Johan De Keulenaer

🤝 Global Partnerships & Channel @AikidoSecurity | connector & culinary explorer | Views are personal.

[Matt Johansen @mattjay]

Current PHP patch status worldwide

[Aikido @AikidoSecurity]

🔥 We added 3 new images with the PHP2Shell fix, available for FREE in our public ECR: https://t.co/5NpdBD5oMZ

php:7.3.33-fpm
php:7.4.33-fpm
php:8.2.35-alpine3.24

PHP didn't release fixes going back to its 7.* versions so these include patched php:7.* variants too.

[Johan De Keulenaer @ActiveLife]

We built @AikidoSecurity to secure devs.

Now we've launched @NoonSecurity, the modern workforce security platform to secure everybody else

Because these days you don't just need to protect the products you build, you also have to protect the people building them.

[Aikido Community Japan @AikidoCommJP]

コンテナだけではありません。ライブラリも「上げずに直す」。

CVEを直すために依存ライブラリを新バージョンへ上げると、新しいコード、新しいテスト、そして互換性問題がついてくる。

Aikido Librariesは、今使っているバージョンにセキュリティ修正をバックポートします。

パッケージのバージョンはそのまま。脆弱性だけを直す。

すでに7エコシステム、9,000以上のライブラリに対応。

「脆弱性が出たらアップデートする」だけではなく、
「上げずに直す」という選択肢。

#Aikido #AikidoLibraries #DevSecOps #ソフトウェアサプライチェーン

[Aikido @AikidoSecurity]

Aikido Security achieves ISO 42001:2023 certification, the international standard for AI governance. 🌟

Independently audited AI governance is still rare among security vendors, and we’re proud to be a leader in its adoption. ISO 42001 audits the AI management system, meaning the processes and governance around introducing and maintaining AI systems.

Learn more: https://t.co/c6dItWj7uS

[Johan De Keulenaer @ActiveLife]

Next year in the movie theatres 📽️

[Aikido @AikidoSecurity]

Anthropic's Claude Mythos 5 published live malware that compromised a real company and robbed real developers of their SSH keys. Our security researcher Charlie thinks he might have found the package it left behind, and it behaves like it WANTED to be caught.

This package keeps a receipt of the theft in /tmp, announces the loot in plaintext, and ships signed with the build machine's username. The mistakes make sense when you look at it as the output of an AI that wrote it during a security exercise it thought was fake.

Read up: https://t.co/8k9jPzUbMk

[Johan De Keulenaer @ActiveLife]

China DeepSeek open source model goes strong

[pilvar (Philippe Dourassov) @pilvar222]

We added DeepSeek Flash v4 on our cybersecurity benchmark. It's VERY strong.

- It found 24 of 32 CVEs at least once, giving it 75% pass@3 recall

- The cost was $150.22, behind Luna’s repriced $75.36

- It finished only 1 CVE behind GPT-5.6-Sol and Kimi, and 2 behind Opus 5

1/3

[Aikido @AikidoSecurity]

Device Protection now supports Windows 🚀

Block malicious browser extensions, IDE plugins, and code libraries. Device Protection gives you visibility and control over the software packages installed on your devices.

[Polymarket Money @PolymarketMoney]

BREAKING: Microsoft tests China’s Kimi K3 for Copilot as it brings the open-weight model to Azure.

[Johan De Keulenaer @ActiveLife]

@WDelbare @madelinelawren finally A/B testing in the founding team cc @madelinelawren

[Johan De Keulenaer @ActiveLife]

Aikido Securityアプリの日本語対応を開始できることを大変嬉しく思います 🇯🇵 https://t.co/Thn3JEUeKu

[Aikido @AikidoSecurity]

Mini Shai Hulud strikes again... again! We've identified three malicious versions of Microsoft's durabletask on PyPI, 1.4.1, 1.4.2, and 1.4.3, that contain a dropper injected directly into the package's Python source files. This does smell of more TeamPCP shenanigans, but we can’t be sure for now.

If you have these versions of durabletask installed, read our blog for remediation steps and more details about how the worm and infostealer work

-> https://t.co/stOYm7wYO9

[Aikido @AikidoSecurity]

@kirodotdev is rewriting how software gets built. We're making sure it's secure.

Aikido is the first security partner globally that @awscloud going to market with for Kiro. 🚀

AI agents now generate most of your code. Catching security issues in review doesn't scale. So we put Aikido where the agents are. Every change gets scanned automatically.

[Aikido Community Japan @AikidoCommJP]

✅ Aikido Infinite発表：自己保護型ソフトウェアの新しいモデル

https://t.co/DdjHOcbgsW

#ベストプラクティス #Aikido #セキュリティ

[Aikido @AikidoSecurity]

‼️ Evidence of shai hulud 3.0 unfolding

More details to follow as we uncover them

[サイバネットシステム株式会社 @cybernet_csjp]

【ニュースリリース】
ソフト開発工程全体のセキュリティ対策をワンストップで支援！
ソフトウェアの包括的セキュリティ対策ソリューション「Aikido Security」の販売開始。

詳細はこちら👉
https://t.co/X2jLaOSadA

[Johan De Keulenaer @ActiveLife]

@WarMonitor3 BER BRU LHR - https://t.co/wr2rIW8eX3

[Johan De Keulenaer @ActiveLife]

🚨 Cyberattack Sept 19 forced manual check-in/boarding @BrusselsAirport. Traced to an external provider, so other airports on same system possibly hit. BRU has historically run @CollinsAero #vMUSE — confirmation pending. #CyberAttack #AviationSecurity

[Johan De Keulenaer @ActiveLife]

@HeathrowAirport also impacted

[Johan De Keulenaer @ActiveLife]

🚨 Cyberattack Sept 19 forced manual check-in/boarding @BrusselsAirport. Traced to an external provider, so other airports on same system possibly hit. BRU has historically run @CollinsAero #vMUSE — confirmation pending. #CyberAttack #AviationSecurity

[Johan De Keulenaer @ActiveLife]

npm packages with 2 billion weekly downloads hacked in Major Attack https://t.co/ungpDllowc detected via @AikidoSecurity