@safetycli profile picture
Safety Cybersecurity @safetycli
Joined March 2023
  • Tweets 13
  • Following 26
  • Followers 94
1 Photos and videos
Have you heard of "cloaking"? Advertisers peddling malicious or adult content use cloaking technology to run ads without getting banned by Google, Facebook, TikTok, etc. Bad guys are now using it to deliver dynamic payloads in malicious NPM packages! getsafety.com/blog-posts/npm…
108
The Safety research team has identified a new NPM based malware we are calling "Integrator-Filescrypt". This campaign uses a unique "cloaking" technique to hide from researchers and cloud providers. It's sneaky, & effective. Read more on our blog: getsafety.com/blog-posts/npm…

NPM Malware Uses “Cloaking” Technology to Target StandX and Uniswap Users

Read "NPM Malware Uses “Cloaking” Technology to Target StandX and Uniswap Users" on the Safety blog. Secure the Developer. Stop the Breach.

getsafety.com
59
A HIGH-severity CVE in cURL and libcurl was disclosed today. Read how these vulnerabilities impact the Python ecosystem and the steps you can take to protect your projects: safetycli.com/research/curl-… #cve #python #curl #libcurl #vulnerabilities #DevOps #devsecops

cURL Vulnerability CVE-2023-38545 for Python Systems

Read "cURL Vulnerability CVE-2023-38545 for Python Systems" on the Safety blog. Secure the Developer. Stop the Breach.

getsafety.com
1
1,656
A HIGH-severity vulnerability in cURL and libcurl has been disclosed. Read our post for details on impacted Python packages and recommended actions. #cve #curl #Python #pythonprogramming #Security #vulnerabilities safetycli.com/research/curl-…

cURL Vulnerability CVE-2023-38545 for Python Systems

Read "cURL Vulnerability CVE-2023-38545 for Python Systems" on the Safety blog. Secure the Developer. Stop the Breach.

getsafety.com
1
972
CVSS Severity is no longer an effective way to prioritize and triage your vulnerabilities! Learn how Safety's multi-dimensional approach to software vulnerability assessment reduces vulnerability noise by up to 90%. 🔍📊🛡️ safetycli.com/research/beyon…

Beyond CVSS: Project Context, Exploitability, and Reachability of Vulnerabilities

Read "Beyond CVSS: Project Context, Exploitability, and Reachability of Vulnerabilities" on the Safety blog. Secure the Developer. Stop the Breach.

getsafety.com
1
1
280
In part 2 of our series on CVSS and the future of vulnerability assessment, read how Safety combines Severity with Exploitability, Reachability, and Project Context to allow developers to focus on the findings that matter. #devops #devsecops #CVSS #Python
154
📢 Thread: PyUp is now Safety Cybersecurity! 🎉 1/ 🚀 We've got some exciting news! PyUp is now Safety Cybersecurity! We're on a mission to improve how you secure your software supply chain. safetycli.com/research/safet… #SafetyCybersecurity #DevSecOps #SoftwareSupplyChain

Research | Safety

Deep dives into threats, malware analysis, and supply chain security research from the Safety team.

getsafety.com
4
1
141
6/ 🤝 Let's Connect! We're eager to hear your thoughts and challenges in software supply chain security. safetycli.com #vulnerabilitymanagement

Safety - The AI Development Security Platform

Safety gives security teams real-time visibility and governance over every AI tool, package, MCP server, and IDE extension across their developer fleet.

getsafety.com
80
4/ 🌍 Beyond Python: Safety DB is expanding to Javascript, Java, and .NET! #BeyondPython #Python #javascript
55
3/ 💡 Our Core Tenets Cut Vulnerability Noise by 90% 🛡️ Proactive, End-to-End Security 🌐 Developer-First Approach 👩‍💻 #Python #DeveloperFirst
39
2/ 🎯 Why the Change? It's not just a name. We're launching TWO game-changing products and a whole new approach to software security. Stay tuned for details! #softwaresupplychain
36
Learn about the role of CVSS in software supply chain vulnerabilities in our latest blog post, and why severity isn't enough when prioritizing and triaging your vulnerabilities. 🔒🛡️🔎 safetycli.com/research/vulne… #Python #CVSS #Cybersecurity #softwaresupplychain #devsecops #DevOps

Severity and the Common Vulnerability Scoring System (CVSS)

Read "Severity and the Common Vulnerability Scoring System (CVSS)" on the Safety blog. Secure the Developer. Stop the Breach.

getsafety.com
1
1
70
ReDoS Vulnerabilities: Beyond Python (Part 3) Read about our Cybersecurity Intelligence Team's discovery of new ReDoS vulnerabilities in Git-url-parse, Semgrep and OSSGadget in our latest research post pyup.io/posts/beyond-python-… #Cybersecurity #SoftwareSupplyChain #Python #DevSecOps

Research | Safety

Deep dives into threats, malware analysis, and supply chain security research from the Safety team.

getsafety.com
57
Load more