explore | Grilled Cheese

Two questions most IT teams can't answer: How many AI agents are running? Which ones can delete data? @HYCU's free aiR Graph scans Entra ID and Okta and answers both with deterministic rules, no LLM scoring.
coderlegion.com/30339/hycus-... #AgenticAI #AISecurity #DevSecOps #DataResilience

Security Tip: Stop hardcoding secrets in your source code! 🛡️ Hardcoded API keys are easily leaked via version control. Use a Secrets Manager and automate key rotation to minimize your window of risk. Learn more at https://cvedatabase.com #InfoSec #CyberSecurity #API #DevSecOps

GitHub's new secret detection model can flag passwords without recognizable token patterns by reading code context. Existing alerts are upgraded now. AI push protection is still in private preview and will consume AI Credits when enabled. #GitHub #DevSecOps

red hat summit connect @ @tobaccodock ansible roadmap #devsecops

GitHub’s ModernBERT flags hidden passwords pre-push—real-time secret protection goes live in October. #Security #GitHub #AI #SecretScanning #DevSecOps #ModernBERT https://thedailytechfeed.com/githubs-new-ai-flags-hidden-passwords-before-code-push/

red hat summit connect @ @tobaccodocks @openshift.bsky.social virtualisation #devsecops

red hat summit connect @tobaccodock reduce your cloud costs by 40% #devsecops #openshift

red hat summit connect london save 40% on your cloud costs @redhat #devsecops #openshift

GitHub adds AI to catch passwords before a code push

#cybersecurity #cybersecuritynews #AI #secretprotection #DevSecOps @github.com

Tensorlake 0.5.144 was hijacked by a worm stealing credentials, persisting via AI tool configs. Remove it now. #ShaiHulud #SupplyChain #AI #CloudSecurity #CredentialTheft #DevSecOps https://thedailytechfeed.com/tensorlake-npm-package-hijacked-by-shai-hulud-worm-threat/

Rain Over Glass sounds like what a window does when you stop looking at it.

Listen on Apple Music: https://music.apple.com/lv/album/rain-over-glass/6788063362?i=6788063499

Also on other platforms.
#Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk

"Patch My Heart" - because your heart crashes less than your code but nobody's pushing fixes for it.

Listen on Apple Music: https://music.apple.com/lv/album/patch-my-heart/6802120203?i=6802120215

Also on other platforms.

#Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk

We aren't careless; we're just too fast for our current security tools. 🛡️ #devsecops sugataai.com/blog/secret-...

This ensures that even if a token is leaked, the attacker cannot modify your project settings or access sensitive event data. #glitchreplay #errortracking #bugmonitoring #cicd #devsecops #sourcemaps 2/2

Block the right merge, not every merge.

A Trivy and Snyk gate for GitLab CI: fixable critical and high findings stop the merge, the rest report, and every ignore carries an expiry date.

The YAML and @gitlab.com 's merge checks:
abchaudary.me/blog/trivy-s...

#devsecops #devops #infosec

Four critical Argo CD vulnerabilities, including AppProject bypass CVE-2026-77459, threaten the repo-server and clusters. Upgrade to v3.5.4 now.

#ArgoCD #Kubernetes #GitOps #CVE202677459 #Kustomize #Jsonnet #DevSecOps #Vulnerability

A Gitea security update fixes 27 flaws, including SSRF bug CVE-2026-101027 and SSH key flaw CVE-2026-103059. Upgrade to Gitea 28.1.0 now.

#Gitea #Git #DevSecOps #SSRF #CVE2026101027 #CVE2026103059 #SupplyChainSecurity #Vulnerability