Obfuscating an SDK is totally different from an app—rename the wrong thing and you break every customer's build. Here's how to protect .NET libraries…
@getpacketai.bsky.social
@getpacketai.bsky.socialObfuscating an SDK is totally different from an app—rename the wrong thing and you break every customer's build. Here's how to protect .NET libraries…
@cyberupdates365.bsky.socialCritical CVE-2026-103922 affects Capacitor apps on Android and iOS.
A malicious in-app link can potentially load attacker-controlled content under the application’s trusted WebView origin.
@getpacketai.bsky.socialPostgreSQL 42501 errors blocking your writes? A Supabase dev breaks down row-level security policy failures and the six causes to check first.
https://dev.to/toritic/supabase-42501-new-row-violates-row-level-security-3g66
@getpacketai.bsky.socialDe4dot makes a one-click meal of basic .NET obfuscation. Learn what actually slows attackers down — and why the real defense is keeping secrets off the client.
https://dev.to/zero_heartbeat_06a3625d7a/de4dot-and-net-deobfuscation-what-actually-stops-it-4ik4
@getpacketai.bsky.socialGot a suspicious .NET DLL? Learn how to safely dissect it without running the risk—static analysis reveals what code will do before you ever execute it.
https://dev.to/zero_heartbeat_06a3625d7a/how-to-safely-analyze-a-suspicious-net-assembly-2nbf
@getpacketai.bsky.socialYour AI coding assistant is leaking secrets in places your scanners can't see. Cursor, Copilot, and Claude Code all leave credentials in config files and logs—here's where and how to fix it.
https://blog.gitguardian.com/ai-coding-agents-credential-security/
@offseq.bsky.socialCRITICAL vuln in Monta monta.app (CVE-2026-95102, CVSS 9.4): missing WebSocket auth lets attackers impersonate charging stations. Restrict endpoint access & monitor activity. More: https://radar.offseq.com/threat/cve-2026-95102-cwe-306-in-monta-montaapp-d0effdc35e6b46a2 #OffSeq #CVE202695102 #AppSec
@potato.softwareThe latest update for #Zenity includes "Introducing #AI Total: Detonate Agent Skills Before You Trust Them" and "The Authorization Trap: Why 'No Evidence of Manipulation' Doesn't Mean 'No Incident'".
#potatosecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
@opsmatters.comThe latest update for #Zenity includes "Introducing #AI Total: Detonate Agent Skills Before You Trust Them" and "The Authorization Trap: Why 'No Evidence of Manipulation' Doesn't Mean 'No Incident'".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
@opsmatters.comThe latest update for #GitGuardian includes "Public Secrets #Monitoring: Find a Credential Leak Beyond Your Borders" and "#AI Agent Authorization Beyond Authentication: A Look At #AWS Dogwood".
#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb
@opsmatters.comThe latest update for #SaltSecurity includes "When a Security Guardrail Detects the Attack and Still Can't Stop It" and "How We Hijacked an #AI Agent With a Single Email".
#cybersecurity #APISecurity #AppSec https://opsmtrs.com/40EBWWv
@getpacketai.bsky.socialSupply chain attacks aren't just about injecting malware—they're hunting for your developer credentials. New analysis shows how poisoned packages become backdoors to…
https://dev.to/gitguardian/what-a-supply-chain-attack-is-really-after-your-credentials-5gmg
@getpacketai.bsky.socialYour unfixed vulnerabilities aren't just tech debt anymore—they're a live attack surface. Chained exploits and automated attackers make backlogs a critical risk, not a later problem.
@shehackspurple.bsky.socialWho should be responsible when an autonomous agent goes rogue?
🎥 Watch here: https://twp.ai/9Obi3l
@cybercod.bsky.socialTesting web apps? The OWASP Top 10 is your essential guide. But pro-tip: Don't treat vuln testing as a one-off event. Integrate it *continuously* throughout your SDLC. Catch issues early, save major headaches later!
@owaspboston.bsky.socialOur next meetup has now been scheduled.
Thank you to our sponsors Maze!
This month we have Shubham Santosh Upadhyay talking about Prompt Injection and what causes it and can one detect it.
RSVP to grab a spot at www.meetup.com/owaspboston/...
My ThreatGenix OSS workspace pairs editable DFDs with rule-based STRIDE findings and mitigation tracking. Core modeling needs no external AI; live scans need a separate worker. Where does your threat-model review get stuck? #AppSec #InfoSec
github.com/ibrolord/thr...
@bsidesde.bsky.socialRT to #Vote for "Building repro's at WARP speed" #LLM #appsec #BSidesDE bsidesdelaware.com/cfp-voting/ #CFP #BSidesDE2026
@eyalestrin.bsky.socialWe tested our own WAF with frontier AI models. Here’s what we found #appsec
@eyalestrin.bsky.socialGitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them #appsec