The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker ...

for training and testing purposes. you can test detection products (e.g. vulnerability scanners), exploit tools, etc. these are NOT intended for evaluating appsec testing tools. the idea is that you'd ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

Cybercriminals are tricking AI into leaking your data, executing code, and sending you to malicious sites. Here's how.