@nessalazne.bsky.socialCloudflare open-sourced a free AI security tool that found 7,000 bugs in their own codebase. It maps your app and runs agents through logins, DBs, APIs, and prompt injection. Only verified issues make the report, each with a fix. 20K GitHub stars
@ppc.landICYMI: Pixalate flags apps and sites hit by ad fraud clawbacks in 12 months #AdFraud #DigitalMarketing #AppSecurity #SSP #ProgrammaticAdvertising
@marketingnews.bsky.socialICYMI: Pixalate flags apps and sites hit by ad fraud clawbacks in 12 months #AdFraud #DigitalMarketing #AppSecurity #SSP #ProgrammaticAdvertising
@thepenguintech.bsky.socialYour OpenAI key might be public right now. Watch to see where it ends up, and how to check your own app in a few minutes.
#openai #apikey #appsecurity #vibecoding #appdevelopment #mobileapps #startups #softwareengineering
@calculito.bsky.socialWhen employees download direct-from-web utilities and override OS security prompts to save time, they open the door to background data exfiltration.
#Cybersecurity #AppSecurity #ShadowIT #Infosec #AIGovernance
I don’t even need your passwords, mate!
ion-oaie.medium.com/i-dont-even-...
@killbait-uk.bsky.socialAsos confirms hackers sent unauthorised notification to app users
🤖 IA: It's not clickbait ✅
👥 Users: It's not clickbait ✅
👇👇👇
@securityonline.bsky.socialA ChatGPT macOS vulnerability, CVE-2026-100754, let local code run commands through a trusted OpenAI process. OpenAI fixed it on Sept 25.
#ChatGPT #macOS #OpenAI #CVE2026100754 #PatrickWardle #AppSecurity #Vulnerability #MacSecurity
@ericthecoder.bsky.social20 things to have Claude do before launching your app, security edition. Credit to @millee.md—this video was inspired by his. Check out his profile if you found it useful. #appsecurity #ai Comment 'vibe' and I'll send you my full pre launch checklist for vibecoded apps
@securityonline.bsky.socialFive high-severity Electron vulnerabilities, including CVE-2026-102676, CVE-2026-102673 and CVE-2026-102674, weaken sandbox isolation. Update Electron now.
#Electron #ElectronJS #CVE2026102676 #AppSecurity #Sandbox #JavaScript #DesktopApps #PatchNow
@thefluxread.bsky.socialMeta's New AI Agent Read a Man's Private Texts. Then It Lied to His Face About How
www.thefluxread.com/2026/09/meta...
#AISecurity #MetaAI #CyberSecurity #DataPrivacy #TechNews #PrivacyBreach #AIAgents #iOSSecurity #TechJournalism #OpenAI #GeminiAI #AppSecurity
@xojo.comProtect screens in your mobile app with Face ID or Touch ID. The UserAuthentication class asks the device's operating system to verify the owner...
https://documentation.xojo.com/api/mobile/userauthentication.html
#MobileDevelopment #AppSecurity #Biometrics #CrossPlatform #SoftwareDevelopment
@dataprismai.bsky.socialSupabase customers are publicly exposing large amounts of user data because AI-generated and vibe-coded apps often lack proper…
#Supabase #AIsecurity #DataPrivacy #AppSecurity
https://techcrunch.com/2026/09/25/some-supabase-customers-are-publicly-exposing-reams-of-peoples-data-to-the-web/
@harryvuitl.bsky.socialKiểm Tra Quyền Ứng Dụng: Chỉ cấp quyền thật sự cần thiết và rà soát định kỳ.
Nội dung chia sẻ kiến thức, không phải lời khuyên tài chính.
#InterLink #ITLG #ITL #AppSecurity
@usamainnovaes.bsky.socialComment "AI" I'll send
This AI tool scans it like a real hacker would, finds the weak spots, and gives you a clear report on what to fix. It also includes ready-to-use improvement prompts, so you can patch issues fast.
#WebSecurity #AppSecurity #Developers #WebDevelopment #VibeCoding #Usama
@darknetsearch.bsky.social🚨 AI misuse: Claude exploited to harvest secrets from millions of Android apps — exposing credentials at scale.
🌐 spoofguard.io/blog/en/thre...
#CyberSecurity #AndroidThreats #ClaudeAI #DataLeak #AppSecurity #DarkWeb #ThreatIntel
Try it for FREE. 🆓
@righettod.eu📡 OWASP Secure Headers Project:
The web user interface is back, we worked all weekend, after the OWAP Foundation's new website went live, to get it back online 😉
@xojo.comThe Crypto module has everything you need, and this post tells you exactly which function to reach for...
@thedailytechfeed.comIncoming calls on WeChat could hijack your account via a zero-click worm—patch now live. #SecurityNews #WeChat #ZeroClick #MobileSecurity #Exploit #AppSecurity https://thedailytechfeed.com/wechat-zero-click-worm-exploit-took-accounts-via-incoming-calls/
@righettod.eurighettod.github.io/code-assista...
🤝 A huge thank you to @pentesterlab.com for all the training courses and labs about secure coding that often led to the creation of a new skill or the update of an existing one.
@righettod.eu🧑🎓 As part of my homework on AI from an application security perspective: Since several month now I work on a collection of Claude code skills (such skills are compatible with other coding assistants) to generate code that include, by default, a set of security validations.