GitHub's July 14 changelog announced AI security detections for Shell, Dockerfiles, Terraform, and PHP on pull requests, but access requires a GitHub Code Security (Advanced Security) subscription, a …
A developer created a free GitHub Action that runs ShellCheck, Hadolint, tfsec, and PHPStan on repositories and uploads the results as SARIF to GitHub's Security tab, bypassing the paywall for GitHub'…
Last week saw active exploitation of a Check Point VPN zero-day vulnerability and attacks on Oracle PeopleSoft servers. Additionally, the open-source AI-powered Docker security scanner DockSec was rel…
According to the article, a security audit of 6,444 public Docker Compose files found that approximately 90% of them are missing three basic security flags: `read_only: true`, `cap_drop: [ALL]`, and `…
Here is a factual summary of the article: The article outlines a practical, layered security baseline for Amazon EKS, emphasizing that security must be addressed across image hygiene, identity, netwo…