Johan De Keulenaer

🔥 We added 3 new images with the PHP2Shell fix, available for FREE in our public ECR: gallery.ecr.aws/aikido-dev/p… php:7.3.33-fpm php:7.4.33-fpm php:8.2.35-alpine3.24 PHP didn't release fixes going back to its 7.* versions so these include patched php:7.* variants too.

Aikido Security achieves ISO 42001:2023 certification, the international standard for AI governance. 🌟 Independently audited AI governance is still rare among security vendors, and we’re proud to be a leader in its adoption. ISO 42001 audits the AI management system, meaning the processes and governance around introducing and maintaining AI systems. Learn more: aikido.dev/blog/aikido-iso-4…

Device Protection now supports Windows 🚀 Block malicious browser extensions, IDE plugins, and code libraries. Device Protection gives you visibility and control over the software packages installed on your devices.

Mini Shai Hulud strikes again... again! We've identified three malicious versions of Microsoft's durabletask on PyPI, 1.4.1, 1.4.2, and 1.4.3, that contain a dropper injected directly into the package's Python source files. This does smell of more TeamPCP shenanigans, but we can’t be sure for now. If you have these versions of durabletask installed, read our blog for remediation steps and more details about how the worm and infostealer work -> aikido.dev/blog/durabletask-…

@kirodotdev is rewriting how software gets built. We're making sure it's secure. Aikido is the first security partner globally that @awscloud going to market with for Kiro. 🚀 AI agents now generate most of your code. Catching security issues in review doesn't scale. So we put Aikido where the agents are. Every change gets scanned automatically.

‼️ Evidence of shai hulud 3.0 unfolding More details to follow as we uncover them

🚨 Live OS Supply Chain Attack! 15 NPM packages that appear to belong to @gluestack with a total of 1 million weekly downloads, have been compromised. A Remote Access Trojan has been injected into each package, allowing the actor run shell commands, upload files, and take screenshots on affected systems

hard launching Container AutoFix today 🔥 huge for devs wasting days on manual container upgrades fix vulnerable images automatically — with Aikido AI. break the fix>rebuild>break cycle in seconds - try it out 👀

icymi yesterday, we identified a major malware #supplychainattack in #XRP a backdoor was added to the official NPM package of XRP to steal private keys and send them to an attacker's C2 server 🗝️ If you believe you are impacted, assume any seed or private key processed by the code is compromised. Good news: @XRPLF quickly pushed a new secure version with no malware.

new brand, who dis? goodbye 'aikido' hello, onlyscans.dev 💙

as of today you can integrate aikido in your @windsurf_ai / @codeiumdev IDE to secure code as its written (and generated) get security done 🤝 get back to building