OWASP Noir: Open-source static analysis tool #appsec
@eyalestrin.bsky.social
@eyalestrin.bsky.socialOWASP Noir: Open-source static analysis tool #appsec
@eyalestrin.bsky.socialPractical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries #appsec
@eyalestrin.bsky.socialHow I Could've Accessed 17 Trillion Microsoft Records #appsec
@eyalestrin.bsky.socialEverything Everywhere: Systemic Data Exposure in Supabase Apps #appsec
@helpnetsecurity.comMost open critical and high flaws are over 90 days old
🔗 Read more: www.helpnetsecurity.com/2026/09/30/r...
#vulnerabilitymanagement #appsec #cybersecurity
@detectify.bsky.social
@opsmatters.comThe latest update for #Zenity includes "MCP Is Growing Up" and "#Gartner Names Zenity a Market Shaper for #AI Application Security".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
@opsmatters.comThe latest update for #GitGuardian includes "#GenerativeAI Security: Are Your Developers Pasting Secrets Into LLMs?" and "AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP".
#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb
@potato.softwareThe latest update for #SaltSecurity includes "Introducing Salt Claude Connect: Continuous MCP Server Visibility for Claude Enterprise" and "#AISecurity Has a Context Problem".
#potatosecurity #APISecurity #AppSec https://opsmtrs.com/40EBWWv
@opsmatters.comThe latest update for #SaltSecurity includes "Introducing Salt Claude Connect: Continuous MCP Server Visibility for Claude Enterprise" and "#AISecurity Has a Context Problem".
#cybersecurity #APISecurity #AppSec https://opsmtrs.com/40EBWWv
@opensecurityconf.bsky.socialCheck out our core values and how they shape the conference and also our organizer team: opensecurityconference.org/about/values/
#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity [lisi] 2/2
@opsmatters.comThe latest update for #AppSentinels includes "What Google Gemini's Sandbox Escape Reveals About Securing #APIs Against #AI Agents" and "What Does #NIST IR 8587 Mean for #API Security?".
#cybersecurity #APISecurity #AppSec https://opsmtrs.com/3MZSK4Z
@owaspottawa.bsky.social#OWASP #Ottawa is pleased to announce that Alexander Rudolph, PhD presenting @ OWASP Ottawa Day 2026 on:
"Canadian Digital Sovereignty in a Zero-Trust World"
📅 October 17, 2026
ℹ️ Information: github.com/OWASP-Ottawa...
#DigitalSovereignty #CyberSecurity #Canada #OWASPOttawa2026 #AppSec
@owaspottawa.bsky.socialOn behalf of #OWASP #Ottawa, a huge thank you to Mark Cimon and the Cimon Real Estate Team for supporting OWASP’s 25th Anniversary event at OWASP Ottawa Day!
Information and tickets:
github.com/OWASP-Ottawa...
#OWASP #Ottawa #OWASPOttawa2026 #AppSec #Cybersecurity #Community
@remotejobs2504.bsky.social💰 $30–$100/HR | APPLICATION SECURITY ENGINEER 🔐💻
🌍 Remote (~15 hrs/week)
Experienced in AppSec & backend?
Use your expertise to help train next-generation AI.
🔐 Pentesting • OWASP • Secure Coding • Python • Java
@owaspottawa.bsky.social
@darinor.comCSP Nonces and the Same-Origin Policy Solve Different Problems www.darinor.com/blog/csp-non... #Appsec #WEBSecurity #CSP
@cvedatabase.bsky.socialSecurity Tip: Implement a Software Bill of Materials (SBOM) strategy. 🛡️ Knowing exactly what's in your software stack is the first step to securing it. Use tools to automate SBOM generation and track component risks. Learn more: https://cvedatabase.com #SBOM #InfoSec #AppSec
@scott.keck-warren.comWhen people say PHP isn't secure, I point them to how every release improves security a little bit. PHP 8.6 makes sessions secure by default (check your SSO and payment callbacks before upgrading).
https://www.phparch.com/2026/09/stop-writing-php-like-this-8
@owasp.org🎉 Last call! Offer ending September 30th! 🎁 Join OWASP between today and 30th Sept and get 1 FREE year's individual membership to gift to a friend. More people, more knowledge, more AppSec! 🔐
One membership. Twice the impact. bit.ly/OWASPBringaFr...
@hugovalters.bsky.social300 lines of Python that fuzzes web templates for SSTI and flags vulnerable engines. Advanced. Run: python3 ssti_tester.py --url URL
https://www.valtersit.com/python/server-side-template-injection-ssti-tester/
#security #python #appsec