Aikido
@AikidoSecurity
Secure everything devs build, ship & run.
🌐
⭐️
Get developers back to building.
1.2K Following 12K Followers
🚨 Latest versions of WordPress are vulnerable to pre-authentication remote code execution (RCE) via SQL injection
<= 6.8.5: not affected
6.9.0 - 6.9.4: affected
7.0.0 - 7.0.1: affected
My first AI assistants.
Got an unhinged sticker idea for BSides, BH, or DEF CON?
Share it in the comments. I'll print 5,000 stickers of the best ones & bring them to Vegas for you.
When are you acquiring my new startup, @AikidoSecurity ?
Europe now has category leaders across the AI stack
A new report by Headline has mapped the top 100 AI companies across Europe by each layer of the AI stack.
From the frontier labs to intelligent hardware, Europe is now building category leaders at each layer of the stack.
What's particularly amazing to see is how quickly things have changed in the last year.
There have been multiple $1bn rounds that have gone into the companies that are on this image, some of these companies didn't even exist a year ago.
HUGE CONGRATS to those on the top 100 list.
@JonUsero @HeadlineVC
Show more
Finally found a vibe coder with actually honest release notes 😂
i wish i knew how to quit you
A giant sandworm takes over a New York City subway train to promote DUNE 3
should i buy a billboard in SF that says this?
he commits code but won’t commit to you?
@RhysSullivan You forgot this:
🚨 BREAKING
Our friends at @AikidoSecurity just launched Aikido Code Audit, and OWASP Members try it for FREE!!!!
Every OWASP member gets 200 Aikido credits to run it on their own codebase.
Frontier AI models just made finding and exploiting logic flaws cheap. Now you can harness that same reasoning on your own codebase to find the hidden vulnerabilities you would have needed a pentest for before.
Sign up with your OWASP email in Aikido to claim your credits.
Find out more
Not an OWASP Member, well, now is the perfect time to join the mission and claim this brand new benefit!
Show more
Hallelujah! v12 is now out. Get upgraded, folks!
@0xTib3rius I made it better for you :P
New sticker for DEF CON this year.
First stop for @BlackHatEvents week: Omega Mart 🛒💜
We’re teaming up with @awscloud and @Tailscale for an after-hours happy hour on August 4.
Food, drinks, good conversations, full access to explore Omega Mart, and an interactive scavenger hunt through the aisles.
Show more
GitHub shipped bulk credential revocation for Enterprise. One action cuts off compromised credentials across the entire org during an active incident.
Recent attacks have shown what happens when revocation is slow or incomplete. The Trivy compromise came back for a second round because the first cleanup left at least one credential alive. Incomplete rotation is what keeps attacks going after the initial breach.
Show more
Update 5:05 PT: The attack has now expanded well beyond @TanStack and @Mistral.
373 malicious package-version entries across 169 npm package names, including @uipath, @squawk, @tallyui, @beproduct, and more.
The malware propagates by stealing your CI credentials and using them to publish new compromised versions.
Full IOCs, affected package list, and detection steps:
Show more
Aikido Device Protection blocks malicious extensions, IDE plugins, and packages. Full visibility and control over every developer device.
Block malicious browser extensions, IDE plugins, and code libraries. Aikido Device Protection gives you visibility and control over the software packages installed on your dev's devices.
