Robuta

https://unit42.paloaltonetworks.com/monitoring-npm-supply-chain-attacks/ The npm Threat Landscape: Attack Surface and Mitigations (Updated May 21) May 21, 2026 - Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. threat landscapeattack surfacenpm https://www.sei.cmu.edu/library/demystifying-ai-risk-an-actionable-framework-aligning-business-needs-to-risks-and-mitigations/ Demystifying AI Risk: An Actionable Framework Aligning Business Needs to Risks and Mitigations |... This invited speaker session was presented by Omar Khawaja of Databricks at DevSecOps Days Washington D.C. 2024, held on September 18, 2024. https://blog.cloudflare.com/madeyoureset-an-http-2-vulnerability-thwarted-by-rapid-reset-mitigations/ MadeYouReset: An HTTP/2 vulnerability thwarted by Rapid Reset mitigations Aug 19, 2025 - A new HTTP/2 denial-of-service (DoS) vulnerability called MadeYouReset was recently disclosed by security researchers. Cloudflare HTTP DDoS mitigation, already... httpvulnerabilitythwartedrapidreset https://www.ideals.illinois.edu/items/92521 Topology Control Analysis Mitigations for Geomagnetically Induced Currents | IDEALS topologycontrolanalysismitigationsinduced https://thehackernews.com/2022/10/microsoft-issues-improved-mitigations.html Microsoft Issues Improved Mitigations for Unpatched Exchange Server Vulnerabilities Microsoft has released an improved mitigation method to prevent exploitation attempts against recently disclosed unpatched Exchange server Flaws. exchange servermicrosoftissuesimprovedmitigations https://blogs.cisco.com/security/mitre-attck-the-magic-of-mitigations MITRE ATT&CK: The Magic of Mitigations - Cisco Blogs the magicmitreattckmitigations https://research.checkpoint.com/2023/gpt-vs-malware-analysis-challenges-and-mitigations/ GPT vs Malware Analysis: Challenges and Mitigations - Check Point Research Nov 15, 2023 - Latest Research by our Team malware analysischeck pointgptvschallenges https://datatracker.ietf.org/doc/draft-iab-privsec-confidentiality-mitigations/08/ draft-iab-privsec-confidentiality-mitigations-08 - Confidentiality in the Face of Pervasive... The IAB has published [RFC7624] in response to several revelations of pervasive attack on Internet communications. This document surveys the most plausible... in thedraftiabprivsecconfidentiality https://blogs.vmware.com/tanzu/risks-and-mitigations/ Risks & Mitigations - Tanzu Jan 2, 2024 - Surface risks and how the team might mitigate them Phases Kickoff Inception Remote Suggested Time 30-60 min Participants Core team, stakeholders Why do it? We... risksmitigationstanzu https://www.sei.cmu.edu/library/3-api-security-risks-and-mitigations/ 3 API Security Risks and Mitigations | CMU Software Engineering Institute This SEI Bulletin newsletter was published on July 17, 2024. api security riskssoftware engineeringmitigationscmuinstitute https://internals.rust-lang.org/t/spectre-mitigations-in-rust/13353 Spectre mitigations in Rust - compiler - Rust Internals Nov 9, 2020 - I was looking up everywhere and could not find any mitigations for Spectre attack by the Rust compiler(s)! Do you know if there are any mitigations for... rust compilerspectremitigationsinternals https://simple.wiktionary.org/wiki/mitigations mitigations - Simple English Wiktionary simple englishmitigationswiktionary https://lists.w3.org/Archives/Public/public-device-apis-log/2023Jun/0057.html Re: [compute-pressure] Note TAG guidance on private browsing modes in mitigations (#224) from Anssi... https://publications-cnrc.canada.ca/eng/view/object/?id=5be2ea32-ef2f-4c00-ab61-31907418068b Predicting long-term urban overheating and their mitigations from nature based solutions using... Predicting long-term urban overheating and their mitigations from nature based solutions using machine learning and field measurements https://datatracker.ietf.org/doc/draft-iab-privsec-confidentiality-mitigations/email/ Email expansions for draft-iab-privsec-confidentiality-mitigations-08 emailexpansionsdraftiabprivsec https://lists.gnupg.org/pipermail/gnupg-devel/2018-May/033664.html EFail mitigations for S/MIME efailmitigationsmime https://security.googleblog.com/2018/06/compiler-based-security-mitigations-in.html Google Online Security Blog: Compiler-based security mitigations in Android P Posted by Ivan Lozano, Information Security Engineer [Cross-posted from the Android Developers Blog ] Android's switch to LLVM/Clang a... online securitygoogleblogcompilerbased https://www.redhat.com/en/blog/log4shell-practical-mitigations-and-impact-analysis Log4Shell: Practical Mitigations and Impact Analysis of the Log4j Vulnerabilities To mitigate the 0-day exploit in the Java logging utility Apache Log4j 2, Red Hat strongly recommends applying updates as errata becomes available and... impact analysisof thepracticalmitigationsvulnerabilities https://research.vu.nl/en/publications/branch-history-injection-on-the-effectiveness-of-hardware-mitigat/ Branch History Injection: On the Effectiveness of Hardware Mitigations Against Cross-Privilege... branch historyon the https://unit42.paloaltonetworks.com/apache-log4j-vulnerability-cve-2021-44228/?pdf=print&lg=en&_wpnonce=c49489dfaf Apache log4j Vulnerability CVE-2021-44228: Analysis and Mitigations Jun 6, 2024 - Background and a root cause analysis of CVE-2021-44228, a