BLOG

0.0.0.0 Day: Exploiting Localhost APIs From the Browser

Shadow Vulnerability

0.0.0.0 Day: Exploiting Localhost APIs From the Browser

“0.0.0.0 Day” - a vulnerability allows malicious websites to bypass browser security and interact with local services.

Oligo Named Finalist by SC Awards for Best Supply Chain Solution of 2024

Nadav Czerninski

September 3, 2024

Shadow Vulnerability

TensorFlow Keras Downgrade Attack: CVE-2024-3660 Bypass

August 20, 2024

Recent CrowdStrike Outage Emphasizes the Need for eBPF-Based Sensors

Now Showing in the Oligo Application Defense Platform: Direct and Transitive Dependencies

Jeanette Sherman

Shadow Vulnerability

Shelltorch Explained: Multiple Vulnerabilities in Pytorch Model Server (Torchserve) (CVSS 9.9, CVSS 9.8) Walkthrough

App-Level eBPF Applications - User vs. Kernel Probes

Critical RCE Vulnerabilities in OpenSSH (CVE-2024-6387, CVE-2024-6409) - How to Detect and Mitigate

Practical AppSec, Part II: The Limitations of “Shift Left” (and Why Runtime Is the Right Time)

Jeanette Sherman

What is Application Detection & Response (ADR)?

Shadow Vulnerability

Oligo ADR in action: PaddlePaddle Shadow Vulnerability

Nitzan Mousseri

Oligo Security Named to Rising in Cyber 2024

Nadav Czerninski

Shadow Vulnerability

Oligo ADR in Action: LLM Prompt Injection

Nitzan Mousseri

Deep Dive on the XZ Backdoor: CVE 2024-3094 Enables Remote Code Execution in XZ (5.6.0-5.6.1)

Jeanette Sherman

XZ-actly What You Need (CVE-2024-3094): Detecting Exploitation with Oligo

Nitzan Mousseri

Shadow Vulnerability

ShadowRay: First Known Attack Campaign Targeting AI Workloads Actively Exploited In The Wild

The Definitive Guide to Runtime Vulnerability Prioritization

On Loaded vs. Executed Libraries During Runtime – What This Means for Reachability

February 28, 2024

Practical AppSec, Part I: Why Devs Don’t Trust AppSec Findings (And What You Can Do About It)

Jeanette Sherman

February 12, 2024

Oligo’s Best Features of 2023 (And an Exciting Sneak Peek at 2024)

January 30, 2024

AppSec in the Age of AI: Predicting Challenges and Opportunities

Nadav Czerninski

December 19, 2023

Shadow Vulnerability

ShellTorch: Multiple Critical Vulnerabilities in PyTorch TorchServe Threatens Countless AI Users

October 3, 2023

Oligo and WebP 0-Day: Keep Calm and Check the Runtime Context

September 28, 2023

4 Tips for Adopting a Practical Approach to AppSec

September 18, 2023

Scaling Runtime Security: How eBPF is Solving Decade-Long Challenges

Revolutionizing the Game of Application Security

February 15, 2023

Introducing Oligo: Leading Application Security to Runtime

Nadav Czerninski

February 14, 2023