AiSOC: Open-Source Self-Hosted AI Security Operations Center and Triage Tool
AiSOC is an open-source, self-hosted platform that ingests security telemetry, runs 2,530 executable detection rules, and records every AI agent prompt and tool
#Security
TAU-HOME.COM stories tagged Security.
Tailscale SSH Security Fixes: Version 1.104.4 and Official Advisories
Tailscale released version 1.104.4 and four security bulletins after the Tailworm report. Here are the confirmed impact conditions, fixes, and recommended opera
Zero Breach Toolkit Released: Open-Source Offline Mercenary Spyware Scanner
Zero Breach Toolkit is a free, open-source offline tool for detecting traces of known mercenary spyware on Windows, macOS, Linux, Android, and iPhone backups.
Shannon: An Open-Source Autonomous AI Pentester Combining Source Analysis and Live Exploitation
Developed by Keygraph, Shannon is an autonomous open-source AI penetration testing agent that combines source code analysis with live exploitation and includes
hashcat v8.0.0 Released October 26, 2026 with PCFG and FPGA bcrypt
Open-source password recovery tool hashcat has released v8.0.0, which it calls its largest update, adding PCFG attacks, hash recipes for custom hash schemes wit
Inspecting Deleted iPhone Photo Caches in Local Mac Backups Using Claude Code
A prompt walkthrough by developer @0xForem on making an unencrypted local iPhone backup on Mac and using Claude Code to audit leftover PhotoData thumbnails and
Building an AI-Powered Reverse Engineering Studio with REA and 20 Open-Source Tools
A comprehensive guide to @0xDeniAi's 5-tier reverse engineering studio combining the REA MCP with 20 tools from Ghidra and Frida to radare2 for automated clean-
1Password Announces '1Password for Agents' Security Platform for AI Agents
1Password has announced '1Password for Agents', a security platform that securely auto-fills credentials for AI agents without exposing raw passwords. It integr
Node.js Releases Security Updates for 22.x, 24.x, and 26.x Lines
Node.js has published security releases for versions 22.x, 24.x, and 26.x, addressing multiple flaws including high-severity vulnerabilities across systems.
Anthropic Launches Free OSS Scanner for Open Source Security
Anthropic launched OSS Scanner, giving critical open source repositories free periodic vulnerability scans, proof-of-concept exploits, and maintainer patches.
Cloudflare Open-Sources security-audit-skill for Multi-Agent Code Auditing
Cloudflare has open-sourced security-audit-skill under the MIT License, enabling coding agents to conduct multi-phase security audits with cross-agent verificat
OpenRouter Launches Armor Beta: Agent Tool-Call Guardrails Powered by TypeSafe Jev
OpenRouter has launched OpenRouter Armor in beta, an agent guardrail system powered by TypeSafe AI's Jev 1.13 to block out-of-policy tool calls before execution
Anthropic's Three-Layer Containment Pattern for Claude Agents: Contain the Environment Before Steering the Model
A practical write-up of the agent containment setup Anthropic runs for Claude: why approval prompts failed, how the environment, model, and external layers work
Anthropic Unveils Free Open-Source Security Scanner: Automating Vulnerability Detection and Patch Proposals
Anthropic has officially announced a free security scanner initiative under its Cyber Mission, periodically analyzing open-source projects to identify vulnerabi
Anthropic Launches OSS Scanner: Free AI-Powered Vulnerability Detection for Open-Source Projects
Anthropic has launched OSS Scanner, a free AI-powered vulnerability scanning service powered by frontier models including Claude Mythos, providing automated det
Cequence Releases 'Agent Trust' to Identify and Control Unlabeled AI Agent Traffic
Cequence Security has launched Agent Trust, a specialized capability designed to detect personal AI agents like Meta's Muse disguised as standard browser sessio
Trylon Gateway: Open-Source LLM Firewall for Prompt Injection and Data Leak Defense
An architectural review of Trylon Gateway, an open-source self-hosted LLM firewall intercepting traffic to OpenAI, Anthropic Claude, and Gemini to block prompt
GhidraMCP: Connecting Ghidra and LLMs via MCP for Autonomous Binary Reverse Engineering
GhidraMCP, an open-source tool by LaurieWired, exposes Ghidra decompilation, symbol renaming, and exports through Model Context Protocol for Claude Desktop and
OWASP Cheat Sheet Series: 137 Practical Security Guides for Servers and Applications
An overview of the official OWASP Cheat Sheet Series. From authentication, sessions, and password management to Docker, GraphQL, GitHub Actions, and language-sp
VUSec Unveils 'Branch Target Reuse' (BTR): New Spectre-v2 Attacks on JIT Engines via Stale Branch Predictions
Researchers from VUSec and Scuola Superiore Sant'Anna have disclosed Branch Target Reuse (BTR), a new Spectre-v2 vulnerability in JIT compilers that abuses stal
Turn Your Smartphone into a Surveillance Detector: Fieldwatch for Android
Security creator @CopyRebeldia highlights Fieldwatch, an open-source Android app that passively scans ambient Wi-Fi and BLE signals to identify up to 242 survei
7 Essential Open-Source Tools and Guides to Reclaim Your Digital Footprint and Privacy
A curated guide to 7 essential open-source repositories, including Awesome Privacy, privacy.sexy, and Pi-hole, designed to reduce data tracking and reclaim your
Awesome OSINT Arsenal: Installing 750+ Intelligence and Security Tools via a Single Command
Explore Awesome OSINT Arsenal, an automated installation toolkit that packages over 751 open-source intelligence and security tools across 50 categories for Kal
MVT: Open-Source Mobile Forensics and Spyware IOC Detection for iOS and Android
An overview of MVT (Mobile Verification Toolkit) by Amnesty International Security Lab, analyzing iOS and Android artifacts against STIX2 IOCs to uncover target
Browser-Based AI Privacy Tool 'AgentCloak' Released for Free
AgentCloak, a browser-based data masking tool, has been released for free to help users obtain context-aware responses from AI models without sharing sensitive
Automating Antigravity CLI Permissions and Enhancing Security with 'Turbo Mode'
Learn how to automate persistent permission requests in Antigravity CLI using 'Turbo Mode' and secure your environment with a denyList.
Ghidra: The NSA's Open-Source Software Reverse Engineering Framework
A powerful and comprehensive software analysis and reverse engineering tool suite developed and maintained by the National Security Agency (NSA).