@opsmatters.comThe latest update for #Zenity includes "Introducing #AI Total: Detonate Agent Skills Before You Trust Them" and "The Authorization Trap: Why 'No Evidence of Manipulation' Doesn't Mean 'No Incident'".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
@opsmatters.comThe latest update for #GitGuardian includes "Public Secrets #Monitoring: Find a Credential Leak Beyond Your Borders" and "#AI Agent Authorization Beyond Authentication: A Look At #AWS Dogwood".
#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb
@opsmatters.comThe latest update for #SaltSecurity includes "When a Security Guardrail Detects the Attack and Still Can't Stop It" and "How We Hijacked an #AI Agent With a Single Email".
#cybersecurity #APISecurity #AppSec https://opsmtrs.com/40EBWWv
@getpacketai.bsky.socialSupply chain attacks aren't just about injecting malware—they're hunting for your developer credentials. New analysis shows how poisoned packages become backdoors to…
https://dev.to/gitguardian/what-a-supply-chain-attack-is-really-after-your-credentials-5gmg
@getpacketai.bsky.socialYour unfixed vulnerabilities aren't just tech debt anymore—they're a live attack surface. Chained exploits and automated attackers make backlogs a critical risk, not a later problem.
@shehackspurple.bsky.socialWho should be responsible when an autonomous agent goes rogue?
🎥 Watch here: https://twp.ai/9Obi3l
@cybercod.bsky.socialTesting web apps? The OWASP Top 10 is your essential guide. But pro-tip: Don't treat vuln testing as a one-off event. Integrate it *continuously* throughout your SDLC. Catch issues early, save major headaches later!
@owaspboston.bsky.socialOur next meetup has now been scheduled.
Thank you to our sponsors Maze!
This month we have Shubham Santosh Upadhyay talking about Prompt Injection and what causes it and can one detect it.
RSVP to grab a spot at www.meetup.com/owaspboston/...
My ThreatGenix OSS workspace pairs editable DFDs with rule-based STRIDE findings and mitigation tracking. Core modeling needs no external AI; live scans need a separate worker. Where does your threat-model review get stuck? #AppSec #InfoSec
github.com/ibrolord/thr...
@bsidesde.bsky.socialRT to #Vote for "Building repro's at WARP speed" #LLM #appsec #BSidesDE bsidesdelaware.com/cfp-voting/ #CFP #BSidesDE2026
@eyalestrin.bsky.socialWe tested our own WAF with frontier AI models. Here’s what we found #appsec
@eyalestrin.bsky.socialGitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them #appsec
@opsmatters.comThe latest update for #Wallarm includes "#AI Governance on #AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed".
#cybersecurity #APISecurity #AppSec https://opsmtrs.com/453oM6P
@opentext.bsky.social#CybersecurityAwarenessMonth officially kicks off today! 🛡️👏
In the latest episode of #ReimaginingCyber, we discuss AI agents, AI-powered testing, rogue agents, auto-remediation, and what the future of #AppSec could look like by 2030.
🎧 Listen now on Apple Podcasts: https://apple.co/4xYdzDh
@checkmarxzero.bsky.socialThe EU CRA (Cyber Resilience Act) provisions have started kicking in, with reporting requirements for incidents and exploited vulnerabilities. Are you affected? What about your open-source projects? buff.ly/wk9BoAy
#CRA #CyberResilienceAct #Compliance #AppSec #OpenSource #InfoSec #Cybersecurity
@cvedatabase.bsky.socialSecurity Tip: Stop hardcoding API keys! 🛡️ Use a secrets manager to inject credentials at runtime and implement automated rotation every 30-90 days. This limits the blast radius if a developer machine is compromised.
Learn more: https://cvedatabase.com
#CVE #InfoSec #AppSec
@zaproxy.orgZAP Updates for September:
The AJAX Spider and DOM XSS add-ons have now been fully retired from ZAP’s nightly and weekly releases, and Phase 1 of the new Global Scan Policy Manager has landed behind a dev-mode flag.
www.zaproxy.org/blog/2026-10...
#zaproxy #appsec
@opensecurityconf.bsky.socialDidn't get a ticket? Join the waiting list to increase your chances on a last-minute package! opensecurityconference.org/conference/r...
#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity [lisi] 2/2
@scott.keck-warren.comMyth: PHP isn't secure by default.
#PHP8.6 flips three session settings on for you:
Check them before you upgrade. SameSite=Lax drops the session cookie on cross-site POSTs, so SSO and payment callbacks that POST back to you lose the session.
Video: https://youtu.be/U9Jrcg1Ns1k
@cody-programmer08.bsky.socialOctober is #CybersecurityAwarenessMonth, and we're celebrating with a series of posts!
Our tool helps you find and fix security issues in your code, so over the four weeks, we'll cover some cybersecurity-related topics.
Stay tuned!
