Veganism Social

Open Security ConferenceThe registration for the Open Security Conference is only open until September 11th, two weeks from now - or until all reserved packages are gone, whatever happens first.🔔 We're already rather full, so in case you're still considering, go for it rather sooner than later!➡️ Request your osco package here: <a href="https://register.opensecurityconference.org" rel="nofollow noopener" translate="no" target="_blank">https://register.opensecurityconference.org</a><a href="https://infosec.exchange/tags/osco" class="mention hashtag" rel="nofollow noopener" target="_blank">#osco</a> <a href="https://infosec.exchange/tags/osco25" class="mention hashtag" rel="nofollow noopener" target="_blank">#osco25</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/ProductSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ProductSecurity</a> <a href="https://infosec.exchange/tags/OTsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTsecurity</a> <a href="https://infosec.exchange/tags/OpenSpace" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSpace</a> [lisi]

anchoreRemember the panic of Log4Shell? Security teams spent days hunting for every instance of the vulnerability. But what if you could know where every instance was in just five minutes?➡️ Go from reactive chaos to proactive precision with SBOMs. Watch the webinar to see how: <a href="https://go.anchore.com/rapid-incident-response-with-sboms/" rel="nofollow noopener" translate="no" target="_blank">https://go.anchore.com/rapid-incident-response-with-sboms/</a> <a href="https://mstdn.business/tags/SBOM" class="mention hashtag" rel="nofollow noopener" target="_blank">#SBOM</a> <a href="https://mstdn.business/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://mstdn.business/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://mstdn.business/tags/IncidentResponse" class="mention hashtag" rel="nofollow noopener" target="_blank">#IncidentResponse</a>

Darren Meyer :donor:<a href="https://infosec.exchange/tags/LastWeekInAppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#LastWeekInAppSec</a> time again—here's a few things that didn't get a ton of coverage, but <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> folks might want to know about anyway. Details: <a href="https://checkmarx.com/zero-post/last-week-in-appsec-2025-08-26/" rel="nofollow noopener" translate="no" target="_blank">https://checkmarx.com/zero-post/last-week-in-appsec-2025-08-26/</a>#️⃣ NPM module `cipher-base` (10M weekly downloads), part of the crypto-browserify JavaScript suite for performing cryptographic implementations in the browser, has a severe (CVSSv4 9.1) vulnerability that makes its hashing functions unsafe to use. Make sure you’re on 1.0.5 or newer if you use hashing for any kind of data verification or cryptographic operation.💉 The popular `mcp-cli` tool, which allows easily running MCP Servers from various sources, has a command-injection flaw in version 1.13.0 (current as of this post). The flaw is rooted in the tool’s OAuth2 implementation, allowing an attacker to construct a malicious MCP service that performs OS-level command-injection on the user. This issue is fixed in the main branch, but the fix has not yet been tagged into a new release.😶‍🌫️ The very popular `cloud-code-router` plugin for the Claude Code AI coding assistant could leak secrets such as private API keys for various AI services due to an improper CORS (Cross-Origin Resource Sharing) configuration in versions prior to 1.0.34. Leaking these credentials can lead to resource exahustion, increased cost, and potential leaks of sensitive data such as code, configuration information, and other prompt and response contents.

OWASP FoundationDon't miss out on this thrilling opportunity! 🚀 Be a mentor at our Meet the Mentor event during <a href="https://infosec.exchange/tags/OWASP" class="mention hashtag" rel="nofollow noopener" target="_blank">#OWASP</a> Global <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> USA this November. Share your knowledge, empower future AppSec leaders, and connect with a vibrant community.Reserve your spot now: <a href="https://owasp.wufoo.com/forms/zu82m8y060onbm/" rel="nofollow noopener" translate="no" target="_blank">https://owasp.wufoo.com/forms/zu82m8y060onbm/</a>

TechnoTenshi :verified_trans: :Fire_Lesbian:Security alert: Malicious versions of the nx build tool compromised GitHub accounts, stealing wallets, API keys, and credentials. Impacted users may see a "s1ngularity-repository" created in their org. Update nx, check repos, and rotate secrets. <a href="https://semgrep.dev/blog/2025/security-alert-nx-compromised-to-steal-wallets-and-credentials/" rel="nofollow noopener" translate="no" target="_blank">https://semgrep.dev/blog/2025/security-alert-nx-compromised-to-steal-wallets-and-credentials/</a><a href="https://infosec.exchange/tags/SupplyChainSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SupplyChainSecurity</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://infosec.exchange/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#GitHub</a>

