<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Tirith introduces proactive detection for homoglyph and terminal-injection attacks directly inside the shell.]]></title><description><![CDATA[<p>Tirith introduces proactive detection for homoglyph and terminal-injection attacks directly inside the shell.</p><p>By analyzing commands locally and blocking execution when deceptive Unicode, unsafe pipelines, or typosquatted sources are detected, the tool addresses a blind spot left by browser-centric defenses. Its zero-telemetry, no-network design makes it suitable for sensitive environments.</p><p>Source: <a href="https://www.bleepingcomputer.com/news/security/new-tool-blocks-imposter-attacks-disguised-as-safe-commands/" rel="nofollow noopener"><span>https://www.</span><span>bleepingcomputer.com/news/secu</span><span>rity/new-tool-blocks-imposter-attacks-disguised-as-safe-commands/</span></a></p><p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f4ac.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--speech_balloon" style="height:23px;width:auto;vertical-align:middle" title="💬" alt="💬" /> Is CLI-level defense overdue in enterprise security stacks?</p><p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f514.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--bell" style="height:23px;width:auto;vertical-align:middle" title="🔔" alt="🔔" /> Follow <span><a href="/user/technadu%40infosec.exchange">@<span>technadu</span></a></span> for emerging defensive tooling</p><p><a href="https://infosec.exchange/tags/InfoSec" rel="tag">#<span>InfoSec</span></a> <a href="https://infosec.exchange/tags/DevSecOps" rel="tag">#<span>DevSecOps</span></a> <a href="https://infosec.exchange/tags/TerminalSecurity" rel="tag">#<span>TerminalSecurity</span></a> <a href="https://infosec.exchange/tags/OpenSourceSecurity" rel="tag">#<span>OpenSourceSecurity</span></a> <a href="https://infosec.exchange/tags/PhishingDefense" rel="tag">#<span>PhishingDefense</span></a> <a href="https://infosec.exchange/tags/CyberTools" rel="tag">#<span>CyberTools</span></a> <a href="https://infosec.exchange/tags/TechNadu" rel="tag">#<span>TechNadu</span></a></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/040/893/959/737/273/original/4f9174d38189cabe.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/topic/9ae80f47-41d9-4423-a8d3-0c32987fcce2/tirith-introduces-proactive-detection-for-homoglyph-and-terminal-injection-attacks-directly-inside-the-shell.</link><generator>RSS for Node</generator><lastBuildDate>Fri, 17 Apr 2026 17:10:07 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/9ae80f47-41d9-4423-a8d3-0c32987fcce2.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 09 Feb 2026 13:25:38 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Tirith introduces proactive detection for homoglyph and terminal-injection attacks directly inside the shell. on Thu, 09 Apr 2026 17:55:19 GMT]]></title><description><![CDATA[<p><span><a href="/user/threatchain%40infosec.exchange">@<span>threatchain</span></a></span> Integrating defense into muscle memory is the "holy grail" of SecOps. Moving from passive dashboards to active, CLI-native protection makes security a feature of the workflow rather than a friction point.</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/technadu/statuses/116376031666874145</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/technadu/statuses/116376031666874145</guid><dc:creator><![CDATA[technadu@infosec.exchange]]></dc:creator><pubDate>Thu, 09 Apr 2026 17:55:19 GMT</pubDate></item><item><title><![CDATA[Reply to Tirith introduces proactive detection for homoglyph and terminal-injection attacks directly inside the shell. on Wed, 08 Apr 2026 18:00:12 GMT]]></title><description><![CDATA[<p><span><a href="/user/technadu%40infosec.exchange">@<span>technadu</span></a></span> <span><a href="/user/technadu%40infosec.exchange">@<span>technadu</span></a></span> Exactly! The CLI is where analysts live anyway - why force context switching to web dashboards when you can pipe, grep, and script right at the terminal? Local processing also means faster iteration on hunts and way less network chattiness. Plus your muscle memory actually becomes part of your defense workflow.</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116356796102298817/statuses/116370388570135269</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116356796102298817/statuses/116370388570135269</guid><dc:creator><![CDATA[threatchain@infosec.exchange]]></dc:creator><pubDate>Wed, 08 Apr 2026 18:00:12 GMT</pubDate></item><item><title><![CDATA[Reply to Tirith introduces proactive detection for homoglyph and terminal-injection attacks directly inside the shell. on Wed, 08 Apr 2026 17:34:33 GMT]]></title><description><![CDATA[<p><span><a href="/user/threatchain%40infosec.exchange">@<span>threatchain</span></a></span> Well said! We’ve spent years securing the perimeter while the local shell remained vulnerable. Balancing "security vs. speed" is the ultimate test for any defensive tool, and keeping analysis local to the CLI is the first step in solving it.</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/users/technadu/statuses/116370287714107976</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/users/technadu/statuses/116370287714107976</guid><dc:creator><![CDATA[technadu@infosec.exchange]]></dc:creator><pubDate>Wed, 08 Apr 2026 17:34:33 GMT</pubDate></item><item><title><![CDATA[Reply to Tirith introduces proactive detection for homoglyph and terminal-injection attacks directly inside the shell. on Wed, 08 Apr 2026 08:25:25 GMT]]></title><description><![CDATA[<p><span><a href="/user/technadu%40infosec.exchange">@<span>technadu</span></a></span> CLI has been the wild west for too long! We've hardened browsers and email but left terminals wide open to these Unicode tricks. The real challenge will be balancing security with dev workflow speed - nobody wants their shell slowing down legitimate work.</p>]]></description><link>https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116356796102298817/statuses/116368128462650234</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://infosec.exchange/ap/users/116356796102298817/statuses/116368128462650234</guid><dc:creator><![CDATA[threatchain@infosec.exchange]]></dc:creator><pubDate>Wed, 08 Apr 2026 08:25:25 GMT</pubDate></item></channel></rss>