Checkmarx Open Source @CheckmarxOSS

@checkmarx Open Source Program Office. github.com/Checkmarx The internet Joined June 2021

Tweets

42
Followers

90
Following

456
Likes

77

Checkmarx @Checkmarx

2 years ago

3 Million Downloads – What a milestone! KICS is a free, #opensource solution for static code analysis of IaC developed by Checkmarx and the open source community. Download now: hubs.ly/Q02gyr3j0 #CheckmarxSecurity #IAC #ApplicationSecurity #DevSecOps

0 2 6 197 0

Download Image

Checkmarx @Checkmarx

2 years ago

Coming to #BHEU? Take this one-of-a-kind opportunity to learn about 2MS, the connection to #softwaresupplychain attacks & every developer's responsibility from our leading #supplychainsecurity experts @ZackZoren & @jossefharush. Learn more: bit.ly/3uPvBMN #AppSec

0 1 0 160 0

Download Image

Checkmarx Zero @CheckmarxZero

2 years ago

The OpenSSF Package Analysis team just dropped a game-changer in the fight against cyber threats by introducing the Malicious Packages repository. openssf.org/blog/2023/10/1… #openssf #opensource #maliciouspackages #supplychainsecurity

1 1 1 128 1

Reviewpad (part of Snyk) @reviewpad

2 years ago

Save the date: DevToolsPorto_ is back on April 21st, with João Reigota from @Checkmarx, speaking about Kics 📷 Come join us!

1 2 3 351 0

Download Image

Checkmarx @Checkmarx

3 years ago

Have you checked out Checkmarx c{api}tal – our built-to-be-vulnerable #API app based on the @owasp top 10 API vulnerabilities? Use it to learn, train & exploit #APISecurity vulnerabilities within your own API Security CTF: bit.ly/3ZuWCPR #CheckmarxSecurity

1 2 4 385 0

Checkmarx @Checkmarx

3 years ago

KICS, our #IaC security open source project, is participating in #Hacktoberfest2022. If you're a Golang developer or a #softwaresecurity specialist - look at the issues we're tagged for the event or create your own improvements. #CheckmarxSecurity #OpenSource

1 6 10 0 0

Download Image

Checkmarx Open Source @CheckmarxOSS

3 years ago

Our 4th kics community meeting is just around the corner! September 22nd at 15h00 UTC+0 Where: checkmarx.zoom.us/j/84701317570?… In this session we will - Discuss about our preparation for HacktoberFest - Discuss about Github Action migration to 1.6 - Hear your feedback on version 1.6.0

0 0 0 0 0

Checkmarx @Checkmarx

3 years ago

The third KICS #OpenSource community meeting is today, at 2:30PM UTC. Don’t miss: bit.ly/3QFgawh Agenda: ✔️Initial plans for KICS 1.6.1 ✔️Preparation for HacktoberFest ✔️Issues we're currently working on ✔️Hear your feedback #CheckmarxSecurity #AppSec #DevSecOps #IaC

1 2 3 0 0

Download Image

Checkmarx Open Source @CheckmarxOSS

3 years ago

IaC scans with KICS at Visual Studio @code

Checkmarx @Checkmarx

3 years ago

IaC scans with KICS at Visual Studio @code

0 1 4 0 1

0 2 2 0 0

Jossef Harush Kadouri @jossefharush

3 years ago

It's Saturday and our systems detected a large-scale attack on the Python ecosystem with multi-stage persistent malware pypi.org/user/devfather… #supplychainsecurity #malware #python #research #supplychain #github #pypi

3 6 4 0 0

Download Image

Abhinav Sejpal @AbhinavSejpal

4 years ago

IMO, #Kics is one of the best #Iac open source solution. github.com/Checkmarx/kics

1 1 8 0 1

CloudBreach @Cloud_Breach

3 years ago

#BreachingAzure Lab: Learn how to use #kics tool and identify misconfiguration in #Terraform Infrastructure as Code solution. #IaC #Kubernetes #CloudSecurity #CloudBreach #RedTeam #AzureSecurity #AKS #DevSecOps #DevOps #BlueTeam #Azure cloudbreach.io

1 4 11 0 0

Download Gif

Checkmarx @Checkmarx

3 years ago

KICS is simple to install, run, and integrate into your CI, and it’s free. Maybe that’s why it crossed 600k downloads and reached 1000 @github stars, and is still growing. Find out more about it: bit.ly/3shaTSd #CheckmarxSecurity #opensource #appsec @CheckmarxOSS

1 5 6 0 1

Download Image

Checkmarx @Checkmarx

3 years ago

Just because a code package is "popular," that doesn't mean it's credible. Learn about #StarJacking in this @CRN article and #CheckmarxSecurity: bit.ly/3s0S7Ox

0 3 4 0 0

Checkmarx @Checkmarx

3 years ago

KICS allows you to set API security standards for your organization and enforce them through IaC scanning, without slowing down your software delivery pipeline. Learn more about this free download: bit.ly/3KeCvxo #CheckmarxSecurity #opensource #appsec @CheckmarxOSS

0 2 5 0 0

Download Image

Checkmarx @Checkmarx

3 years ago

The latest sneak attack on the trust in the #opensource security world is #StarJacking - a technique for making a package look more popular than it is. Read the latest discovery by @ZackZoren @jossefharush & Aviad Gershon here cutt.ly/HF3YKtQ #AppSec #opensourcesecurity

0 5 9 0 0

Checkmarx @Checkmarx

3 years ago

Checkmarx is closely monitoring #Spring4Shell and all other Spring vulnerabilities (CVE-2022-22963, CVE-2022-22950). Checkmarx SCA customers can scan their code for those vulnerabilities and get the latest remediation solutions. #springshell bit.ly/3IVeryI

1 5 6 0 0

Checkmarx @Checkmarx

4 years ago

Introducing ChainAlert, to continuously monitor new open source activities and help minimize the damages from future attacks by closing the gap between takeover – to detection and mitigation. Read more in our blog post here: bit.ly/3B8tItI #opensource #npm

0 3 3 0 0

Checkmarx @Checkmarx

4 years ago

💡Steer clear of #IaC misconfigurations and new attack vectors in 2022! 👨‍💻 @bendet_ori Head of Product Management, SAST & Engines at Checkmarx, analyzed an extensive number of #KICS scans and developed a list of the top 5 to check off your list 👇 bit.ly/3HnwDkc

0 2 3 0 0

Checkmarx @Checkmarx

4 years ago

Some good #log4j news! The fix for CVE-2021-45105 for Java7 users will be available soon in V2.12.3. Even better news for Java6 users, since they will be getting their fix for all presently known log4j vulnerabilities in V2.3.1 soon. bit.ly/3EeYe5b #opensource