OWASP FoundationWe’re excited to feature two powerhouse voices in security as our keynote speakers for OWASP Global AppSec USA 2025!📍 Daniel Miessler — AI & Security Researcher, entrepreneur, and Founder/CEO of Unsupervised Learning. 📍 Adam Shostack — World-renowned threat modeling expert and consultant at Shostack & Associates. REGISTER: <a href="https://owasp.glueup.com/event/131624/register/" rel="nofollow noopener" translate="no" target="_blank">https://owasp.glueup.com/event/131624/register/</a><a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatModeling</a> <a href="https://infosec.exchange/tags/AISecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#AISecurity</a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://infosec.exchange/tags/GlobalAppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#GlobalAppSec</a> <a href="https://infosec.exchange/tags/WashingtonDC" class="mention hashtag" rel="nofollow noopener" target="_blank">#WashingtonDC</a>

Gary McGrawRepeat after me...we are not going to "prompt injection 42" our way out of this <a href="https://sigmoid.social/tags/LLM" class="mention hashtag" rel="nofollow noopener" target="_blank">#LLM</a> security problem. <a href="https://sigmoid.social/tags/MLsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#MLsec</a> teaches us how to build security in to <a href="https://sigmoid.social/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a>. All of those lessons we know from <a href="https://sigmoid.social/tags/swsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#swsec</a> and <a href="https://sigmoid.social/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#appsec</a> apply.<a href="https://www.theregister.com/2025/08/26/breaking_llms_for_fun/" rel="nofollow noopener" translate="no" target="_blank">https://www.theregister.com/2025/08/26/breaking_llms_for_fun/</a>

Tanya Janca | SheHacksPurple :verified: :verified:Want learn the absolute basics of application security? Check out this helpful YouTube playlist! <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#appsec</a><a href="https://twp.ai/4inoXy" rel="nofollow noopener" translate="no" target="_blank">https://twp.ai/4inoXy</a>

Ohmbudsman8. Docker patches CVE-2025-9074 (CVSS 9.3) container escape; update Desktop to 4.44.3. Source: The Hacker News — <a href="https://thehackernews.com/2025/08/docker-fixes-cve-2025-9074-critical.html" rel="nofollow noopener" translate="no" target="_blank">https://thehackernews.com/2025/08/docker-fixes-cve-2025-9074-critical.html</a> <a href="https://mastodon.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://mastodon.social/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a>

Open Security ConferenceToday is Women's Equality Day, a day celebrated in the US and a day important everywhere. Or shall we say it's a reminder of the inequality and inequity that's still prevalent across the world for folks who are not white cis men? Yes, we shall. We all need to do better. Today we learn again.When white women were granted the right to vote in the US: <a href="https://en.m.wikipedia.org/wiki/Women%27s_Equality_Day" rel="nofollow noopener" translate="no" target="_blank">https://en.m.wikipedia.org/wiki/Women%27s_Equality_Day</a>When white women were granted the right to vote in various countries: <a href="https://en.m.wikipedia.org/wiki/Timeline_of_women%27s_suffrage" rel="nofollow noopener" translate="no" target="_blank">https://en.m.wikipedia.org/wiki/Timeline_of_women%27s_suffrage</a>When nearly everyone was granted the right to vote across the world: <a href="https://en.m.wikipedia.org/wiki/Universal_suffrage" rel="nofollow noopener" translate="no" target="_blank">https://en.m.wikipedia.org/wiki/Universal_suffrage</a> Let's continue leveling the playing-field, for everyone.<a href="https://infosec.exchange/tags/WomensEqualityDay" class="mention hashtag" rel="nofollow noopener" target="_blank">#WomensEqualityDay</a> <a href="https://infosec.exchange/tags/GenderEquality" class="mention hashtag" rel="nofollow noopener" target="_blank">#GenderEquality</a> <a href="https://infosec.exchange/tags/VotingRights" class="mention hashtag" rel="nofollow noopener" target="_blank">#VotingRights</a> <a href="https://infosec.exchange/tags/osco" class="mention hashtag" rel="nofollow noopener" target="_blank">#osco</a> <a href="https://infosec.exchange/tags/osco25" class="mention hashtag" rel="nofollow noopener" target="_blank">#osco25</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/ProductSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ProductSecurity</a> <a href="https://infosec.exchange/tags/OTsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTsecurity</a> <a href="https://infosec.exchange/tags/OpenSpace" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSpace</a> [lisi]

