Detecting a New Grafana Exploit in Go

A new Grafana vulnerability has been discovered that enables arbitrary file reads off the system. This vulnerability (CVE-2021-43798) and many arbitrary file reads like it are exactly the thing that Contrast’s new Go agent can detect before any exploitation occurs ... Read More

Why Developers Should Care About Our New Go Agent: A Look Under the Hood

Last month, we released the industry’s first integrated security analyzer for Go. Now that it has been available for a few weeks, I thought it would be helpful to provide some detail about how the Contrast agent actually works, what it finds, and how it can help software developers ... Read More