Abstract: A framework has been created to filter queries for prompt injection attack detection. Application connectors collect data of SaaS interactions. The connectors associate, with the collected data, metadata that identifies the third-party application integrated with a primary SaaS application and an indication of whether collected data is sourced from an external user or an internal user. The filtering service periodically obtains a list of applications and risk scores and determines a risk score of the third-party application with the list. If the risk exceeds a threshold and/or the data origin is indicated as an external user, then the filtering service submits the data to a prompt injection attack detection service. Otherwise, the filtering service filters out the data from being submitted to the prompt injection attack detection service.

Abstract: A SaaS application URL monitoring service obtains messages sent in a SaaS application. For each message determined to include a URL, the service extracts the URL from the message and forwards the URL to a URL security service for analysis. The URL security service returns a verdict for the URL indicating a category with which the URL is associated. The service performs a remediation action for each message determined to include a URL categorized as non-benign and/or high risk. If a URL is categorized as malicious (e.g., as a phishing URL), the service modifies the corresponding message in the SaaS application to remove the URL. If a URL is categorized as unknown but high risk, the service modifies the URL included in the corresponding message to redirect to a secure, isolated environment in which the resource corresponding to the unknown, high- risk URL is accessed.

Abstract: By way of example, a method includes, responsive to a user request to download, from the internet, a downloadable file with executable content, downloading a portion of the downloadable file, wherein the downloadable file is not executable with the portion; after download the portion of the downloadable file, scanning the portion of the downloadable file for malware characteristics to classify the downloadable file; and completing downloading the downloadable file only after determining, based on the scanning of the portion of the downloadable file, that the downloadable file is not malware.

Abstract: Systems and methods for generating visualizations for storage capacity utilization estimates and storage cost estimates are provided. The method include receiving a first set of parameters associated with user workload characteristics, determining capacity utilization estimates for a set of time intervals based on the first plurality of parameters, receiving a second set of parameters associated with a configuration of storage resources, determining cost estimates for the set of time intervals based on the second set of parameters, and generating a visualization of the capacity utilization estimates for the set of time intervals and the cost estimates for the set of time intervals.

Abstract: An MFA fatigue attack detector has been created that correlates MFA failure events for evaluation against a MFA fatigue attack detection rule to determine whether a user is likely a target of a MFA fatigue attack. The MFA fatigue attack detection rule is defined based on correlation of failure events for a MFA implementation and a determination of a threshold that can be considered a boundary marking the transition of behavior, as represented by the MFA failure events, from non-suspicious to suspicious. To determine what events to correlate and the thresholds for different MFA implementations, network traffic and/or API calls for different IdPs are analyzed. Based on the analysis, failure events are identified and thresholds of correlated failure events (e.g., a time window and number of failure events within the time window) are determined for the implementations that avoid false positives while still protecting users against MFA fatigue attacks.

Abstract: By way of example, a method includes, responsive to a user request to download, from the internet, a downloadable file with executable content, downloading a portion of the downloadable file, wherein the downloadable file is not executable with the portion; after download the portion of the downloadable file, scanning the portion of the downloadable file for malware characteristics to classify the downloadable file; and completing downloading the downloadable file only after determining, based on the scanning of the portion of the downloadable file, that the downloadable file is not malware.

Abstract: There is disclosed in one example a hardware computing platform, including: a processor; a memory; a network interface; and a security module, including instructions to cause the processor to: receive a request to download a file via the network interface; download a first portion of the file into a buffer of the memory; analyze the first portion for malware characteristics; assign a security classification to the file according to the analysis of the first portion; and act on the security classification.

Abstract: Mechanisms for analyzing a structured file for malicious content are provided, comprising: parsing the structured file into a plurality of portions; selecting a selected portion of the portions; checking the selected portion to determine if at least one pre-condition is met; and in response to determining that the at least one pre-condition is met: decoding the selected portion to form a decoded portion; and checking the decoded portion to determine if it is malicious. In some embodiments: the at least one pre-condition can be changed; the structured file is a MICROSOFT OFFICE XML file; the selected portion is a file; the at least one pre-condition checks at least one attribute of the selected portion; decoding the selected portion comprises decompressing the selected portion; and/or checking the decoded portion to determine if it is malicious comprises checking whether a previously decoded portion of the structure file meets at least one condition.

Abstract: There is disclosed in one example a hardware computing platform, including: a processor; a memory; a network interface; and a security module, including instructions to cause the processor to: receive a request to download a file via the network interface; download a first portion of the file into a buffer of the memory; analyze the first portion for malware characteristics; assign a security classification to the file according to the analysis of the first portion; and act on the security classification.