sydseterI am also looking forward to having a beer with like-minded security enthusiasts and so to all old and new friends. Come and say hi! <a href="https://mastodon.social/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#appsec</a> <a href="https://mastodon.social/tags/sikkerhetsfestivalen" class="mention hashtag" rel="nofollow noopener" target="_blank">#sikkerhetsfestivalen</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>

sydseterI am on my way to Sikkerhetsfestivalen at Lillehammer. Anyone joining me today at 1:15 pm CEST will be learning to play OWASP Cornucopia in a different way from what we usually do. Confronted with the grumpy old senior developer who refuses to shift left due to too many hours working overtime on his incredibly sophisticated pet projects, what will you do? <a href="https://www.sikkerhetsfestivalen.no/talerliste#sz-speaker-cfb897f0-3706-43cd-aaa7-d955bf902943" rel="nofollow noopener" translate="no" target="_blank">https://www.sikkerhetsfestivalen.no/talerliste#sz-speaker-cfb897f0-3706-43cd-aaa7-d955bf902943</a>. <a href="https://mastodon.social/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#appsec</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/Sikkerhetsfestivalen" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sikkerhetsfestivalen</a>

Lisi HockeHad a <a href="https://mastodon.social/tags/ThreatModel" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatModel</a> session with two engineering teams today. A real extensive one, where preparation included a full review of what's already there. A tech stack we haven't touched on at this company yet. A model where I could really build on my past experience, and still felt I worked for way too long. And yet, it paid off. Had an insightful conversation with folks, we all learned from each other, and we paved the way for future small, lean modeling sessions. Huge win! 🎉 <a href="https://mastodon.social/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://mastodon.social/tags/ProdSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ProdSec</a>

JarrodIf you're interested in learning Android Application Hacking, my recommendations are to check out Android App Hacking - Black Belt Edition on Udemy and the HTB Academy Android courses. They're really good resources, in my opinion! <a href="https://infosec.exchange/tags/EthicalHacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#EthicalHacking</a> <a href="https://infosec.exchange/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a>

OWASP Foundation🔐 Take a look at the OWASP 2025 Global AppSec USA Day 4 Agenda for November 6th!Get ready for hands-on learning, top-tier speakers, and cutting-edge insights in application security. And you won't want to miss Daniel Miessler's keynote address!📍 Register now: <a href="https://owasp.glueup.com/event/131624/register/" rel="nofollow noopener" translate="no" target="_blank">https://owasp.glueup.com/event/131624/register/</a><a href="https://infosec.exchange/tags/OWASP" class="mention hashtag" rel="nofollow noopener" target="_blank">#OWASP</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/Cybersec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersec</a> <a href="https://infosec.exchange/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatModeling</a> <a href="https://infosec.exchange/tags/WashingtonDC" class="mention hashtag" rel="nofollow noopener" target="_blank">#WashingtonDC</a>

Lisi HockeMonday's the day to grab your <a href="https://mastodon.social/tags/BSidesMunich2025" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSidesMunich2025</a> workshop tickets! 🚨 This year, I have the honor to give my <a href="https://mastodon.social/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> session "Secure Development Lifecycle Applied - How to Make Things a Bit More Secure than Yesterday Every Day". Really looking forward to this! 🤩<a href="https://2025.bsidesmunich.org/workshops/007_secure-development-lifecycle-applied-how-to-make-things-a-bit-more-secure-than-yesterday-every-day/" rel="nofollow noopener" translate="no" target="_blank">https://2025.bsidesmunich.org/workshops/007_secure-development-lifecycle-applied-how-to-make-things-a-bit-more-secure-than-yesterday-every-day/</a><a href="https://infosec.exchange/@BSidesMunich/115072076378437237" rel="nofollow noopener" translate="no" target="_blank">https://infosec.exchange/@BSidesMunich/115072076378437237</a>

