@potato.software
@opensecurityconf.bsky.socialCheck out how an open space works: opensecurityconference.org/open-space/
#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity [lisi] 2/2
@owaspboston.bsky.socialOur next meetup is possible due to our sponsors Maze!
This month we have Shubham Santosh Upadhyay talking about Prompt Injection and what causes it and can one detect it.
RSVP to grab a spot at www.meetup.com/owaspboston/...
@spoint42.bsky.socialAppSec à l'ère des agents : deux visions US, et ce qui casse vraiment dans le pipeline
@opsmatters.comThe latest update for #GitGuardian includes "SOPS Guide: How to Encrypt and Manage Secrets in Git, #Kubernetes, and CI/CD" and "Public Secrets #Monitoring: Find a Credential Leak Beyond Your Borders".
#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb
@opsmatters.comThe latest update for #Veracode includes "#CISO Risk Intel Brief: Edge Zero-Days, Identity Residual Risk, and Q4 Control Priorities".
#cybersecurity #softwaresecurity #AppSec #DevSecOps https://opsmtrs.com/3eO6tf7
@doyensec.bsky.socialExcited to share that 🇫🇷 Yassine Bengana & Maxence Schmitt (@maxenceschmitt.bsky.social) 🇫🇷 will be representing #Doyensec at #PWN2OWN Ireland - targeting the Smart Home category for $30,000 & 3 Master of Pwn points, Wed. Oct. 7 @ 11:15AM
@owaspottawa.bsky.social#OWASP #Ottawa is proud to announce that Sabrina Lavi , Security Champions Community Lead is speaking at OWASP Ottawa Day 2026.
"Scaling AppSec Through Champions, Community, and Culture"
📅 October 17
📍 UofO - STEM 117
ℹ️ tinyurl.com/87j33b82
🎟️ tinyurl.com/mr2z6z8r
@owaspottawa.bsky.socialOn behalf of OWASP Ottawa, a huge thank you to ForwardJS for supporting OWASP’s 25th Anniversary event at OWASP Ottawa Day!
Thank you for backing OWASP Ottawa and for helping us celebrate 25 years of AppSec 🙏
@black-bug.bsky.socialAI‑generated bug reports are drowning Google’s open‑source bounty. We need smarter triage, not just more payouts. #AppSec #AI
@techfinitive.comAI powered agents can now reverse engineer compiled software binaries in minutes. ⚡
As automated vulnerability discovery and exploit creation scale up, simply compiling code into binaries is no longer enough to protect software logic, IP, and licensing.
@eyalestrin.bsky.socialGoogle issues complete OSS VRP bug bounty pause over AI spam #appsec
@shehackspurple.bsky.socialQuestion for you: What's one security control you've added (or changed) specifically because your team started using AI coding tools?
I'd love to hear what people are actually doing right now.
@hasamba72.bsky.socialUnpatched account takeover in LiteLLM (CVE-2026-93355). JWT auth falls back to unverified email claims, allowing login as proxy_admin and permanent SSO rebinding. CVSS 8.8. #LiteLLM #CVE #AppSec https://www.ox.security/blog/litellm-an-ordinary-login-token-can-become-someone-elses-admin-account/
@shehackspurple.bsky.socialI'm curious what other AppSec and AI practitioners think (that's you).
What security controls do you see as essential for AI agents? And what are we still not sure about? What are your 'may haves'?
Article: https://twp.ai/9Obx3f
@getpacketai.bsky.socialAI coding agents are shipping broken access control that passes review—here's why it's hard to catch and how to prevent tenant data leaks in automated development.
https://snyk.io/blog/ai-coding-agents-broken-access-control/
@getpacketai.bsky.socialRenaming your .NET code buys you almost nothing against determined reverse engineers. Control flow obfuscation is what actually costs attackers time —…
@cybercod.bsky.socialGlad to see the enthusiasm! 🚀 Moving to continuous security is a total game-changer. Start small by automating basic scans in your CI/CD pipeline. Let me know if you need tips on where to begin! #AppSec #DevSecOps
@getpacketai.bsky.socialObfuscating an SDK is totally different from an app—rename the wrong thing and you break every customer's build. Here's how to protect .NET libraries…