Extended Berkeley Packet Filter (eBPF) is a Linux technology that allows sandboxed programs to run in the Linux kernel. The kernel manages system memory, running processes, and hardware resources. eBPF supports application performance monitoring, network traffic management, and security monitoring without requiring changes to the kernel source code. eBPF programs run when specific events occur. […]
San Jose, California, August 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution, announced a partnership with Selenium, a technology and cybersecurity company dedicated to helping organizations secure their digital environments, strengthen operational resilience, and accelerate their transformation journeys. Through this partnership, Selenium uses Wazuh […]
San Jose, California, June 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) platform, announced a partnership with Cyber Guard Pro, a cybersecurity, Secure AI and compliance solutions provider specializing in enterprise-grade security monitoring, threat detection, and operational resilience. Through this partnership, Cyber Guard Pro utilizes […]
Kubernetes workloads introduce security risks when deployed with excessive privileges, unsafe configurations, or settings that do not meet organizational requirements. Admission controls evaluate resource requests before Kubernetes creates or updates resources. These policy decisions provide useful security telemetry by identifying non-compliant workloads, rejected deployment attempts, and configuration changes. Kyverno is a Kubernetes-native policy engine that […]
San Jose, California, September 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution, announced a partnership with AI Cyber Consulting, a provider of Managed Security Services Provider (MSSP) solution designed specifically for TVET colleges, universities, and small companies. Through this partnership, AI Cyber Consulting will […]
Privilege escalation is the process by which an attacker gains permissions beyond those assigned to their current account. On Windows endpoints, threat actors who gain initial access as a standard user may exploit misconfigurations to obtain administrator or NT AUTHORITY\SYSTEM privileges. With elevated privileges, an attacker can disable security controls, access protected files, dump credentials, […]
Web application firewalls (WAFs) secure web applications by inspecting HTTP traffic and blocking malicious requests before they reach backend services. They help protect applications from attacks such as SQL injection, cross-site scripting (XSS), path traversal, command injection, and other threats covered by the OWASP Core Rule Set (CRS). Coraza is an open source WAF engine […]
Attackers often abuse legitimate Windows features and applications to execute malicious code, steal credentials, establish persistence, and evade security controls. Detecting these behaviors early helps security teams identify suspicious activity before it leads to further compromise. Microsoft Defender Attack Surface Reduction (ASR) rules help protect Windows endpoints by restricting behaviors commonly abused by malware and […]
San Jose, California, June 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution, announced a partnership with E Defence, a cybersecurity and software engineering provider serving organizations across West Africa and the UEMOA region. Through this partnership, E Defence will utilize Wazuh as the central […]
AWS access keys are credentials that applications, users, and automation tools use to authenticate to AWS services through APIs. Each key consists of an access key ID and a secret access key. The associated IAM identity determines which AWS resources and operations the credentials can access. When access keys are exposed through public repositories, build […]
Langflow is an open source, low-code platform for building and deploying AI-powered agents and workflows. These workflows, called flows, define how AI models, prompts, and other components interact to process a request. Organizations can publish flows as HTTP endpoints, allowing applications and users to interact with them remotely. Exposing these endpoints to the internet increases […]
SUID (Set User ID) and SGID (Set Group ID) are special Linux file permission bits. They allow a program to run with the privileges of the file owner or group rather than the user who launches it. Legitimate binaries such as passwd, sudo, and chage rely on these bits to perform privileged operations safely. Attackers […]
San Jose, California, July 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution, announced a partnership with Clober, SATEC Group’s Cloud and Cybersecurity brand, specialized in delivering robust, secure solutions for complex technology environments. Through this collaboration, Clober relies on Wazuh as its core platform […]
San Jose, California, July 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution, announced a partnership with Cybolt, who provide comprehensive security and compliance solutions that safeguard clients against an ever-changing threat environment. Through this partnership, Cybolt will use Wazuh to leverage the platform for […]
