Oligo Security (@OligoSecurity) header
Oligo Security (@OligoSecurity) profile picture

Oligo Security

@OligoSecurity
Joined February 2023
  • Tweets87
  • Following23
  • Followers278
18Media
Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)Photo by Oligo Security (@OligoSecurity)
Oligo Security researchers uncovered critical vulnerabilities in Apple's AirPlay protocol, affecting billions of devices—allowing zero-click remote attacks, privilege escalation, MITM, and more. Update immediately to iOS 18.4 & MacOS 15.4. oligo.security/blog/airborne #CyberSecurity

Airborne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk | Oligo Security

Oligo Security reveals AirBorne, a new set of vulnerabilities in Apple’s AirPlay protocol and SDK. Learn how zero-click RCEs, ACL bypasses, and wormable exploits could endanger Apple and IoT devices...

oligo.security
3
16
6
42
4,104
Oligo Security retweeted
Lightspeed (@lightspeedvp) profile picture
Lightspeed
@lightspeedvp31 Jan 2025
→ @OligoSecurity, a cybersecurity company that focuses on runtime application security and observability. Cc: Co-Founders @GalElbaz1, Nadav Czerninski, and @AvshalomHilu
Image from Lightspeed (@lightspeedvp)
1
7
1,058
🚨 Critical Vuln Discovered in Meta's Llama Stack (#CVE-2024-50050) Attackers can now execute arbitrary code on inference servers via unsafe data deserialization. Full details: oligo.security/blog/cve-2024… #Cybersecurity #GenAI #InfoSec

CVE-2024-50050: Critical Vulnerability in meta-llama/llama-stack

The Oligo research team has discovered a critical vulnerability in meta-llama, an open source framework from Meta for building and deploying GenAI applications.

oligo.security
2
1
7
936
Oligo Security retweeted
Avi (@avi_lum) profile picture
Avi@avi_lum23 Jan 2025
I have reported an Code Execution vulnerability (CVE-2024-50050) to Meta. While there is more to come, this is a story about ZeroMQ and a shadow vulnerability that enables arbitrary code execution on inference servers running meta-llama/llama-stack. oligo.security/blog/cve-2024…

CVE-2024-50050: Critical Vulnerability in meta-llama/llama-stack

The Oligo research team has discovered a critical vulnerability in meta-llama, an open source framework from Meta for building and deploying GenAI applications.

oligo.security
1
3
7
801
🚀 Heading to #KubeCon #CloudNativeCon? Don’t miss our session "0.0.0.0Day: Exploiting Localhost APIs from the Browser."
Image from Oligo Security (@OligoSecurity)
1
265
⚠️ Six critical security flaws have been discovered in the Ollama AI framework, enabling potential model poisoning and theft. With a staggering number of unpatched instances, it’s crucial to filter internet-facing endpoints effectively. Read: thehackernews.com/2024/11/cr… #infosec
Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

Ollama AI faces six critical vulnerabilities, including DoS, model theft, and poisoning. Experts urge immediate measures to protect 9,831 exposed serv

thehackernews.com
3
37
1
57
12,036
The Oligo research team has uncovered 6 vulnerabilities in #Ollama, an open-source tool for operating #LLMs. The main findings include 4 new CVEs and 2 shadow vulnerabilities, highlighting risks such as DoS attacks, model poisoning, and theft. >> oligo.security/blog/more-mod…

More Models, More ProbLLMs: New Vulnerabilities in Ollama

Oligo’s research team recently uncovered 6 vulnerabilities in Ollama, one of the leading open-source frameworks for running AI models. Four of the flaws received CVEs and were patched in a recent...

oligo.security
1
4
261
Oligo is on the 2025 #Cyber60 List by @FortuneMagazine and @lightspeedvp. Thrilled to be among the top innovators shaping cybersecurity's future. A big shout-out to our team whose hard work and innovation made this possible! lsvp.com/cyber60-2024-2025/
Cyber60 2024-2025

