🍀 Hey, how many times in the last 24 hours have you heard "PHP" and "patch immediately"? Exhausting, isn't it? Yes, php2shell is a serious vulnerability, and it deserves to be treated as one. Maybe it's time to change the approach a little. stream.security/post/php2she…

The alert isn't a call to action anymore. It's a receipt. Stream already found it, stopped it and fixed it. Autonomous production defense. So you can do other… stuff.

New Cloud Defense Goat scenarios turn 2025–2026's real Kubernetes and container-runtime research into attack chains. Don’t assume your tools are ready for the latest cloud-native attacks. Prove it. stream.security/post/goat-go…

Stream.Security is expanding beyond cloud-native environments. 👉🔗 stream.security/post/stream-… #CloudSecurity #HybridCloud #VMware #CDR

⚠️ axios was compromised. If you write JavaScript, you've used it, it's the HTTP client in virtually every Node.js application, with 60M+ weekly downloads. ~2-3 hours of exposure.

WHAT YOU NEED TO KNOW - LiteLLM Supply Chain Attack 🚨 Our Threat Research team is analyzing a cascading supply chain attack, TeamPCP, that crossed five ecosystems in under a week. The next stage is unfolding now (analysis coming soon).

Full breakdown from our Principal Security Researcher Petr Zuzanov 👇 stream.security/post/invisib…

Live Workshop with @latiotech on Dec 9th 📅 Cloud incidents are getting faster and harder to untangle. (cc: Sha1-Hulud 2.0) 🪱 Does your team have what it takes to respond effectively?

Here's the deep dive into how we investigated the Shai-Hulud 2.0-style attack we created: stream.security/post/the-sha…

Your SOC is drowning in alerts. We just threw you a lifeline. 🛟 Introducing AI Triage: AI agent that doesn't just summarize alerts, it decides and closes them with precision. 👇

Validate your SIEM detections with CDRGoat Scenario 2 here 👉 lnkd.in/gVeaWhqy

🐐 Stream.Security's CDRGoat is now LIVE! 🐐 🎊 We’re excited to release CDRGoat, an open-source project made to help SecOps teams safely validate their detection and investigation of cloud-native attacks.

Cloud detection & triage aren’t just inefficient, they’re broken. ❌ The problem? Most systems rely on stale data stitched together after an alert, leaving teams guessing with no real-time context. 👇

At DEF CON 2025, EntraGoat gave the community a new way to simulate real Entra ID attacks. We put those scenarios to the test to validate our real-time detection, investigation, and response. The result? Stream's platform detected all six scenarios 👉 hubs.la/Q03GCB520

🥁 A new member has joined the Stream Team! Please join us in giving a warm welcome to Daniel Castro, joining our team in the US! Want to join us in building the only real-time CDR solution on the market? We're hiring! hubs.la/Q03GjNmC0

@StreamSecurity 🤝 @HiBob_HR Cutting threat investigation time by 80% daily. hubs.la/Q03GjQb60

@Stream.Security x @Snowflake ❄️ Stream now integrates @Snowflake audit logs into our SaaS and cloud detection framework to give SecOps teams full visibility across the chain of services connected to the cloud.