Katia Bukcovac

Wazuh Ambassador Community Coordinator | Join now ⬇️🚀

[Wazuh @wazuh]

Attackers with sufficient privileges can abuse eBPF attachment points to intercept credentials, terminate tracing tools, or block traffic.

See how Wazuh detects unapproved eBPF programs across PAM, ptrace, XDP, and cgroups.

Read on: https://t.co/CbgRXWlPTW

[Wazuh @wazuh]

Wazuh 5.0 Release Candidate 1 is here 🚀

Our biggest platform release to date is now available as RC 1, a more mature release ready for hands-on testing ahead of general availability.

General availability is coming soon.

Learn more: https://t.co/jz5cUgsYaV

[Lester Nichols @sec_doc]

Fail Closed Without Standing Still
https://t.co/gvojiRrGMJ

#security-automation #devsecops #platform-engineering #wazuh #open-source #reliability

[Wazuh @wazuh]

Kyverno enforces security policies in Kubernetes, but its policy reports and events stay inside the cluster by default. Our new blog post shows how Wazuh detects Kyverno policy violations.

Read on: https://t.co/FdXJDlDJUU

[Wazuh @wazuh]

Wazuh and AI Cyber Consulting Announce Partnership to Strengthen SOC Services

Read more: https://t.co/E5vAWFrxKa

#CyberSecurity #OpenSource #SOC

[Wazuh @wazuh]

Dell ObjectScale is affected by CVE-2026-70416 (CVSS 9.8 - Critical), an unauthenticated deserialization flaw that can lead to remote code execution. Upgrade to 4.4.0.0 or later immediately.

Read more: https://t.co/IlM5QyDYMY

[Blue Team News @blueteamsec1]

Reducing shadow IT visibility gaps with Wazuh https://t.co/2LCT7MBSsV #Security

[BleepingComputer @BleepinComputer]

👀 You can't secure what you can't see. Shadow IT can leave endpoints, software, and other assets outside existing monitoring.

🔍 @wazuh explains how security teams can identify and reduce these visibility gaps.

➡️ https://t.co/Q81YSSM6bv
#cybersecurity #sponsored

[elhacker.NET @elhackernet]

Cómo reducir los puntos ciegos del Shadow IT con Wazuh

El "Shadow IT" consiste en el uso de hardware y software no autorizado que crea brechas de seguridad al ser invisible para los equipos de iT
https://t.co/zRkwr091vN

[Wazuh @wazuh]

Privilege escalation allows attackers to turn a standard-user foothold into full SYSTEM access on a compromised Windows system.

Our new blog post shows how to detect Windows privilege escalation techniques using Wazuh.

Read on: https://t.co/EPN5MJulDU

[Wazuh @wazuh]

Thank you, @BleepinComputer, for the article Reducing shadow IT visibility gaps with Wazuh.

Read more: https://t.co/HS15XpvDzt

#OpenSource #CyberSecurity

[Wazuh @wazuh]

GitLab CE/EE is affected by CVE-2026-85706 (CVSS 10.0 - Critical), an unauthenticated arbitrary file read flaw in the repository commits API. Upgrade to 19.1.8, 19.2.6, or 19.3.2.

Read more: https://t.co/S97GzClluR

[Katia Bukcovac @KatiaBuk]

We’ve got good news: this Meetup is now online and open to everyone! 🌐

Join us tomorrow to explore Wazuh + Velociraptor for DFIR, in collab with iSecNG GmbH.

📅 Sept 17 | 🕧🇩🇪 12:30 PM | 💬 German
💻 Join: https://t.co/GROOjdTKDP

@wazuh #DFIR #Velociraptor #Cybersecurity

[Wazuh @wazuh]

Google Chrome is affected by CVE-2026-84325 (CVSS 9.8 - Critical), an improper input validation vulnerability in DataTransfer. Update to 152.0.7977.75 or later.

Read more: https://t.co/8mMaKZobNm

[CHEXUM @Chexum_]

Wazuh ships with thousands of detection rules.

The three that will catch your actual incident are not in there.

They describe your environment, not Windows.

The first three we write on every deployment 👇

[Wazuh @wazuh]

Attackers abuse legitimate Windows features to run malicious code, steal credentials, and persist. Our latest blog post shows how to integrate Microsoft Defender ASR telemetry with Wazuh.

Read on: https://t.co/CGbPGzjfgo

[Wazuh @wazuh]

A big thank you to everyone who joined our recent Wazuh MeetUp in Sao Paulo 🇧🇷, Online for the Middle East area 🇸🇦 and Santiago 🇨🇱.

Great perspectives about Wazuh and its capabilities in different parts of the world.

🔗https://t.co/HmVkV6hcxO

[Alfon 🎸 Seguridad y Redes @seguridadyredes]

#Wazuh 5.0 Beta 5

[Karina Fernandez @KarinaSalesOps]

It's here!!! 🎉 Wazuh 5.0 is our biggest platform release to date. It rebuilds the platform around a unified data model, the Wazuh Common Schema (WCS), and introduces a next-gen detection engine and #AI-native threat intelligence with Wazuh CTI. 👇🏻
#CyberSec #ThreatIntelligence

[Arek Siczek @arkady86]

Wazuh 5.0 nadciąga. Beta 5 już dostępna do przetestowania. 🚀

Co nowego?

⚡ Nowy silnik detekcji

WCS, czyli Wazuh Common Schema łączyzdarzenia z dowolnego źródła i formatu logów do jednego standardu. Do tego wsparcie dla reguł w formacie Sigma oraz nowa, czytelna dla człowieka składnia reguł i dekoderów.

🛡 Wazuh CTI, czyli Threat intelligence ze wsparciem AI

Wbudowane, stale aktualizowane threat intelligence. Obejmuje reguły, dekodery, wskaźniki kompromitacji (IoC), wskaźniki ataku (IoA), informacje o podatnościach oraz kontekst Geo-IP. Wszystko dostarczane automatycznie z Wazuh CTI, bez konieczności ręcznych aktualizacji.

🔷 Ponadto:
- Prostsza architektura bez Filebeata
- Agent oddzielony od managera, domyślna komunikacja agentów po HTTPS
- Kompatybilność z agentami 4.x
- Content Manager: dedykowane przestrzenie dla dekoderów, reguł, integracji, KVDB oraz IoC, każda z obiegiem pracy obejmującym wersję roboczą, testy i wysyłkę na proda.
- Asystent AI w dashboardzie z obsługą zapytań (promptów) w języku "ludzkim"
- Case management: tworzenie i śledzenie zdarzeń bezpośrednio z dashboardu Wazuh.
- Szersze pokrycie regulacji: uwzględnia ISO 27001, CMMC, NIS2, FedRAMP i inne.

Czekasz? Testujesz?

PS: W zimę robimy Wazuha. Wyszło z ankiety, że tego chcecie! Szukam trenera. Jak kogoś polecasz to daj znać. Jeden warunek. Musi wymiatać, mieć charyzmę i być najlepszy! Jak chcesz powiadomienie gdy wystartujemy to zapisz się na mój newsletter.