Cyber60 2024-2025

lsvp.com
4
141
This Saturday at @BSidesNYC, join @GalElbaz1 for a deep dive into open source sandboxing! Don’t miss it >> bsidesnyc.org/schedule/
Image from Oligo Security (@OligoSecurity)
1
131
🚨 Webinar Alert! 🚨 Join us to explore the power of #ADR and its impact on the #AppSec world. Discover real-time response capabilities and witness a live attack simulation! Register now: events.actualtechmedia.com/r…
Image from Oligo Security (@OligoSecurity)
2
135
Now live at @AllDayDevOps is the awesome @avi_lum from @OligoSecurity on Scaling Runtime Application Security: How #eBPF is Solving Decade-Long Challenges
Image from Sharone Revah Zitzman 💙🇮🇱 (@shar1z)
Image from Sharone Revah Zitzman 💙🇮🇱 (@shar1z)
Image from Sharone Revah Zitzman 💙🇮🇱 (@shar1z)
1
6
251
Oligo Security retweeted
SC Media (@SCMagazine) profile picture
SC Media@SCMagazine25 Sep 2024
Replying to @OligoSecurity
@OligoSecurity has been named a winner of the 2024 #SCAwards in the Best Supply Chain Security Solution category for their Oligo Application Defense Platform! Groundbreaking solution ensures protection, safeguarding against supply chain threats. bit.ly/3ZEZehy
Image from SC Media (@SCMagazine)
1
90
🚨 New #RCE Vulnerabilities in #CUPS for #Linux 🚨 Explore our latest blog for mitigation strategies & learn how Oligo #ADR detects command injections in cups-filters in real-time, without relying on CVEs! oligo.security/blog/new-remo…

New Remote Code Execution (RCE) Vulnerabilities in CUPS for Linux: Threats and Mitigations

A recently discovered vulnerability in cups-browsed could allow attackers to execute remote code on Linux systems that run the Common Unix Printing System (CUPS).

oligo.security
3
6
768
Shining Lights on Shadow Vulnerabilities 🚨 Dive into the details of this extensive research and discover how Oligo's Application Defense Platform uniquely detects and protects against these hidden threats>> oligo.security/blog/shining-…

Shining a Light on Shadow Vulnerabilities

In March 2024, CISA launched its Secure By Design pledge, an effort to improve the security of how products are developed and deployed..

oligo.security
2
98
Oligo named a finalist for the @SCMagazine Awards: "Best Supply Chain Solution of 2024". Oligo stands out by uniquely detecting #runtime behavioral anomalies and identifying malicious code, setting it apart from other security solutions. Read more: lnkd.in/de3k2ZPM
Image from Oligo Security (@OligoSecurity)
1
2
475
A new "0.0.0.0 Day" #vulnerability, existing for 18 years, affects major web browsers (Chrome, #Firefox, Safari) on MacOS and #Linux devices. This flaw could let malicious sites access local services. Read: thehackernews.com/2024/08/00… #cybersecurity #infosec

0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices

Critical 0.0.0.0 Day browser vulnerability discovered, impacting Chrome, Firefox, Safari. Exploits local networks on MacOS and Linux

thehackernews.com
7
146
15
294
76,785
🚨NEW 0-DAY VULNERABILITY Oligo's research team has discovered a new #0day vulnerability in #Chrome, #Firefox, and #Safari. This flaw exposes internal networks and private services on localhost to external attackers in public domains. @Forbes coverage: forbes.com/sites/thomasbrews…
2
6
1
13
2,812
Join us at the upcoming @defcon @AppSec_Village 💀 We will take the stage with a live demo, unveiling a 0-day vulnerability in Chrome, Firefox, and Safari that exposes internal networks and private services on localhost, to external attackers in public domains. Don't miss it!
Image from Oligo Security (@OligoSecurity)
3
4
281
🚨 CrowdStrike bug causes global Windows outages, highlighting kernel driver risks. Explore how eBPF offers a safer, adaptable security solution: oligo.security/blog/recent-c… #eBPF #CrowdStrike #BlueScreenOfDeath #BSOD

Recent CrowdStrike Outage Emphasizes the Need for eBPF-Based Sensors

CrowdStrike outage shows the risks of kernel drivers and the need for safer, flexible eBPF-based sensors in cybersecurity. Learn how eBPF help.

oligo.security
2
3
1
9
863
📢 New feature alert! The Oligo platform now distinguishes between direct and transitive dependencies, helping you pinpoint and address vulnerabilities more effectively without needing access to your source code! Read the full post >> oligo.security/blog/now-show…

Oligo Application Defense Platform: Direct and Transitive Dependencies

In a recent update, the Oligo Application Defense Platform introduced the ability to distinguish between "direct" and "i

oligo.security
2
96
Load more