GitLab's CISO argues that agentic AI development requires security, governance, and guardrails embedded in the SDLC execution path. The key metric is time from detection to verified remediation, driven to machine speed using AI-powered triage, constrained agent identities, and continuous scanning.
https://about.gitlab.com/blog/securing-the-software-factory-at-machine-speed
#AI
Please open Telegram to view this post
VIEW IN TELEGRAM
❤2👍1🔥1
Storm-3168 (JADEPUFFER) used compromised Azure service principals to conduct automated reconnaissance, bulk deletion of Storage Accounts, Key Vaults, and Function Apps, and credential harvesting via ListKeys, consistent with ransomware-aligned objectives. Mitigations include least privilege, secret rotation, and resource locks.
https://www.microsoft.com/en-us/security/blog/2026/09/25/storm-3168-agentic-driven-cloud-attacks-using-compromised-service-principals
#azure
Please open Telegram to view this post
VIEW IN TELEGRAM
❤3👍1🔥1
DigitalOcean Managed Agents secure autonomous workloads by ensuring agents never hold live credentials directly, utilizing ephemeral execution-time brokering via Action Gateway and strict runtime boundaries. This architecture aligns with NVIDIA's Open Agent Safety Platform and OpenShell policy schemas to prevent data exfiltration and limit blast radii across agent swarms.
https://www.digitalocean.com/blog/how-digitalocean-manages-credentials-for-autonomous-agents
#AI
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥3❤1👍1
⚠️ Discovering and exploiting a remote code execution vulnerability in OpenCode
Datadog Security Labs found GHSA-632h-h47v-g4x4 in OpenCode: the unauthenticated /global/upgrade API endpoint accepted arbitrary npm tarball URLs, enabling RCE via a crafted cross-origin HTML form submission bypassing CORS.
https://securitylabs.datadoghq.com/articles/opencode-upgrade-remote-code-execution
#RCE
Datadog Security Labs found GHSA-632h-h47v-g4x4 in OpenCode: the unauthenticated /global/upgrade API endpoint accepted arbitrary npm tarball URLs, enabling RCE via a crafted cross-origin HTML form submission bypassing CORS.
https://securitylabs.datadoghq.com/articles/opencode-upgrade-remote-code-execution
#RCE
👍3❤1🔥1
Atlassian's shared their own version of an AI SDLC playbook, which outlines transforming the full dev lifecycle using agentic AI, requiring two platform investments (context graph, measurement) and workflow shifts across planning, design, development, review, and maintenance, with humans retaining governance and judgment.
https://www.atlassian.com/blog/ai-at-work/ai-sdlc-transformation-playbook
#AI
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
❤2👍1🔥1
Five critical Azure cross-tenant privilege escalation vulnerabilities in API Connections (Logic Apps) were found via path traversal in DynamicInvoke, undocumented Dynamic* endpoints, and the host.api.RuntimeUrl parameter, yielding $200,000 in bug bounties.
https://binsec.no/posts/2026/10/one-root-case
#azure
Please open Telegram to view this post
VIEW IN TELEGRAM
❤2👍1🔥1
🔶 Introducing Strands Box: AI agent sandboxes powered by Dogwood
Strands Box is an open source (Apache 2.0) developer preview sandbox for AI agents. It combines OS-level isolation (such as macOS Seatbelt) with Dogwood policies that govern actions at egress, Python, Shell, and MCP enforcement points.
https://aws.amazon.com/ru/blogs/opensource/introducing-strands-box-ai-agent-sandboxes-powered-by-dogwood
#aws
Strands Box is an open source (Apache 2.0) developer preview sandbox for AI agents. It combines OS-level isolation (such as macOS Seatbelt) with Dogwood policies that govern actions at egress, Python, Shell, and MCP enforcement points.
https://aws.amazon.com/ru/blogs/opensource/introducing-strands-box-ai-agent-sandboxes-powered-by-dogwood
#aws
❤2👍1🔥1
20 октября в 12:00 (мск) пройдёт бесплатный вебинар «Мониторинг событий безопасности в MWS Cloud Platform».
