBA: Open-source security analyzer for embedded devices
2023-12-19 05:00

The EMBA open-source security analyzer is tailored as the central firmware analysis tool for penetration testers and product security groups. It assists throughout the security evaluation procedure, extracting firmware, conducting static and dynamic analysis through emulation, and creating a web-based report.

GuardRail: Open-source tool for data analysis, AI content generation using OpenAI GPT models
2023-12-14 07:32

GuardRail OSS is an open-source project delivering practical guardrails to ensure responsible AI development and deployment. GuardRail OSS offers an API-driven framework for advanced data analysis, bias mitigation, sentiment analysis, content classification, and oversight tailored to an organization's specific AI needs.

A closer look at LATMA, the open-source lateral movement detection tool
2023-12-13 05:00

In this Help Net Security video, Gal Sadeh, Head of Data and Security Research at Silverfort, discusses LATMA, a free, open-source tool. It's engineered with advanced algorithms to track and report any unusual activity within an environment.

ThreatNG open-source datasets aim to improve cybersecurity practices
2023-12-13 04:30

The ThreatNG Governance and Compliance Dataset is an open-source initiative that aims to democratize access to critical data, fostering transparency, collaboration, and improvement of cybersecurity practices globally. The open-source datasets offered by ThreatNG provide an understanding of organizational practices, promoting informed decision-making and accountability within the corporate landscape.

Nemesis: Open-source offensive data enrichment and analytic pipeline
2023-12-12 04:30

Nemesis is a centralized data processing platform that ingests, enriches, and performs analytics on offensive security assessment data. Offensive data is not unified: it's siloed inside specific tools and machines rather than being modeled and analyzed holistically.

Kubescape open-source project adds Vulnerability Exploitability eXchange (VEX) support
2023-12-11 07:57

With its innovative feature for generating reliable Vulnerability Exploitability eXchange documents, Kubescape became the first open-source project to provide this functionality. Vulnerability Exploitability eXchange is a standard that facilitates the sharing and analyzing of information about vulnerabilities and their potential for exploitation.

OpenTofu: Open-source alternative to Terraform
2023-12-07 04:30

OpenTofu is an open-source alternative to Terraform's widely used Infrastructure as Code provisioning tool. Previously named OpenTF, OpenTofu is an open and community-driven response to Terraform's recently announced license change from a Mozilla Public License v2.0 to a Business Source License v1.1, providing everyone with a reliable, open-source alternative under a neutral governance model.

5 open-source tools for pentesting Kubernetes you should check out
2023-12-06 05:00

Kubernetes has become a critical part of the infrastructure for many organizations. With its widespread adoption, Kubernetes environments have also become a target for cyber threats.