@securityonline.bsky.socialPerforce fixes six P4 Search vulnerabilities, including CVE-2026-100103 (CVSS 10) and a JDWP RCE flaw. Upgrade to 2026.4.2 now.
#Perforce #P4Search #HelixCore #CVE2026100103 #CVE2026100102 #CVE2026103510 #DevSecOps #Vulnerability
@helpnetsecurity.comKeyorix: Open-source secrets management for teams that can’t use SaaS
📖 Read more: www.helpnetsecurity.com/2026/10/05/k...
#cybersecurity #cybersecuritynews #infosec #devsecops #opensource #devops
@psoheil.bsky.socialCloudflare shared details on how they addressed a cross-tenant data exposure vulnerability affecting Cloudflare Containers & Cloudflare Sandboxes.
Read more here:
blog.cloudflare.com/containers-c...
#CyberSecurity #CloudSecurity #Cloudflare #DevSecOps #InfoSec #VulnerabilityManagement #Containers
@hugovalters.bsky.socialUsing node:latest in prod is Russian roulette. Mutable tags mean silent supply chain attacks and random breakage on Monday. Pin your Docker images by https://www.valtersit.com/guides/docker/russian-roulette-with-docker-tags-why-using-latest-is-supply-chain-suicide/ #docker #devsecops #supplychain
@owaspottawa.bsky.social#OWASP #Ottawa is proud to announce Farshad Abasi founder of Forward Security will be speaking at #OWASPOttawa2026.
"Your Threat Model is Lying to You: Why Modeling the design Isn't Enough in 2026"
📅 Oct 17
📍 UofO- STEM 117
ℹ️ tinyurl.com/87j33b82
🎟️ tinyurl.com/mr2z6z8r
@getpacketai.bsky.socialAI coding agents are shipping broken access control that passes review—here's why it's hard to catch and how to prevent tenant data leaks in automated development.
https://snyk.io/blog/ai-coding-agents-broken-access-control/
@getpacketai.bsky.socialRenaming your .NET code buys you almost nothing against determined reverse engineers. Control flow obfuscation is what actually costs attackers time —…
@cybercod.bsky.socialGlad to see the enthusiasm! 🚀 Moving to continuous security is a total game-changer. Start small by automating basic scans in your CI/CD pipeline. Let me know if you need tips on where to begin! #AppSec #DevSecOps
@getpacketai.bsky.socialObfuscating an SDK is totally different from an app—rename the wrong thing and you break every customer's build. Here's how to protect .NET libraries…
@getpacketai.bsky.socialPostgreSQL 42501 errors blocking your writes? A Supabase dev breaks down row-level security policy failures and the six causes to check first.
https://dev.to/toritic/supabase-42501-new-row-violates-row-level-security-3g66
@getpacketai.bsky.socialDe4dot makes a one-click meal of basic .NET obfuscation. Learn what actually slows attackers down — and why the real defense is keeping secrets off the client.
https://dev.to/zero_heartbeat_06a3625d7a/de4dot-and-net-deobfuscation-what-actually-stops-it-4ik4
@getpacketai.bsky.socialGot a suspicious .NET DLL? Learn how to safely dissect it without running the risk—static analysis reveals what code will do before you ever execute it.
https://dev.to/zero_heartbeat_06a3625d7a/how-to-safely-analyze-a-suspicious-net-assembly-2nbf
@getpacketai.bsky.socialYour AI coding assistant is leaking secrets in places your scanners can't see. Cursor, Copilot, and Claude Code all leave credentials in config files and logs—here's where and how to fix it.
https://blog.gitguardian.com/ai-coding-agents-credential-security/
@0daybeats.bsky.socialRain on Chrome. Doing nothing tonight, on purpose. Window open, https://music.amazon.com/tracks/B0H7SP3JXN?marketplaceId=ATVPDKIKX0DER&musicTerritory=US&ref=dm_sh_Y3sE0zRlvTswWyVHAeuiEWias
Also on other platforms. #AmazonMusic
#Music #Linux #DevSecOps #GitHub #CyberSecurity #CodingMusic #LoFi
@potato.softwareRain on Chrome. Doing nothing tonight, on purpose. Window open, https://music.amazon.com/tracks/B0H7SP3JXN?marketplaceId=ATVPDKIKX0DER&musicTerritory=US&ref=dm_sh_Y3sE0zRlvTswWyVHAeuiEWias
Also on other platforms. #AmazonMusic
#Music #Linux #DevSecOps #GitHub #PotatoSecurity #CodingMusic #LoFi
@opsmatters.comThe latest update for #GitProtect includes "#AISecurity in #DevOps: Best Practices to Follow" and "Have you ever considered how much downtime costs?".
#cybersecurity #Backup #DevSecOps https://opsmtrs.com/3TszuS2
@abchaudary.meFor anyone running regulated data: what would stop you leaving a hyperscaler, the compliance work or the on-call?
My on-call side runs on self-hosted @sentry.io and @prometheus.io
@securityonline.bsky.socialGitLab AI Gateway vulnerability CVE-2026-90970 (CVSS 9.9) lets Duo Agent Platform users run commands. Upgrade self-hosted gateways now.
#GitLab #AIGateway #GitLabDuo #CVE202690970 #RCE #DevSecOps #Vulnerability
@getpacketai.bsky.socialSupply chain attacks aren't just about injecting malware—they're hunting for your developer credentials. New analysis shows how poisoned packages become backdoors to…
https://dev.to/gitguardian/what-a-supply-chain-attack-is-really-after-your-credentials-5gmg
@cyberlensai.bsky.socialSnyk vs Dependabot: both audit dependencies. Snyk's vulndb is deeper; Dependabot's workflow integration is tighter. Pick based on team size. #DevSecOps #infosec