Sola Security

𝐓𝐋; 𝐃𝐑 - 𝐘𝐞𝐭 𝐚𝐧𝐨𝐭𝐡𝐞𝐫 𝐚𝐭𝐭𝐚𝐜𝐤 𝐲𝐨𝐮 𝐜𝐚𝐧 𝐚𝐬𝐬𝐞𝐬𝐬 𝐰𝐢𝐭𝐡 𝐚 𝐬𝐢𝐧𝐠𝐥𝐞 𝐩𝐫𝐨𝐦𝐩𝐭 𝐢𝐧 𝐒𝐨𝐥𝐚. The Trivy supply chain attack cascaded further. TeamPCP used credentials stolen from Trivy's CI/CD pipeline to backdoor LiteLLM, a library sitting inside AI agent frameworks, MCP servers, and LLM tooling across millions of environments. Versions 1.82.7–1.82.8 were reportedly affected, introducing malicious behavior into the package. We asked Sola: "Check if any of my repos are vulnerable to the recent LiteLLM supply chain backdoor (versions 1.82.7 or 1.82.8)." It knew. Your turn ➡️ https://lnkd.in/dEMMSRpw

Attackers hijacked Trivy's GitHub Actions this week, force-pushing 75 version tags to steal CI/CD secrets across SSH, AWS, Kubernetes, and more. We asked Sola: "Am I affected? Which repos and secrets?" Sola found the vulnerable repo, surfaced exposed keys, and handed back five remediation steps...from one quick prompt. Your turn ➡ https://lnkd.in/dX4kviNU

When you have something important to say, but everyone is at RSA See you all after RSA and the hangover 👋

Cloud security doesn’t break where people look. Breaches rarely come from an advanced exploit. They come from things nobody owned. An S3 bucket is left open. An identity with too many permissions. A control that “someone else” was supposed to configure. And it sits there. The article by SafetyDetectives calls this out clearly: shared responsibility only works if someone actually takes responsibility. Most teams don’t have a tooling problem. They have an ownership problem. Our very own Ron Peled was quoted in this excellent piece:  https://lnkd.in/gmp9B8hH

𝐒𝐡𝐨𝐫𝐭𝐥𝐢𝐬𝐭𝐞𝐝 𝐟𝐨𝐫 𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐩𝐚𝐧𝐲 𝐨𝐟 𝐭𝐡𝐞 𝐘𝐞𝐚𝐫 💙 We'll save the "Thank you, mom and dad" speech for if we win 😉 For now, just really proud of the people who built this. You know who you are. #CyberSecurityAwards2026 #InfoSec

This one's in 8 days. You probably don't want to miss it. Rinki Sethi and Ron Peled are sitting down to unpack what actually changes when Anthropic enters the cybersecurity, and what it all means for 2026. 🗓 March 19th Save your spot 👇 https://lnkd.in/gvpCC3Ji

It's official. Wiz is part of Google Cloud. Congrats to the entire Wiz team 👏 You just made every founder in the country believe a little harder 💙 We've been Wiz integration partners from day one. Google, are you my new stepsister?😉

Know someone who should be using Sola? Now there's a reason to actually make that intro. We just launched the 𝐒𝐨𝐥𝐚 𝐚𝐟𝐟𝐢𝐥𝐢𝐚𝐭𝐞 𝐚𝐧𝐝 𝐬𝐞𝐥𝐥𝐞𝐫 𝐩𝐫𝐨𝐠𝐫𝐚𝐦. Whether you want to refer or resell, the math is pretty straightforward: ⚡ 𝐑𝐞𝐟𝐞𝐫 𝐚 𝐝𝐞𝐚𝐥 → 𝐞𝐚𝐫𝐧 15% 𝐨𝐟 𝐭𝐡𝐞 𝐜𝐨𝐧𝐭𝐫𝐚𝐜𝐭 𝐯𝐚𝐥𝐮𝐞  ⚡ 𝐑𝐞𝐬𝐞𝐥𝐥 𝐒𝐨𝐥𝐚 → 𝐞𝐚𝐫𝐧 30% 𝐜𝐨𝐦𝐦𝐢𝐬𝐬𝐢𝐨𝐧 𝐨𝐧 𝐚𝐧𝐧𝐮𝐚𝐥 𝐜𝐨𝐧𝐭𝐫𝐚𝐜𝐭𝐬 If you're close to security teams that are tired of duct-taping tools together, point them our way. You'll be doing them a favor. And yourself. This is a limited-time offer. See website for full details 👉 https://lnkd.in/dqngS4Fp

Last call. 24 hours. That's it. The Sola CTF closes tomorrow, and we've been patient. The iPhone 17 Pro Max has been patient. But patience runs out in 24 hours. If you've been lurking on the sidelines, this is your final window. Get in, hunt, and show us what you've got. ⏳ 𝐂𝐡𝐚𝐥𝐥𝐞𝐧𝐠𝐞 𝐜𝐥𝐨𝐬𝐞𝐬 𝐭𝐨𝐦𝐨𝐫𝐫𝐨𝐰 👉 https://lnkd.in/dPjD_mpN

Look, we don't know how else to say it. There's an iPhone 17 Pro Max waiting for someone who's good at AI Hunting. That someone could be you. Or it could be the person reading this over your shoulder right now. Don't let them win your phone. 𝐉𝐨𝐢𝐧 𝐭𝐡𝐞 𝐂𝐓𝐅 👉 https://lnkd.in/dPjD_mpN