Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364) #appsec

A Peripheral Path to SYSTEM - Exploiting Logi Options+ for SYSTEM Shells #appsec

The latest weekly release does not include the AJAX Spider and DOM XSS add-ons.
You can install them via the Marketplace as usual, but we recommend you using the Client Spider and OWASP PTK add-ons instead.
For more details see www.zaproxy.org/blog/2026-09...
#zaproxy #appsec

Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service #appsec

DDRop: Active Memory Interposer Attacks on Confidential VMs by Dropping DDR5 Writes #appsec

The Ghost in the Chat: how a bot that isn't in your group steals messages from Telegram HTML exports #appsec

The latest update for #Zenity includes "Introducing Guardian Agents: Meet Blue Agent, Your BO Security Analyst" and "Seeing Every MCP Connection: Zenity Joins the Cursor Marketplace".

#potatosecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH

The latest update for #Zenity includes "Introducing Guardian Agents: Meet Blue Agent, Your AI Security Analyst" and "Seeing Every MCP Connection: Zenity Joins the Cursor Marketplace".

#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH

The latest update for #Wallarm includes "#AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of".

#cybersecurity #APISecurity #AppSec https://opsmtrs.com/453oM6P

New Article alert - Publishing an Engineering Project to GitHub: Treating Version Control as a Security Boundary medium.com/@sdntechdemo...
#GitHub #Git #CyberSecurity #DevOps #AppSec #SoftwareEngineering #Coding #DeveloperTools #InfoSec #sdntechforum

A new universal Marshal RCE chain hits Ruby back to 3.3. Your Ruby version isn't the control, whether you deserialize untrusted input is: www.convective.com/blog/what-w... #RubyOnRails #AppSec

A huge thank you to SerpApi for becoming an OWASP Corporate Supporter!

SerpApi turns search engine results into structured, developer-ready data, helping teams build smarter, data-driven products at scale.

Learn more: https://serpapi.com/

#OWASP #AppSec #CyberSecurity #OpenSource

GitLab shipped 19.3.2, 19.2.6, and 19.1.8 to fix 18 vulnerabilities, including a CVSS 10.0 path traversal flaw already being probed in the wild. Self-managed installs: patch now.
devops.com/gitlabs-crit... #GitLab #DevSecOps #AppSec #DevOps

やることは単純だ。2.1.247未満なら上げろ。

「たぶん大丈夫」で残した未硬化の一本が、全部を外へ出す。読む動作がトリガーなら、その読み込み自体が境界だぜ。
#AppSec #Sandbox #ClaudeCode

This sounds like a fantastic session! Looking forward to learning more about federal open source and managing agent permissions. See you there! #OWASPOttawa #AppSec

🚨 #OWASP #Ottawa September 2026 #Meetup with Katie McMillan and Robert Babaev 🚨

Open Source Software is Federally Included in Canada with Katie McMillan
-and-
Can You Not? How to Avoid Destroying Prod with Agent Permissions with Robert Babaev

#Cybersecurity #InfoSec #AppSec #Tech

LangBot 4.0.8.1 – 4.10.10 has a CRITICAL flaw: weak password reset keys & no rate limiting enable admin password takeovers. Upgrade to 4.10.11+ ASAP. https://radar.offseq.com/threat/cve-2026-90562-insufficient-entropy-in-langbot-app-langbot-e9a2899a1e2d1fa5 #OffSeq #CVE202690562 #AppSec

📡 OWASP Secure Headers Project:

The web user interface is back, we worked all weekend, after the OWAP Foundation's new website went live, to get it back online 😉

#appsec #appsecurity #owasp_shp

Ich teile hier ab jetzt Analysen aktueller Leaks, Exploit-Mechaniken & pragmatische Hardening-Strategien ungefiltert aus dem Labor.
Offensive Mindset schlägt Compliance-Theater.
Red, Blue oder Purple Team wo steht ihr? 🔴🔵
#InfoSec #CyberSecurity #RedTeam #Hacking #AppSec