Upwind Field-CTO Tomer Hadassi and H2O.ai Cloud Engineering Manager Ophir Zahavi take the stage at AWS Summit Tel Aviv to discuss how Upwind empowers H2O.ai’s cloud security with runtime protection and build-time insights for end-to-end context and prioritized risk.
Upwind & H2O.ai Take the Stage at AWS Summit Tel Aviv
Contents
Further Reading
You Can’t Crowdsource Your Way to a Live Adversary
Bug bounty programs were built on a single assumption: that finding a vulnerability was the hard, scarce, expensive part worth paying for. That assumption held for about a decade, then AI erased it. When anyone can point a model at your code and receive a plausible-looking finding back in seconds, a crowd of finders stops…
arrayref Supply Chain Attack: A One-Line Build Dependency Ran a Backdoor During cargo build
Key Takeaways Executive Summary arrayref 0.3.10 is a hijacked release of a widely used Rust utility crate that added one dependency, proc-macro1, whose build script downloaded and executed a remote binary at compile time. The release was live on crates.io for 86 minutes on August 20, 2026, alongside [email protected] and [email protected] published from the same…
ArgoCD repoURL XSS: How a Missing Scheme Check Becomes Cluster Takeover
Executive Summary This stored cross-site scripting (XSS) vulnerability in ArgoCD [versions <= 3.4.4] allows an attacker who can create or modify an Application to persist a malicious repoURL, which is subsequently executed in an administrator's browser within the Argo CD origin. Because the payload executes in the context of the administrator's authenticated session, and because…