@opsmatters.comThe latest update for #GitGuardian includes "What a #SupplyChain Attack Is Really After: Your Credentials" and "AI Autonomy: How to Find the Autonomy Your Agents Already Have".
#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb
@opsmatters.comThe latest update for #Zenity includes "'#AI Regulation' Isn't One Debate. It's Several, Wearing the Same Coat." and "AI Agent Sprawl Is the Problem Runtime Security Has to Solve".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
@jpmjr.bsky.socialMemory-safe languages are moving from policy talk to production reality. Rust and AI-assisted migration can cut deep-seated memory-risk. jpmellojr.blogspot.com/2026/09/memo...
#MemorySafeLanguages #Rust #AppSec #SecureByDesign
@checkmarxzero.bsky.socialWe just found an npm supply-chain campaign that's already earned attackers 109 ETH (~ā¬230,933) ā and it doesn't use `postinstall`. `indexed-btree` mimics sorted-btree library, has hit 2M weekly downloads.
Full writeup with all IOCs: buff.ly/9MVuuS0
@ctsmithiii.bsky.socialA chatbot hallucination can produce a bad answer. A hallucination from an agent with production credentials can produce an outage." OWASP founder Jeff Williams on why AI agent security has to live in the harness, not the model:
coderlegion.com/27559/owasp-... #AIAgents #AppSec #OWASP
@sydseter.comCybersecurity awareness training during Cybersecurity Awareness Month is boring as hell.
And research shows it's not working (source: www.cybersecuritydive.com/news/cyberse...); games, on the other hand, do work (source: www.researchgate.net/publication/...)
@eyalestrin.bsky.socialAttackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution (CVE-2026-89026) #appsec
@eyalestrin.bsky.socialMachine speed, hold the AI: Hand-rolled marimo CVE-2026-39987 exploit #appsec
@eyalestrin.bsky.socialBragJack: How We Hijacked 5 Of The World's Most Popular Browsers Using Their Built-In AI Assistants #appsec
@helpnetsecurity.comThe AI security question leaders should be asking instead
š Read more: www.helpnetsecurity.com/2026/09/17/f...
#cybersecurity #cybersecuritynews #AI #infosec #appsec #AIsecurity
@cvedatabase.bsky.socialSecurity Tip: Don't trust the "latest" tag blindly. š”ļø Pinning dependencies to specific versions and using lockfiles prevents unexpected breaking changes or malicious injections into your build pipeline. Audit manifests regularly. Research: https://cvedatabase.com #InfoSec #AppSec
@opsmatters.comThe latest update for #Veracode includes "The EU Cyber Resilience Act Has Global Implications ā Who Needs to Prepare and How?" and "Scaling #DevSecOps: The Role of a Comprehensive Application Security Platform".
#cybersecurity #softwaresecurity #AppSec https://opsmtrs.com/3eO6tf7
@opsmatters.comThe latest update for #AppSentinels includes "Top 7 #APISecurity Tools for Banks and Fintechs in 2026" and "Agentic AI Security Buyer's Checklist: 15 Questions to Ask Before You Sign".
#cybersecurity #AppSec https://opsmtrs.com/3MZSK4Z
@bsidesvi.bsky.socialš Sponsor Spotlight: Cycode
Community-driven events like BSides Vancouver Island wouldn't be possible without the support of organizations that are passionate about advancing cybersecurity.
@opsmatters.comThe latest update for #GitGuardian includes "#AI Autonomy: How to Find the Autonomy Your Agents Already Have" and "Service Account Credential Rotation: The Blast-Radius Checklist".
#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb
@shehackspurple.bsky.socialWe need **independent controls around it**, a limited blast radius when things go wrong, and a way to detect when it escapes.
@opensecurityconf.bsky.socialWe are glad to have you as part of the osco community! š¤
Learn more about OSM Solutions: www.osm-s.com
Our sponsors: opensecurityconference.org/support/spon...
#Security #InfoSec #AppSec #OTSecurity #OpenSpace [nazneen]
@nocomplexity.bsky.socialIs That Python Script Safe? How to Check Before You Run.
@eyalestrin.bsky.socialCloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364) #appsec
@eyalestrin.bsky.socialA Peripheral Path to SYSTEM - Exploiting Logi Options+ for SYSTEM Shells #appsec