Tooling on CuraSec

YARA-X 1.20.0 Released with 14 Improvements and 13 Bugfixes

Sun, 30 Aug 2026 15:19:58 +0000

Engineer — Learn: If YARA-X is part of your CI/CD or scanning pipeline, this routine release adds incremental improvements worth reviewing before your next scheduled upgrade — no urgent action required.
SOC/IR — Learn: Teams using YARA-X for threat hunting or malware triage should note the new release; check the changelog for any detection-relevant engine improvements before updating in a hunting workflow.
Leader — Skip

dhunter: AI-driven autonomous pentest platform (GitHub trending)

Fri, 28 Aug 2026 21:21:40 +0000

Engineer — Learn: An early-stage AI agent framework for automated recon-to-report pentesting; worth evaluating as a complement to manual AppSec workflows, but no immediate change to running systems required.
SOC/IR — Skip
Leader — Skip

dsh-secure-audit: prompt-injection & PII plugin for DeepSeek Harness

Fri, 28 Aug 2026 21:21:40 +0000

Engineer — Learn: New read-only plugin worth evaluating if DeepSeek Harness is in your AI pipeline; covers prompt-injection detection and local config audit, but adoption is nascent (51 stars) with no enrichment signals to pressure a faster decision.
SOC/IR — Skip
Leader — Skip

Windows-secure-toolkit: local audit and reversible hardening (.NET)

Wed, 26 Aug 2026 11:42:13 +0000

Engineer — Learn: A C#/.NET 4.8 toolkit for auditing and reversibly hardening Windows hosts is worth a quick evaluation for teams managing Windows endpoints or servers, but with only 51 stars and no enrichment signals, vet it before adoption in any production pipeline.
SOC/IR — Skip
Leader — Skip

SkillDoctor: quality gate tool for AI agent skills

Fri, 14 Aug 2026 11:54:18 +0000

Engineer — Learn: A linting and security audit tool for AI agent skill definitions worth evaluating if your team is building or vetting agent-based workflows on Claude/Cursor/Codex.
SOC/IR — Skip
Leader — Skip

Awesome Cyber AI Arsenal: curated AI/security tool list

Fri, 24 Jul 2026 12:43:46 +0000

Engineer — Learn: A community-curated tool list may surface defensive AI/LLM security tooling worth evaluating, but requires no immediate action on running systems.
SOC/IR — Learn: Browsing the offensive and detection tooling sections could expand the team’s awareness of attacker capabilities and new hunt tooling to evaluate.
Leader — Skip

open-kritt: AI agent framework for automated vuln discovery

Tue, 21 Jul 2026 12:43:35 +0000

Engineer — Learn: An open-source AI agent orchestration tool aimed at automated code vulnerability discovery — worth evaluating for AppSec pipelines, but no exploitation pressure or immediate action required.
SOC/IR — Skip
Leader — Skip

DShield SIEM Updated to ELK 8.19.15 with New Dashboards

Wed, 15 Jul 2026 12:11:39 +0000

Engineer — Skip
SOC/IR — Learn: If you run the DShield SIEM, this update brings ELK 8.19.15 and additional dashboards; evaluate whether to upgrade your instance this quarter.
Leader — Skip