explore | Grilled Cheese

GitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them #appsec

The latest update for #Wallarm includes "#AI Governance on #AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed".

#cybersecurity #APISecurity #AppSec https://opsmtrs.com/453oM6P

#CybersecurityAwarenessMonth officially kicks off today! 🛡️👏

In the latest episode of #ReimaginingCyber, we discuss AI agents, AI-powered testing, rogue agents, auto-remediation, and what the future of #AppSec could look like by 2030.

🎧 Listen now on Apple Podcasts: https://apple.co/4xYdzDh

The EU CRA (Cyber Resilience Act) provisions have started kicking in, with reporting requirements for incidents and exploited vulnerabilities. Are you affected? What about your open-source projects? buff.ly/wk9BoAy

#CRA #CyberResilienceAct #Compliance #AppSec #OpenSource #InfoSec #Cybersecurity

Security Tip: Stop hardcoding API keys! 🛡️ Use a secrets manager to inject credentials at runtime and implement automated rotation every 30-90 days. This limits the blast radius if a developer machine is compromised.

Learn more: https://cvedatabase.com
#CVE #InfoSec #AppSec

ZAP Updates for September:
The AJAX Spider and DOM XSS add-ons have now been fully retired from ZAP’s nightly and weekly releases, and Phase 1 of the new Global Scan Policy Manager has landed behind a dev-mode flag.
www.zaproxy.org/blog/2026-10...
#zaproxy #appsec

Didn't get a ticket? Join the waiting list to increase your chances on a last-minute package! opensecurityconference.org/conference/r...

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity [lisi] 2/2

Myth: PHP isn't secure by default.

#PHP8.6 flips three session settings on for you:

Check them before you upgrade. SameSite=Lax drops the session cookie on cross-site POSTs, so SSO and payment callbacks that POST back to you lose the session.

Video: https://youtu.be/U9Jrcg1Ns1k

#PHP #AppSec

October is #CybersecurityAwarenessMonth, and we're celebrating with a series of posts!

Our tool helps you find and fix security issues in your code, so over the four weeks, we'll cover some cybersecurity-related topics.

Stay tuned!

#Cybersecurity #DevOps #DevSecOps #AppSec #MISRA

The latest update for #Zenity includes "The Authorization Trap: Why 'No Evidence of Manipulation' Doesn't Mean 'No Incident'" and "MCP Is Growing Up".

#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH

The latest update for #GitGuardian includes "#AI Agent Authorization Beyond Authentication: A Look At #AWS Dogwood" and "Generative AI Security: Are Your Developers Pasting Secrets Into LLMs?".

#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb

OpenAI's Codex Security Cloud reviews GitHub repos and new commits, investigates suspected flaws, and drafts fixes for a human to accept.

The scan keeps running after the laptop is closed.

Where does continuous commit analysis sit in your review queue today?

#OpenAI #AppSec #DevSecOps #AI

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised #appsec

Containers Are No Longer a Security Boundary #appsec

Introducing QR Jacking: When Your Branded QR Codes Aren’t Yours #appsec

Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor HAL #appsec

File Notification Attacks: Templating and Exploiting Side-Channel Leakage from the File-Notification Systems on Linux, Windows, and macOS #appsec

Send GitLab an email, push to main #appsec

OWASP Noir: Open-source static analysis tool #appsec