Search: securitylabs.datadoghq.com | Heykuki News

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

Do you have a file matching /Library/Application Support/t*/*O*/*?

3 points

2 years ago

2.

Investigating a backdoored PyPI package targeting FastAPI applications (securitylabs.datadoghq.com)

141 points

4 years ago

3.

AWS CloudTrail vulnerability: Undocumented API allows CloudTrail bypass (securitylabs.datadoghq.com)

13 points

3 years ago

4.

Investigating a backdoored PyPI package targeting FastAPI applications (securitylabs.datadoghq.com)

12 points

4 years ago

5.

Git vulnerable to arbitrary file write on non-Windows systems (securitylabs.datadoghq.com)

6 points

10 months ago

6.

A Confused Deputy Vulnerability in AWS AppSync (securitylabs.datadoghq.com)

6 points

4 years ago

7.

Supply-Chain Firewall: Protecting Developers from Malicious Open Source Packages (securitylabs.datadoghq.com)

5 points

a year ago

8.

The Shai-Hulud 2.0 npm worm: analysis, and what you need to know (securitylabs.datadoghq.com)

4 points

6 months ago

9.

IDE-SHEPHERD: Your shield against threat actors lurking in your IDE (securitylabs.datadoghq.com)

4 points

4 months ago

10.

React2Shell (CVE-2025-55182): A Log4Shell Moment for the Front End Ecosystem (securitylabs.datadoghq.com)

4 points

6 months ago

11.

GuardDog (Datadog open source Supply chain security) 1.0 with NPM support (securitylabs.datadoghq.com)

4 points

3 years ago

12.

RedisRaider: Weaponizing misconfigured Redis to mine cryptocurrency at scale (securitylabs.datadoghq.com)

3 points

a year ago

13.

Cloud Breaches of 2022 (securitylabs.datadoghq.com)

3 points

3 years ago

14.

Finding malicious PyPI packages through static code analysis: Meet GuardDog (securitylabs.datadoghq.com)

3 points

4 years ago

15.

Demystifying the OpenSSL punycode vulnerability and exploitation walk-through (securitylabs.datadoghq.com)

3 points

4 years ago

16.

Tracing the March 2026 TeamPCP supply chain campaign (securitylabs.datadoghq.com)

2 points

2 months ago

17.

I Spy: Escalating to Entra ID's Global Admin with a First-Party App (securitylabs.datadoghq.com)

2 points

a year ago

18.

WhoAMI: A cloud image name confusion attack (securitylabs.datadoghq.com)

2 points

a year ago

19.

Malicious PyPI packages targeting highly specific macOS machines (securitylabs.datadoghq.com)

2 points

2 years ago

20.

Container security fundamentals part 2 (securitylabs.datadoghq.com)

2 points

3 years ago

21.

Partial bypass of the login rate limiting in the AWS Console (securitylabs.datadoghq.com)

2 points

3 years ago

22.

A 2025 look at real-world Kubernetes version adoption (securitylabs.datadoghq.com)

1 point

7 months ago

23.

Enumerating AWS the quiet way: CloudTrail-free discovery with Resource Explorer (securitylabs.datadoghq.com)

1 point

DigitalDataDude

10 months ago

24.

MUT-8694: An NPM and PyPI Malicious Campaign Targeting Windows Users (securitylabs.datadoghq.com)

1 point

2 years ago

25.

A guide to threat hunting and monitoring in Snowflake (securitylabs.datadoghq.com)

1 point

2 years ago

26.

Amplified exposure: How AWS flaws made Amplify IAM roles vulnerable to takeover (securitylabs.datadoghq.com)

1 point

DigitalDataDude

2 years ago

27.

Amazon ECS is the new EC2 for crypto mining (securitylabs.datadoghq.com)

1 point

2 years ago

28.

Escaping containers using the Dirty Pipe vulnerability (securitylabs.datadoghq.com)

1 point

3 years ago

29.

A Confused Deputy Vulnerability in AWS AppSync (securitylabs.datadoghq.com)

1 point

4 years ago