Vigil is an open-source AI harness built for long-running code audits, web pentests, and bug bounty hunting.

GitHub: github.com/vigiloss/vigil

#AppSec #BugBounty #Cybersecurity #OpenSource #InfoSec

WED | 14 OCT 2026 | Cybersecurity Report #Cybersecurity #CyberFM #AriasThomas #AppSec #Infosec #ZeroDay #SupplyChainSecurity #DevSecOps #RSSHDelivery #NewYorkTech #TechTok #CyberTok

A NuGet package runs with the same permissions as your process. Now we let AI agents run commands too. What could possibly go wrong?
I looked at MXC, Microsoft's open source sandbox with a .NET SDK. Deny by default!
blog.fennec.dev/sandboxing/2...
#dotnet #appsec

🔐 Be the first security hire at a fast-scaling data infra company. Own AppSec end-to-end, multi-tenant systems, multi-cloud (AWS/Azure/GCP), TypeScript + Go. SF, remote ok. W2 FTE.

#AppSec #CyberSecurity

commandhire.com/apply/lead-...

Term of the day: Build Provenance

Build provenance is a verified record of how a piece of software was built, including where the source code came from, what tools and processes were used, and what outputs...

Full definition: appsecuritystandards.org/glossary/build-provenance

#AppSec #infosec

~Trailofbits~
Most package managers fail to verify dependency integrity by default, enabling repository tampering and malicious package injection.
-
IOCs: (None identified)
-
#AppSec #SupplyChain #ThreatIntel

Ein bestandener Penetrationstest ist eine Momentaufnahme.

Sicherheitsprüfung gehört in die Teststrecke: Abhängigkeiten bei jedem Bau, Berechtigungen als Testfall, der Pentest dort, wo Automatisierung endet.

quality.one/leistungen/securi…

#SecurityTesting #AppSec

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking #appsec

"Login is slow, let's lower the bcrypt cost."

That makes it faster for attackers too. The fix is more hashing capacity, not weaker hashes.

Which would you pick: more cores, or a separate hashing pool?

#security #appsec #backend

The latest update for #GitGuardian includes "#AI Agent Security: Best Practices for Safe Deployment" and "AI Agent Security: Six Controls From Nine Real Incidents".

#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb

RiskBridge turns CVEs into explainable patch priorities using CVSS, EPSS, CISA KEV, compliance logic, and ROI. #GRC #AppSec #BSidesDE events.humanitix.com/security-bsi...

The latest update for #SaltSecurity includes "Agents Are Acting. Most Organizations Cannot Stop Them." and "Your #AI Transformation Needs Runtime Protection for the Whole Agentic Estate".

#cybersecurity #APISecurity #AppSec https://opsmtrs.com/40EBWWv

Application Security Standards: Independent intelligence for application security and software supply chain.

Here we share terms from our glossary, plus our vendor directory and webinars.

appsecuritystandards.org

#AppSec #infosec

‼️ 5 LMCache CVEs disclosed. Two critical RCEs (CVSS 9.8):

CVE-2026-105192 & CVE-2026-107204.

Running LMCache? Check your exposure. Restrict ZeroMQ to trusted networks, firewall its port, and secure HTTP endpoints.

AI infrastructure is production infrastructure. Secure it.

#AppSec #CheckmarxZero

🔎 New Windows vulnerability discovered by Adrian Denkiewicz of #doyensec - a high-severity flaw in one of Windows’ Virtualization-Based Security (VBS) enclaves that enables VTL1 code reuse. A first look at our research into this class of vulns.

🔗 blog.doyensec.com/2026/10/13/S...

#appsec #security

One of our partner conferences is taking place this week - see you at BREWTCON! 🤩 brewtcon.com

#Brewt #BrewtCon #osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity [lisi] 2/2

Final chance to RSVP to our meetup thanks to Maze!

This month Shubham Santosh Upadhyay will dive into prompt injection—what causes it and whether it can be detected.

RSVP to save your spot: www.meetup.com/owaspboston/...

#owasp #boston #appsec

GhostAction Returns: Maintainer Takeover Steals Workflow Secrets #appsec

The public fears the machine that hates them. They should fear the machine that solves the problem.

https://thehackernews.com/2026/10/anthropic-cuts-live-internet-access-for.html

#ai #appsec