#software_security — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #software_security, aggregated by home.social.
-
Zapscape (CVE-2026-64561)
https://github.com/V4bel/Zapscape
Comments: https://news.ycombinator.com/item?id=49198843
#HackerNews #Zapscape #CVE-2026-64561 #cybersecurity #vulnerability #hackernews #open_source #software_security
-
Zapscape (CVE-2026-64561)
https://github.com/V4bel/Zapscape
Comments: https://news.ycombinator.com/item?id=49198843
#HackerNews #Zapscape #CVE-2026-64561 #cybersecurity #vulnerability #hackernews #open_source #software_security
-
Taint-анализ в C и C++ анализаторе PVS-Studio
Ваш код принимает данные извне? Поздравляем, вы вступили на минное поле! Любой непроверенный ввод от пользователя может привести к уязвимости, и найти все "растяжки" вручную в большом проекте почти невозможно. Но есть "сапёр" — статический анализатор. Инструмент нашего "сапёра" — taint-анализ (aka анализ помеченных данных). Он позволяет обнаружить "грязные" данные, дошедшие до опасных мест без проверки. Сегодня мы расскажем о том, как он работает.
https://habr.com/ru/companies/pvs-studio/articles/960448/
#taint_analysis #taint #static_analysis #pvsstudio #pvs #c++ #dataflow #dataflow_analysis #security #software_security
-
CISA Urges Software Makers to Eliminate OS Command Injection Vulnerabilities - https://www.redpacketsecurity.com/cisa-urges-software-makers-to-eliminate-os-command-injection-vulnerabilities/
#threatintel #os_command_injection #cybersecurity #software_security
-
CISA Urges Software Makers to Eliminate OS Command Injection Vulnerabilities - https://www.redpacketsecurity.com/cisa-urges-software-makers-to-eliminate-os-command-injection-vulnerabilities/
#threatintel #os_command_injection #cybersecurity #software_security
-
White House Urges Tech Industry to Eliminate Memory Safety Vulnerabilities - https://www.redpacketsecurity.com/white-house-urges-tech-industry-to-eliminate-memory-safety-vulnerabilities/
#threatintel #Memory-safe_programming_languages #Software_security #Cybersecurity_vulnerabilities
-
White House Urges Tech Industry to Eliminate Memory Safety Vulnerabilities - https://www.redpacketsecurity.com/white-house-urges-tech-industry-to-eliminate-memory-safety-vulnerabilities/
#threatintel #Memory-safe_programming_languages #Software_security #Cybersecurity_vulnerabilities
-
CISA|NSA|FBI|ACSC|CCCS|CERTNZ|NCSC-NZ|NCSC-UK|BSI|NCSC-NL | NCSC-NO | NÚKIB | INCD | KISA | NISC-JP | JPCERT/CC | CSA | CSIRTAMERICAS
Secure by Design
Shifting the Balance of Cybersecurity Risk
Principles and Approaches for Secure by Design Software