🤝 Global Partnerships & Channel @AikidoSecurity | connector & culinary explorer | Views are personal.
Antwerp, Belgium
Joined May 2008
- Tweets11.9K
- Following997
- Followers1.3K
- Likes2.3K
Johan De Keulenaer retweeted
🔥 We added 3 new images with the PHP2Shell fix, available for FREE in our public ECR: gallery.ecr.aws/aikido-dev/p…
php:7.3.33-fpm
php:7.4.33-fpm
php:8.2.35-alpine3.24
PHP didn't release fixes going back to its 7.* versions so these include patched php:7.* variants too.
+ new images released with php2shell fix
(available FREE! gallery.ecr.aws/aikido-dev/p…)
php:8.2.34
php:8.2.34-apache
php:8.2.34-cli
php:8.2.34-fpm
php:8.3.35-apache
php:8.4.26
php:8.4.26-apache
php:8.4.26-cli
php:8.4.26-fpm-trixie
php:8.4.26-trixie
php:8.5.11
php:8.5.11-cli
php:8.5.11-fpm
php:8.5.11-fpm-trixie
php:8.5.11-trixie
php:8.3.35-fpm-trixie
php:8.3.35-cli
php:8.3.35-fpm-trixie
php:8.3.35-cli
php:8.4-fpm-bookworm
php:8.3-apache-bookworm
php:8.2-fpm-bookworm
We built @AikidoSecurity to secure devs.
Now we've launched @NoonSecurity, the modern workforce security platform to secure everybody else
Because these days you don't just need to protect the products you build, you also have to protect the people building them.
Johan De Keulenaer retweeted
コンテナだけではありません。ライブラリも「上げずに直す」。
CVEを直すために依存ライブラリを新バージョンへ上げると、新しいコード、新しいテスト、そして互換性問題がついてくる。
Aikido Librariesは、今使っているバージョンにセキュリティ修正をバックポートします。
パッケージのバージョンはそのまま。脆弱性だけを直す。
すでに7エコシステム、9,000以上のライブラリに対応。
「脆弱性が出たらアップデートする」だけではなく、
「上げずに直す」という選択肢。
#Aikido #AikidoLibraries #DevSecOps #ソフトウェアサプライチェーン
Aikido Libraries is here 📚👋
Security patches that don't break production.
You find a CVE. Fixing it normally means a new version, new code, new tests, and the risk something breaks. We backport the fix onto the version you already run, so the package stays the same, just secured.
9,000+ libraries across 7 ecosystems, with more added every day.
Johan De Keulenaer retweeted
Aikido Security achieves ISO 42001:2023 certification, the international standard for AI governance. 🌟
Independently audited AI governance is still rare among security vendors, and we’re proud to be a leader in its adoption. ISO 42001 audits the AI management system, meaning the processes and governance around introducing and maintaining AI systems.
Learn more: aikido.dev/blog/aikido-iso-4…
Next year in the movie theatres 📽️
Anthropic's Claude Mythos 5 published live malware that compromised a real company and robbed real developers of their SSH keys. Our security researcher Charlie thinks he might have found the package it left behind, and it behaves like it WANTED to be caught.
This package keeps a receipt of the theft in /tmp, announces the loot in plaintext, and ships signed with the build machine's username. The mistakes make sense when you look at it as the output of an AI that wrote it during a security exercise it thought was fake.
Read up: aikido.dev/blog/anthropic-ro…
China DeepSeek open source model goes strong
Johan De Keulenaer retweeted
BREAKING: Microsoft tests China’s Kimi K3 for Copilot as it brings the open-weight model to Azure.
Johan De Keulenaer retweeted
Mini Shai Hulud strikes again... again! We've identified three malicious versions of Microsoft's durabletask on PyPI, 1.4.1, 1.4.2, and 1.4.3, that contain a dropper injected directly into the package's Python source files. This does smell of more TeamPCP shenanigans, but we can’t be sure for now.
If you have these versions of durabletask installed, read our blog for remediation steps and more details about how the worm and infostealer work
-> aikido.dev/blog/durabletask-…
Johan De Keulenaer retweeted
@kirodotdev is rewriting how software gets built. We're making sure it's secure.
Aikido is the first security partner globally that @awscloud going to market with for Kiro. 🚀
AI agents now generate most of your code. Catching security issues in review doesn't scale. So we put Aikido where the agents are. Every change gets scanned automatically.
Johan De Keulenaer retweeted
‼️ Evidence of shai hulud 3.0 unfolding
More details to follow as we uncover them
New strain of Shai Hulud just hit npm from what I can tell:
npmjs.com/package/@vietmoney…
c746af4d7d3b51ad39586802e9394bad bun_installer.js
2d0b8f34f72649dee41e1fe98fe1901c environment_source.js
Johan De Keulenaer retweeted
【ニュースリリース】
ソフト開発工程全体のセキュリティ対策をワンストップで支援！
ソフトウェアの包括的セキュリティ対策ソリューション「Aikido Security」の販売開始。
詳細はこちら👉
cybernet.co.jp/company/about…
🚨 Cyberattack Sept 19 forced manual check-in/boarding @BrusselsAirport. Traced to an external provider, so other airports on same system possibly hit. BRU has historically run @CollinsAero #vMUSE — confirmation pending. #CyberAttack #AviationSecurity
npm packages with 2 billion weekly downloads hacked in Major Attack hackread.com/npm-packages-2-… detected via @AikidoSecurity
Johan De Keulenaer retweeted
🚨 Live OS Supply Chain Attack!
15 NPM packages that appear to belong to @gluestack with a total of 1 million weekly downloads, have been compromised.
A Remote Access Trojan has been injected into each package, allowing the actor run shell commands, upload files, and take screenshots on affected systems