Разработчики сервиса:
✅ Расскажут про возможности сервиса аудитных логов в облаке MWS Cloud Platform
Покажут в прямом эфире, как экспортировать их в SIEM-системы
✅ Вебинар будет полезен CISO, ИБ-специалистам, DevOps-инженерам и SOC-специалистам. Регистрируйтесь, подключайтесь к прямому эфиру и задавайте вопросы в чате.
🗓 20 октября в 12:00
Разработчики сервиса:
✅ Расскажут про возможности сервиса аудитных логов в облаке MWS Cloud Platform
Покажут в прямом эфире, как экспортировать их в SIEM-системы
✅ Вебинар будет полезен CISO, ИБ-специалистам, DevOps-инженерам и SOC-специалистам. Регистрируйтесь, подключайтесь к прямому эфиру и задавайте вопросы в чате.
🗓 20 октября в 12:00
❤4👍2🔥2
FORGE Lab reports 140 Windows CVEs and 155 validated open-source reports. Three lessons: measure the full pipeline, not just findings; spend reasoning only where it removes uncertainty; and make validation and remediation a continuous learning loop.
https://www.microsoft.com/en-us/security/blog/2026/10/07/3-lessons-from-frontier-ai-vulnerability-research
#azure
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
👍2❤1🔥1
Analysis of 490 [un]prompted 2026 talk submissions: 71% concern agents, evals rose to 30%, prompt injection fell to 18%. Also, attacks increasingly target the agent harness.
#AI
Please open Telegram to view this post
VIEW IN TELEGRAM
👍2❤1🔥1
🔶 Penetration testing every deployment with AWS Continuum
How to deploy a CI/CD gate using AWS Continuum that runs penetration tests scoped to each deployed change. It blocks production promotion when validated findings meet a severity threshold. Authentication uses OIDC rather than stored keys.
https://aws.amazon.com/ru/blogs/security/penetration-testing-every-deployment-with-aws-continuum
#aws
How to deploy a CI/CD gate using AWS Continuum that runs penetration tests scoped to each deployed change. It blocks production promotion when validated findings meet a severity threshold. Authentication uses OIDC rather than stored keys.
https://aws.amazon.com/ru/blogs/security/penetration-testing-every-deployment-with-aws-continuum
#aws
❤1👍1🔥1
One Day Offer: создавай архитектуру безопасности для Сбера! 🛡
24 октября центр кибербезопасности проведёт экспресс-отбор в команду для архитекторов, которые готовы к амбициозным задачам:
✔️ Разрабатывать и развивать архитектуру безопасности.
✔️ Организовывать внедрение средств защиты информации.
✔️ Контролировать эффективность реализованных мер.
Если ты проектируешь не «чтобы работало», а «чтобы было надёжно» — регистрируйся на One Day Offer. До встречи, будущий коллега! 💚
24 октября центр кибербезопасности проведёт экспресс-отбор в команду для архитекторов, которые готовы к амбициозным задачам:
✔️ Разрабатывать и развивать архитектуру безопасности.
✔️ Организовывать внедрение средств защиты информации.
✔️ Контролировать эффективность реализованных мер.
Если ты проектируешь не «чтобы работало», а «чтобы было надёжно» — регистрируйся на One Day Offer. До встречи, будущий коллега! 💚
❤1👍1🔥1🤔1🤯1
Salesforce's two-track remediation model for AI-discovered vulnerabilities: a strategic track fixes shared architectural choke points, retiring findings in bulk; a tactical track closes validated multi-step exploit chains on adversary timelines.
https://www.salesforce.com/blog/managing-agentic-security-at-scale
#AI
Please open Telegram to view this post
VIEW IN TELEGRAM
❤1👍1🔥1