explore | Grilled Cheese

Security Tip: Visibility is key to supply chain defense. 🛡️ Implement SBOMs (Software Bill of Materials) to inventory your software components. This helps you react instantly when a new CVE is announced. Explore more: https://cvedatabase.com #CVE #AppSec #SBOM

🚨 OWASP Ottawa September 2026 Meetup with Katie McMillan and Robert Babaev 🚨

Open Source Software is Federally Included in Canada with Katie McMillan
-and-
Can You Not? How to Avoid Destroying Prod with Agent Permissions with Robert Babaev

#OWASP #Ottawa #Cybersecurity #InfoSec #AppSec #Tech

We originally published details of a OnePlus Android vuln after the vendor became unresponsive & 9+ months had passed w/o resolution of what appeared to be a straightforward bug. Only after publication did the vendor contact us again & request that we remove the post.

#appsec #doyensec #security

🎉 OWASP is 25! Celebrate with us! 🎁 Join OWASP in the next 25 days and get 1 FREE year's individual membership to gift to a friend. More people, more knowledge, more AppSec! 🔐
One membership. Twice the impact. bit.ly/OWASPBringaFr...

#OWASP25 #AppSec #opensource

More room to try before you buy: GitHub raised the self-serve GHAS trial ceiling to 300 licenses. Run it against your real repos, not a demo.

devops.com/github-widen... #AppSec #GitHub #DevSecOps

A Firewall for BO Agents Feels Right — and Still a Bit Premature
https://papoo.work/doc/fc7f649a5dc37cf4
#claudenews #agents #potatosecurity #appsec #llm

A Firewall for AI Agents Feels Right — and Still a Bit Premature
https://papoo.work/doc/fc7f649a5dc37cf4
#claudenews #agents #cybersecurity #appsec #llm

Connecting AI agents directly to backend MCP servers is a massive production security risk. No auth, no RBAC, and zero guardrails. ❌ My new @DZone guide fixes this using agentgateway to secure your Quarkus backend:👉 dzone.com/articles/goo...
#AIagents #MCP #AppSec

The latest update for #AppSentinels includes "#AgenticAI Security Buyer's Checklist: 15 Questions to Ask Before You Sign" and "The Ultimate #API Security Guide: Everything You Need to Know to Protect Your #APIs".

#cybersecurity #APISecurity #AppSec https://opsmtrs.com/3MZSK4Z

The latest update for #Zenity includes "Seeing Every MCP Connection: Zenity Joins the Cursor Marketplace" and "Governance Strikes Back: The Most Used, Most Abused Word in the Galaxy".

#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH

The latest update for #SaltSecurity includes "The Role of #AgenticAI in #Cybersecurity" and "Ten Years, Two Photos, and One Bet That Got Much Bigger".

#APISecurity #AppSec https://opsmtrs.com/40EBWWv

A Firewall for AI Agents Feels Right — and Still a Bit Premature
https://papoo.work/doc/fc7f649a5dc37cf4
#claudenews #agents #cybersecurity #appsec #llm

My favorite debugger output is the kind that ruins a confident theory.

#exploitdev #BinaryExploitation #VulnResearch #AppSec #InfoSec

Shai-Hulud Rises From the Dead after 111 days #appsec

Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets #appsec

ℹ️ Keynote details: opensecurityconference.org/conference/k...

Missed the registration yet still want a chance to hear those keynotes? Join the waiting list, no strings attached! opensecurityconference.org/conference/r...

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec [lisi] 2/2

With the new edition, you can also combine it with the OWASP Cornucopia Companion Edition. The new OWASP Cornucopia Companion Edition helps you do threat modeling for mobile apps using AI. (3/3)

Buy it at @cybersecgames.bsky.social : cybersecgames.com/pages/owasp-...

#ai #appsec #security #games

I don't always do threat modeling before releasing mobile apps, but when I do...

I play cards with OWASP Cornucopia Mobile App Edition v2.0.