remote code execution vulnerability in Apache log4j, with recommended mitigations. apachevulnerabilitycveanalysismitigations https://nationalhomesecurityauthority.com/smart-doorbell-security-risks/ Smart Doorbell Cybersecurity Risks and Mitigations Smart doorbells occupy a unique position in residential security infrastructure: they sit at the physical perimeter of a home while simultaneously operating as... smart doorbellcybersecurity risksmitigations https://blog.checkpoint.com/artificial-intelligence/5g-network-ai-models-threats-and-mitigations/ 5G network AI models: Threats and Mitigations - Check Point Blog Nov 20, 2024 - Modern communications networks are increasingly reliant on the use of AI models for enhancing the performance, reliability and security of their network aicheck pointmodelsthreatsmitigations https://cloud.withgoogle.com/cloudsecurity/podcast/ep173-saif-in-focus-5-ai-security-risks-and-saif-mitigations/ EP173 SAIF in Focus: 5 AI Security Risks and SAIF Mitigations The Cloud Security Podcast from Google is a weekly news and interview show with insights from the cloud security community. ai security risksin focussaifmitigations https://www.edpb.europa.eu/our-work-tools/our-documents/support-pool-experts-projects/ai-privacy-risks-mitigations-large_bg AI Privacy Risks & Mitigations Large Language Models (LLMs) | European Data Protection Board large language modelseuropean data protectionai privacy https://knowledge.broadcom.com/external/article?legacyId=76050 VMware Performance Impact Statement addressing mitigations for Machine Check Exception on Page Size... https://www.elastic.co/blog/rop-dying-and-your-exploit-mitigations-are-life-support ROP is dying and your exploit mitigations are on life support | Elastic Blog Apr 18, 2024 - Too often the defense community makes the mistake of focusing on the what, without truly understanding the why. This mindset often leads to the development of... https://arxiv.org/html/2506.06414v2 Benchmarking Mitigations Against Covert Misuse benchmarkingmitigationscovertmisuse https://groups.google.com/a/chromium.org/g/blink-dev/c/VMTLpimgZTo Intent to Prototype: WebDriver commands for triggering Bounce Tracking Mitigations bounce trackingintentprototypewebdrivercommands https://bth.diva-portal.org/smash/record.jsf?pid=diva2:830777 Outsourced Offshore Software Testing Challenges and Mitigations offshore softwaretesting challengesoutsourcedmitigations https://datatracker.ietf.org/doc/draft-iab-privsec-confidentiality-mitigations/00/ draft-iab-privsec-confidentiality-mitigations-00 - Confidentiality in the Face of Pervasive... The IAB has published [I-D.iab-privsec-confidentiality-threat] in response to several revelations of pervasive attack on Internet communications. In this... in thedraftiabprivsecconfidentiality https://support.citrix.com/external/article/CTX263718/enable-mitigations-for-cve201812207.html Enable mitigations for CVE-2018-12207 Enable mitigations for CVE-2018-12207 enablemitigationscve https://smarthomesecurityauthority.com/smart-speaker-privacy-risks/ Smart Speaker Privacy Risks and Mitigations Smart speakers occupy a structurally distinct position in the residential threat landscape: always-on microphones connected to cloud processing infrastructure,... smart speakerprivacy risksmitigations https://nmosier.github.io/talks/serberus Serberus: Comprehensive Spectre Mitigations for Constant-Time Code - Nicholas Mosier Apr 13, 2023 - I presented Serberus, our comprehensive Spectre mitigation for constant-time programs that targets existing Intel hardware. time codeserberuscomprehensivespectremitigations https://unit42.paloaltonetworks.com/apache-log4j-vulnerability-cve-2021-44228/?pdf=download&lg=en&_wpnonce=c49489dfaf Apache log4j Vulnerability CVE-2021-44228: Analysis and Mitigations Jun 6, 2024 - Background and a root cause analysis of CVE-2021-44228, a remote code execution vulnerability in Apache log4j, with recommended mitigations. apachevulnerabilitycveanalysismitigations https://knowledge.broadcom.com/external/article?legacyId=67577 Implementing Hypervisor-Specific Mitigations for Microarchitectural Data Sampling (MDS)... data samplingimplementinghypervisorspecificmitigations https://mobilesecurityauthority.com/android-security-vulnerabilities/ Android Security Vulnerabilities: Known Exploits and Mitigations Android's open-source architecture, combined with a fragmented device ecosystem spanning thousands of hardware configurations and over a dozen active OS... android securityvulnerabilitiesknownexploitsmitigations https://security.googleblog.com/2018/06/compiler-based-security-mitigations-in.html?hl=en_GB Google Online Security Blog: Compiler-based security mitigations in Android P Posted by Ivan Lozano, Information Security Engineer [Cross-posted from the Android Developers Blog ] Android's switch to LLVM/Clang a... online securitygoogleblogcompilerbased https://pure.psu.edu/en/publications/navigating-vortex-gust-interactions-and-mitigations-by-plunging-w/ Navigating vortex gust interactions and mitigations by plunging wings - Penn State navigatingvortexgustinteractions https://datatracker.ietf.org/doc/draft-iab-privsec-confidentiality-mitigations/history/ History for draft-iab-privsec-confidentiality-mitigations -08 historydraftiabprivsecconfidentiality