cisagov/CSAF: Merge pull request #464 from cisagov/8/27
Merge pull request #464 from cisagov/8/27 8/27 CSAFs
Daily edition · DevSec
The daily ledger
TILens turns technical updates into a focused daily brief: official releases, trusted reporting, and practitioner analysis, deduplicated and organized by topic.
anchore/grype: v0.118.0
Added Features apk matcher does alias aware aggregation [PR #3634 @crosleyzack] Bug Fixes prevent panic on portage versions without digits [PR #3655 @ashvinctrl] grype vex does not match oci purl with repository_url…
cisagov/CSAF: adding Redis CSAF
adding Redis CSAF Signed-off-by: Tyler Zellers <tyler.zellers@mail.associates.cisa.dhs.gov>
cisagov/CSAF: 8/27 CSAFs
8/27 CSAFs
Extend Amazon Bedrock Guardrails to Tool Interactions Using the Strands Agents SDK
If you’re running AI agents in production, Amazon Bedrock Guardrails protects the model boundary. But your agents also invoke tools, fetch external data, and communicate with other systems. That data flows outside the…
cisagov/CSAF: Merge pull request #463 from tzellers-cisa/comfyui
Merge pull request #463 from tzellers-cisa/comfyui adding ComfyUI CSAF
Chinese Routers Sold Worldwide Contain Backdoors
An untold number of ZBT routers sold around the world as white-label products come with several implants built by the manufacturer.
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026
This installment of the Reporters' Notebook video series discusses the topics that dominated the cybersecurity conference, such as AI's effects on vulnerability reporting and security research.
Russian Hackers Phish EU Officials Over Messaging Apps
EU governments are trying to move away from popular messaging apps as nation-state threat groups shift their focus from email to Signal and WhatsApp.