Abstract: Mechanisms for analyzing a structured file for malicious content are provided, comprising: parsing the structured file into a plurality of portions; selecting a selected portion of the portions; checking the selected portion to determine if at least one pre-condition is met; and in response to determining that the at least one pre-condition is met: decoding the selected portion to form a decoded portion; and checking the decoded portion to determine if it is malicious. In some embodiments: the at least one pre-condition can be changed; the structured file is a MICROSOFT OFFICE XML file; the selected portion is a file; the at least one pre-condition checks at least one attribute of the selected portion; decoding the selected portion comprises decompressing the selected portion; and/or checking the decoded portion to determine if it is malicious comprises checking whether a previously decoded portion of the structure file meets at least one condition.

Abstract: A reposable surgical clip applier is provided and includes a handle assembly, an endoscopic assembly selectively connectable to a housing of the handle assembly, and a clip cartridge assembly selectively loadable in and connectable to the endoscopic assembly.

Abstract: Hemostasis valves and methods for making and using hemostasis valves are disclosed. An example method for assembling a hemostasis valve may include positioning a plunger along a threaded proximal end region of a main body. The threaded proximal end region may include one or more threads and an axial slot extending through the one or more threads. The method may also include advancing the plunger along the threaded proximal end region to a position where a proximal end of the plunger is disposed distally of at least a portion of the one or more threads and disposing a nut adjacent to the threaded proximal end region. The method may also include aligning an alignment tab of the nut with the axial slot, engaging the nut with the one or more threads while the alignment tab is aligned with the axial slot, and rotating the nut 45-270°.

Abstract: Hemostasis valves and methods for making and using hemostasis valves are disclosed. An example hemostasis valve may include a main body having a distal end region and a proximal end region. A first seal member may be disposed within the proximal end region of the main body. A plunger may be coupled to the proximal end region of the main body. The plunger may be designed to shift between a first position and a second position. A first locking member may be disposed along the proximal end region of the main body. A second locking member may be disposed along the plunger. The second locking member may be designed to engage the first locking member.

Abstract: Hemostasis valves and methods for making and using hemostasis valves are disclosed. An example hemostasis valve may include a main body having a distal end region and a proximal end region. A first seal member may be disposed within the proximal end region of the main body. A cartridge may be at least partially disposed within the proximal end region of the main body. The cartridge may include a second seal member. A plunger may be coupled to the proximal end region of the main body. A rotation limiting member may be positioned adjacent to the proximal end region of the main body. A tab member may be positioned adjacent to the proximal end region of the main body. The tab member may be designed to rotate relative to the proximal end region of the main body until the tab member engages the rotation limiting member.

Abstract: A reposable surgical clip applier is provided and includes a handle assembly, an endoscopic assembly selectively connectable to a housing of the handle assembly, and a clip cartridge assembly selectively loadable in and connectable to the endoscopic assembly.

Abstract: A reposable surgical clip applier (10) is provided and includes a handle assembly (100), an endoscopic assembly (200) selectively connectable to a housing (102) of the handle assembly (100), and a cartridge assembly (300) selectively loadable in and connectable to the endoscopic assembly (200).

Abstract: Hemostasis valves and methods for making and using hemostasis valves are disclosed. An example hemostasis valve may include a main body having a distal end region and a proximal end region. A first seal member may be disposed within the proximal end region of the main body. A plunger may be coupled to the proximal end region of the main body. The plunger may be designed to shift between a first position and a second position. A first locking member may be disposed along the proximal end region of the main body. A second locking member may be disposed along the plunger. The second locking member may be designed to engage the first locking member.

Abstract: Hemostasis valves and methods for making and using hemostasis valves are disclosed. An example method for assembling a hemostasis valve may include positioning a plunger along a threaded proximal end region of a main body. The threaded proximal end region may include one or more threads and an axial slot extending through the one or more threads. The method may also include advancing the plunger along the threaded proximal end region to a position where a proximal end of the plunger is disposed distally of at least a portion of the one or more threads and disposing a nut adjacent to the threaded proximal end region. The method may also include aligning an alignment tab of the nut with the axial slot, engaging the nut with the one or more threads while the alignment tab is aligned with the axial slot, and rotating the nut 45-270°.

Abstract: Hemostasis valves and methods for making and using hemostasis valves are disclosed. An example hemostasis valve may include a main body having a distal end region and a proximal end region. A first seal member may be disposed within the proximal end region of the main body. A cartridge may be at least partially disposed within the proximal end region of the main body. The cartridge may include a second seal member. A plunger may be coupled to the proximal end region of the main body. A rotation limiting member may be positioned adjacent to the proximal end region of the main body. A tab member may be positioned adjacent to the proximal end region of the main body. The tab member may be designed to rotate relative to the proximal end region of the main body until the tab member engages the rotation limiting member.

Abstract: A reposable surgical clip applier (10) is provided and includes a handle assembly (100), an endoscopic assembly (200) selectively connectable to a housing (102) of the handle assembly (100), and a cartridge assembly (300) selectively loadable in and connectable to the endoscopic assembly (200).