OWASP Foundation👀 Sneak Peek: Day 3 at OWASP Global AppSec USA 2025, November 5thGet ready for a power-packed day of advanced training sessions and hands-on learning designed to level up your Application Security skills.Take a look at the attached graphic to see everything lined up for Day 3!Register to attend now! <a href="https://owasp.glueup.com/event/131624/register/" rel="nofollow noopener" translate="no" target="_blank">https://owasp.glueup.com/event/131624/register/</a><a href="https://infosec.exchange/tags/OWASP2025" class="mention hashtag" rel="nofollow noopener" target="_blank">#OWASP2025</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/GlobalAppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#GlobalAppSec</a> <a href="https://infosec.exchange/tags/WashingtonDC" class="mention hashtag" rel="nofollow noopener" target="_blank">#WashingtonDC</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/ApplicationSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ApplicationSecurity</a>

ReynardSecPublication by BSI (Germany) and ANSSI (France) on designing LLM-based systems using a Zero Trust approach. Focus: the application layer and "agentic systems".<a href="https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/ANSSI-BSI-joint-releases/LLM-based_Systems_Zero_Trust.pdf?__blob=publicationFile&v=3" rel="nofollow noopener" translate="no" target="_blank">https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/ANSSI-BSI-joint-releases/LLM-based_Systems_Zero_Trust.pdf?__blob=publicationFile&v=3</a><a href="https://infosec.exchange/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#ai</a> <a href="https://infosec.exchange/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a> <a href="https://infosec.exchange/tags/llm" class="mention hashtag" rel="nofollow noopener" target="_blank">#llm</a> <a href="https://infosec.exchange/tags/llms" class="mention hashtag" rel="nofollow noopener" target="_blank">#llms</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#appsec</a>

Open Security ConferenceDid you know the Open Security Conference is present on three social networks so you can follow us on the platform(s) of our choice? 🌐🤩🦣 Mastodon: <a href="https://infosec.exchange/@OSCo" rel="nofollow noopener" translate="no" target="_blank">https://infosec.exchange/@OSCo</a> 🖇️ LinkedIn: <a href="https://www.linkedin.com/company/open-security-conference" rel="nofollow noopener" translate="no" target="_blank">https://www.linkedin.com/company/open-security-conference</a> 🦋 Bluesky: <a href="https://bsky.app/profile/opensecurityconf.bsky.social" rel="nofollow noopener" translate="no" target="_blank">https://bsky.app/profile/opensecurityconf.bsky.social</a> We appreciate all of you helping us spread the word about this one of a kind open space conference for everyone interested in cybersecurity! 💬🗨️<a href="https://opensecurityconference.org/" rel="nofollow noopener" translate="no" target="_blank">https://opensecurityconference.org/</a> <a href="https://infosec.exchange/tags/osco" class="mention hashtag" rel="nofollow noopener" target="_blank">#osco</a> <a href="https://infosec.exchange/tags/osco25" class="mention hashtag" rel="nofollow noopener" target="_blank">#osco25</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/ProductSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ProductSecurity</a> <a href="https://infosec.exchange/tags/OTsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTsecurity</a> <a href="https://infosec.exchange/tags/OpenSpace" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSpace</a> [lisi]

Offensive Sequence🚨 CRITICAL: CVE-2025-9288 affects sha.js ≤2.4.11—improper input validation allows remote hash manipulation. No patch yet. Inventory usage, sanitize inputs, monitor for attacks, and consider alternatives. Details: <a href="https://radar.offseq.com/threat/cve-2025-9288-cwe-20-improper-input-validation-664ed48c" rel="nofollow noopener" translate="no" target="_blank">https://radar.offseq.com/threat/cve-2025-9288-cwe-20-improper-input-validation-664ed48c</a> <a href="https://infosec.exchange/tags/OffSeq" class="mention hashtag" rel="nofollow noopener" target="_blank">#OffSeq</a> <a href="https://infosec.exchange/tags/shaJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#shaJS</a> <a href="https://infosec.exchange/tags/Vuln" class="mention hashtag" rel="nofollow noopener" target="_blank">#Vuln</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#AppSec</a>

Recent searches

Search options

Administered by:

Server stats:

#appsec

Recent searches

Search options

Administered by:

Server stats:

Appsec

#appsec