Safety Cybersecurity

Software Supply Chain Security for Python.
Monitor and secure Python packages against vulnerabilities using the industry's leading vulnerability database.

[Safety Cybersecurity @safetycli]

Have you heard of "cloaking"? Advertisers peddling malicious or adult content use cloaking technology to run ads without getting banned by Google, Facebook, TikTok, etc.
Bad guys are now using it to deliver dynamic payloads in malicious NPM packages! https://t.co/1NGyuifvMT

[Safety Cybersecurity @safetycli]

The Safety research team has identified a new NPM based malware we are calling "Integrator-Filescrypt". This campaign uses a unique "cloaking" technique to hide from researchers and cloud providers. It's sneaky, & effective. Read more on our blog: https://t.co/1NGyuifvMT

[Safety Cybersecurity @safetycli]

A HIGH-severity CVE in cURL and libcurl was disclosed today. Read how these vulnerabilities impact the Python ecosystem and the steps you can take to protect your projects:
https://t.co/ehWvytWn1c #cve #python #curl #libcurl #vulnerabilities #DevOps #devsecops

[Safety Cybersecurity @safetycli]

A HIGH-severity vulnerability in cURL and libcurl has been disclosed. Read our post for details on impacted Python packages and recommended actions. #cve #curl #Python #pythonprogramming #Security #vulnerabilities
https://t.co/ehWvytWn1c

[Safety Cybersecurity @safetycli]

In part 2 of our series on CVSS and the future of vulnerability assessment, read how Safety combines Severity with Exploitability, Reachability, and Project Context to allow developers to focus on the findings that matter. #devops #devsecops #CVSS #Python

[Safety Cybersecurity @safetycli]

CVSS Severity is no longer an effective way to prioritize and triage your vulnerabilities! Learn how Safety's multi-dimensional approach to software vulnerability assessment reduces vulnerability noise by up to 90%. 🔍📊🛡️
https://t.co/sl6Ar0E21r

[Safety Cybersecurity @safetycli]

6/ 🤝 Let's Connect! We're eager to hear your thoughts and challenges in software supply chain security.
https://t.co/vMR72DncjW
#vulnerabilitymanagement

[Safety Cybersecurity @safetycli]

📢 Thread: PyUp is now Safety Cybersecurity! 🎉
1/ 🚀 We've got some exciting news! PyUp is now Safety Cybersecurity! We're on a mission to improve how you secure your software supply chain.
https://t.co/uekr5UnUoL

#SafetyCybersecurity #DevSecOps #SoftwareSupplyChain

[Safety Cybersecurity @safetycli]

4/ 🌍 Beyond Python: Safety DB is expanding to Javascript, Java, and .NET!
#BeyondPython #Python #javascript

[Safety Cybersecurity @safetycli]

3/ 💡 Our Core Tenets
Cut Vulnerability Noise by 90% 🛡️
Proactive, End-to-End Security 🌐
Developer-First Approach 👩‍💻
#Python #DeveloperFirst

[Safety Cybersecurity @safetycli]

2/ 🎯 Why the Change?
It's not just a name. We're launching TWO game-changing products and a whole new approach to software security. Stay tuned for details!
#softwaresupplychain

[Safety Cybersecurity @safetycli]

Learn about the role of CVSS in software supply chain vulnerabilities in our latest blog post, and why severity isn't enough when prioritizing and triaging your vulnerabilities. 🔒🛡️🔎 https://t.co/09rVh6Yqg2

#Python #CVSS #Cybersecurity #softwaresupplychain #devsecops #DevOps

[Safety Cybersecurity @safetycli]

ReDoS Vulnerabilities: Beyond Python (Part 3)
Read about our Cybersecurity Intelligence Team's discovery of new ReDoS vulnerabilities in Git-url-parse, Semgrep and OSSGadget in our latest research post https://t.co/np5M4xXobb #Cybersecurity #SoftwareSupplyChain
#Python #DevSecOps