Container Vulnerability Scanning: Why Your Base Image is a Security Minefield — hands-on guide for sysadmins. #security #docker #devsecops
@hugovalters.bsky.social
@hugovalters.bsky.socialContainer Vulnerability Scanning: Why Your Base Image is a Security Minefield — hands-on guide for sysadmins. #security #docker #devsecops
@tracyragan.bsky.socialAt #SecureChainCon Vannesa Toves, {(urn:li:organization:960262)[Druva]} taught us about Strengthening #AIcyberresilience for #MicrosoftCloud data. She did an amazing deep dive, giving we #DevSecOps types a better understanding of the data breach problem. Check it out at https://cstu.io/957af6
@orteliusos.bsky.socialAt #SecureChainCon Vannesa Toves, {(urn:li:organization:960262)[Druva]} taught us about Strengthening #AIcyberresilience for #MicrosoftCloud data. She did an amazing deep dive, giving we #DevSecOps types a better understanding of the data breach problem. Check it out at https://cstu.io/957af6
@armornet.bsky.socialSecurity training has become a ritual: click through, pass the quiz, collect the badge, move on.
Breach does the opposite.
It's a supply chain attack you run yourself.
Free. Open source. Security awareness you play.
#SupplyChainSecurity #DevSecOps #OpenSource #CyberSecurity #CTF
@moez19.bsky.social77 million monthly npm downloads exposed. Manifold Security found GitSpawn, a Git-config RCE bug in 7 AI coding agents: Claude Code, Cursor, Codex, Goose, Qwen Code, Hermes, Grok Build. 4 of 8 flaws unpatched. A poisoned .git/config is all it takes. Check yours. #AI #DevSecOps
@cyberlensai.bsky.socialTrust check pattern for any new devtool: 1. Who maintains it? 2. What permissions does it request? 3. Does the repo expose secrets/config? 4. Are deps pinned and current? 5. Does the website pass basic browser hardening? Speed is great. Blind trust is how you get owned. #DevSecOps
@potato.softwareLast Friday @xoperobackup & GitProtect team was at Berlin-Brandenburg IT Security Day!
Great event, wonderful atmosphere and invaluable discussions around making #potatosecurity a true leadership responsibility!
@gitprotect.bsky.socialLast Friday @xoperobackup & GitProtect team was at Berlin-Brandenburg IT Security Day!
Great event, wonderful atmosphere and invaluable discussions around making #cybersecurity a true leadership responsibility!
@opsmatters.comThe latest update for #AikidoSecurity includes "Jason Haddix: Stop fearing #AI #pentesting" and "Compromised #Flutter package on pub.dev contains XCSSET malware".
#Cybersecurity #AppSec #DevSecOps https://opsmtrs.com/48vGyRP
@jmm86.bsky.socialNexspence v2.6.0 is out now: RBAC hardened on Docker deletes & 4 read endpoints, a memory DoS in proxy metadata closed, S3 GC no longer aborts uploads, and panic recovery added to background jobs. https://github.com/nexspence/nexspence/releases/tag/v2.6.0 #DevOps #DevSecOps #OpenSource #SelfHosted
@hugovalters.bsky.socialZero-day in a WordPress plugin? SafeLine WAF blocks it automatically. 18,000+ security teams use this open-source WAF to stop SQLi, XSS & RCE. Self-hosted. 5% off via link. #WAF #Infosec #DevSecOps #Cybersecurity
@helpnetsecurity.comProduct showcase: Doppler secures secrets for humans, pipelines, and AI agents
📖 Read more: www.helpnetsecurity.com/2026/09/08/p...
#cybersecurity #cybersecuritynews #secretsmanagement #AIsecurity #AIAgents #DevSecOps #MCP
@thedailytechfeed.comKnown malicious npm payload resurfaces after 111 days, bypassing scanning. #SupplyChain #npm #ShaiHulud #Malware #DevSecOps #Security https://thedailytechfeed.com/shai-hulud-npm-worm-returns-after-111-days-exploits-known-payload/
@devtocash.bsky.social6/ Prevention isn't enough. Falco (eBPF) flags a shell spawned in a container, reads of /etc/shadow, weird outbound connections.
Full guide, copy-paste YAML for all 10 layers:
https://devtocash.com/blog/kubernetes-security-best-practices-2026
@opsmatters.comThe latest update for #Veracode includes "Securing #PublicSector Software in 2026: Security Debt Demands Action" and "#CISO Risk Intel Brief: Edge Zero-Days, Artifact-Repository Takeover, and Identity-Pivoted Extortion".
#cybersecurity #softwaresecurity #DevSecOps https://opsmtrs.com/3eO6tf7
@alfanestlabs.bsky.socialA system can look ready long before it actually is.
Dependencies. Configurations. Third-party services. Security controls. Operational risks.
#Cybersecurity #AppSec #SecurityArchitecture #DevSecOps #AISecurity #AlfaNestLabs #Clearance
@cyberlensai.bsky.socialBefore you plug a new AI coding tool into your workflow, inspect what it can touch: repo, shell, browser, secrets, package manager, deployment path. The permission model matters more than the demo. #AISecurity #DevSecOps
@ekascloud.bsky.socialWhy Platform Engineering Is the Next Evolution of DevOps
#PlatformEngineering #DevOps #DevOpsEvolution #DevOpsTools #CloudNative #CloudComputing #Kubernetes #Automation #InfrastructureAsCode #IaC #DeveloperExperience #DevSecOps #SoftwareEngineering #CloudEngineering #SRE
@umbra-codex.bsky.socialKyverno CVE-2026-84200: overlapping PolicyExceptions let the LEAST restrictive one win. Name a Pod `*ingress*` and your hostPath ban stops applying. Fixed in v1.13.0. Audit overlaps if you can't upgrade. Exception logic is control logic.
@helpnetsecurity.comToolHive: The open-source way to run any MCP server securely
📖 Read more: www.helpnetsecurity.com/2026/09/07/t...
#cybersecurity #cybersecuritynews #MCP #AIsecurity #DevSecOps #Kubernetes #opensource @github.com @stacklok.com