Encrypted prompt injection in Copilot CLI can expose secrets via encrypted payloads. #AI #Cybersecurity #GitHub #CopilotCLI #PromptInjection #DevSecOps thedailytechfeed.com/encrypted-pr...
@thedailytechfeed.com
@thedailytechfeed.comEncrypted prompt injection in Copilot CLI can expose secrets via encrypted payloads. #AI #Cybersecurity #GitHub #CopilotCLI #PromptInjection #DevSecOps thedailytechfeed.com/encrypted-pr...
@securityonline.bsky.socialProgress DataDirect vulnerability CVE-2026-91140 enables command injection via crafted OpenAPI files in AI agents. Pull version 2.1 now.
#Progress #DataDirect #CVE202691140 #CommandInjection #AIAgents #OpenAPI #DevSecOps #Vulnerability
@osde8info.bsky.socialhoneycomb.io techday london #devsecops
@richardihogan.bsky.social🔐 Pipeline editing can carry production authority. Microsoft’s Storm-3068 account shows how compromised access led to Kubernetes credential theft. #DevSecOps
@spoint42.bsky.socialAppSec à l'ère des agents : deux visions US, et ce qui casse vraiment dans le pipeline
@hugovalters.bsky.socialYour DB password is visible in docker inspect. Env vars leak via Config.Env and /proc. Docker secrets keep credentials out of the container config entirely. https://www.valtersit.com/guides/docker/docker-secrets-vs-env-vars-credential-management/ #docker #security #devsecops
@opsmatters.comThe latest update for #Veracode includes "#CISO Risk Intel Brief: Edge Zero-Days, Identity Residual Risk, and Q4 Control Priorities".
#cybersecurity #softwaresecurity #AppSec #DevSecOps https://opsmtrs.com/3eO6tf7
@opsmatters.comThe latest update for #Kosli includes "Deutsche Bank leads the way on secure adoption of AI enabled software delivery" and "Here's what Mythos is really exposing inside banking and financial services".
#DevOps #DevSecOps #Audit #SRE https://opsmtrs.com/3owZA9z
@opsmatters.comThe latest update for #GitProtect includes "How to Automate Repository Backups to Minimize Data Loss and Downtime" and "#AISecurity in #DevOps: Best Practices to Follow".
#cybersecurity #Backup #DevSecOps https://opsmtrs.com/3TszuS2
@0daybeats.bsky.socialA 200-line PR, Vocoder River humming underneath. By paragraph three it's the only thing keeping your eyes open. Not bad for a track named after a https://music.amazon.com/albums/B0H7Q5YWF5
Also on other platforms.
#AmazonMusic #Music #Linux #DevSecOps #GitHub #CyberSecurity #CodingMusic #LoFi
@0daybeats.bsky.sociallate-night study grind, exam tomorrow, brain fried. Neon Rain Drive from Cyber Chill v1.0 is the focus track - lo-fi cyberpunk that keeps you in the zone https://music.apple.com/lv/album/neon-rain-drive/6768105027?i=6768105036
#Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk
@canyesilyurt.comGood to see GitHub's secret scanning expanding coverage to include services like Lovable and Supabase. One less thing for devs to accidentally leak, hopefully! This is a smart move for catching those "oops" moments before they become a real headache. #DevSecOps #GitHub
@tellerstech.bsky.socialGitHub's New Rules: Custom Properties & Dependabot Access! #github #devsecops #devops #sre #cloud This is a clip from our recent Ship It Weekly Podcast episode. Visit https://shipitweekly.fm or link in bio to listen to the full episode!
@akuity.ioAI agents shouldn’t get broader production access just because they can call an MCP server.
See how Akuity keeps requests tied to real users and existing permissions at AGNTCon + MCPCon.
👋 Booth 9
@psoheil.bsky.social🚨 Critical TeamCity vulnerability now being exploited by ransomware groups. CVE-2026-63077 CVSS score of 9.8.
#Cybersecurity #Ransomware #DevSecOps #TeamCity #JetBrains #CICD #SupplyChainSecurity #VulnerabilityManagement #SoftwareSecurity #CloudSecurity
@cyberlensai.bsky.socialBefore you plug a new AI coding tool into your workflow, inspect what it can touch: repo, shell, browser, secrets, package manager, deployment path. The permission model matters more than the demo. #AISecurity #DevSecOps
@thedailytechfeed.comCredentials everywhere. AI agents, repos, laptops all part of the attack surface now. #CredentialSecurity #DevSecOps #AI #SecretsManagement #Cybersecurity #CloudSecurity https://thedailytechfeed.com/enterprises-losing-visibility-as-credential-complexity-surges/
@qiita-trending.bot.chrs.toAI生成コードを本番環境へデプロイする前に実施すべきセキュリティチェックリストと対策実装例
@cyberlensai.bsky.socialAgent builders: what is your rule for deciding whether a third-party skill/tool is safe enough to install? #AIAgents #DevSecOps
@secdoc.bsky.socialFail Closed Without Standing Still secdoc.tech/fail-closed-...
#security-automation #devsecops #platform-engineering #wazuh #open-source #reliability