@cvedatabase.bsky.socialSecurity Tip: Look beyond your direct dependencies. 🛡️ Vulnerabilities often hide in transitive dependencies—the libraries your libraries use. Map your full dependency tree to ensure total coverage. Stay informed on new risks at https://cvedatabase.com #CVE #InfoSec #AppSec
@hugovalters.bsky.socialAutomate OWASP ZAP scans from Python via its REST API. Spider, then active scan, no GUI. 124 lines, advanced, for security folks.
https://www.valtersit.com/python/owasp-zap-automation-via-rest-api/
#security #python #appsec
@opsmatters.comThe latest update for #Snyk includes "Introducing Evo Agentic #AppSec: Security That Keeps Up With AI Development" and "VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?".
#CyberSecurity #DevOps #OpenSource https://opsmtrs.com/3yzKsZo
@opsmatters.comThe latest update for #SaltSecurity includes "Under CPS 234, Your #APIs Are Information Assets. Can You Prove You're Protecting Them?" and "Agents Are Acting. Most Organizations Cannot Stop Them.".
#cybersecurity #APISecurity #AppSec https://opsmtrs.com/40EBWWv
@opsmatters.comThe latest update for #Veracode includes "#CISO Risk Intel Brief: Record Patch Volume, Edge Zero-Days, and AI-Accelerated Supply Chain Pressure" and "Best Practices in Maintaining #HIPAA #Compliance for #Healthcare Applications".
#cybersecurity #softwaresecurity #AppSec https://opsmtrs.com/3eO6tf7
@darryl-ruggles.cloud#AppSec #PenetrationTesting #AWSContinuum #AWSSecurity #CVE
We live in a new world where AI-based tools are finding security problems at an alarming rate.
@appsecuritystandards.orgTerm of the day: Build Security
Build Security refers to the principles, practices, and tools used to design, develop, and maintain software systems in ways that reduce vulnerabilities from the start. Rather...
Full definition: appsecuritystandards.org/glossary/build-security
@opensecurityconf.bsky.socialOnly 3 more weeks to go until the Open Security Conference 2026! 🥳 Wait, you didn't get a ticket? Hop onto our waiting list, there's a chance you might still get a last minute package! opensecurityconference.org/conference/r...
#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec [lisi]
@yogsec.bsky.socialShannon is an AI pentester for web applications and APIs.
It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
GitHub: github.com/KeygraphHQ/s...
@opsmatters.comThe latest update for #GitGuardian includes "Why We Built the Good Samaritan Program" and "#AI Agent Security: Best Practices for Safe Deployment".
#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb
@opsmatters.comThe latest update for #Zenity includes "When Agents Trust Each Other, One Compromised MCP Server Is Enough" and "Zenity for Claude Tag: Securing the Shared Agent in Your Slack Workspace".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
@yogsec.bsky.socialVigil is an open-source AI harness built for long-running code audits, web pentests, and bug bounty hunting.
GitHub: github.com/vigiloss/vigil
@cyberfm.bsky.socialWED | 14 OCT 2026 | Cybersecurity Report #Cybersecurity #CyberFM #AriasThomas #AppSec #Infosec #ZeroDay #SupplyChainSecurity #DevSecOps #RSSHDelivery #NewYorkTech #TechTok #CyberTok
@niels.fennec.devA NuGet package runs with the same permissions as your process. Now we let AI agents run commands too. What could possibly go wrong?
I looked at MXC, Microsoft's open source sandbox with a .NET SDK. Deny by default!
blog.fennec.dev/sandboxing/2...
#dotnet #appsec
@newnovation.bsky.social🔐 Be the first security hire at a fast-scaling data infra company. Own AppSec end-to-end, multi-tenant systems, multi-cloud (AWS/Azure/GCP), TypeScript + Go. SF, remote ok. W2 FTE.
@appsecuritystandards.orgTerm of the day: Build Provenance
Build provenance is a verified record of how a piece of software was built, including where the source code came from, what tools and processes were used, and what outputs...
Full definition: appsecuritystandards.org/glossary/build-provenance
@cyfar.ca~Trailofbits~
Most package managers fail to verify dependency integrity by default, enabling repository tampering and malicious package injection.
-
IOCs: (None identified)
-
#AppSec #SupplyChain #ThreatIntel
@qualityone.bsky.socialEin bestandener Penetrationstest ist eine Momentaufnahme.
Sicherheitsprüfung gehört in die Teststrecke: Abhängigkeiten bei jedem Bau, Berechtigungen als Testfall, der Pentest dort, wo Automatisierung endet.
@eyalestrin.bsky.socialGitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking #appsec
@mojoauth.com