Ashiq JA

Security Engineering Manager, AppSec - @Amazon UK | DevSecOps | Digital Transformation | #Appsec |#Cryptography | UK 🇬🇧| UAE 🇦🇪 Views are my own

[Ashiq JA @AshiqJA]

𝙀𝙭𝙘𝙞𝙩𝙞𝙣𝙜 𝙤𝙥𝙥𝙤𝙧𝙩𝙪𝙣𝙞𝙩𝙮 𝙞𝙣 𝙢𝙮 𝙩𝙚𝙖𝙢 𝙖𝙩 𝘼𝙢𝙖𝙯𝙤𝙣!

I’m hiring for a 𝗦𝗿. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿 (𝗟𝟲) based in London, focused on securing some of the most critical applications at 𝐀𝐦𝐚𝐳𝐨𝐧.

#Amazon #AppSec

https://t.co/NC2gBqWj4D

[Ashiq JA @AshiqJA]

Anthropic releases tool that found safety flaws in all 14 AI models tested #AI #LLM https://t.co/L9zyQ92GLX

[Ashiq JA @AshiqJA]

Waymo robotaxi avoids citation after illegal U-turn #tech #AI https://t.co/apZGY8Ow2s

[Ashiq JA @AshiqJA]

CodeMender: an AI agent for code security #Google #Security https://t.co/RIj1tacSb9

[Ashiq JA @AshiqJA]

NIST’s PQC draft rollout sets a 2030 deprecation deadline for legacy crypto (RSA/ECDSA), full ban by 2035.

If you’re not inventorying and migrating now, your future-crypto strategy is already lagging.

#QuantumComputing #Cryptography #PQC

https://t.co/bPOukzCmpB

[Ashiq JA @AshiqJA]

New Wired research: AI agents are getting better at both writing code and hacking it—uncovering zero‑days in open‑source projects.

The cyber arms race just went agentic—are your red team & fuzzers equipped?
#AI #Cybersecurity #RedTeam

https://t.co/E3TBy93PL9

[Anthropic @AnthropicAI]

New Anthropic Research: Project Vend.

We had Claude run a small shop in our office lunchroom. Here’s how it went.

[Ashiq JA @AshiqJA]

"UC Berkeley research shows AI agents are now uncovering zero‑day vulnerabilities—finding 17 new bugs across 188 open‑source projects ⚠️ But current systems still catch only ~2% of issues. Vigilance + offensive testing is key #AppSec #CyberSecurity #AI

https://t.co/E3TBy94nAH

[Ashiq JA @AshiqJA]

Leadership isn't just about delivering results.

It's about spotting friction early, building empathy into process, and creating clarity in chaos.

Especially in security, calm confidence > quick reaction
#Leadership #SecurityEngineering #CISO #StrategicThinking

[Ashiq JA @AshiqJA]

AI isn't replacing AppSec engineers — it's amplifying them. The smartest teams today? They use LLMs to scale reviews, detect patterns, and reduce burnout.
Secure faster. Ship better. Stay ahead.
#AppSec #AI #CyberSecurity #LLM #DevSecOps

[Ashiq JA @AshiqJA]

Researchers warn of “cognitive debt” where outsourcing mental tasks to AI weakens fundamental thinking abilities, with young people’s developing brains potentially most at risk #AI #Brain

[Ashiq JA @AshiqJA]

🧠 AI threat modeling is no longer "experimental."
Teams are plugging Claude, GPT-4o, and Gemini into secure SDLCs to pre-empt design flaws — not just bugs.
The future of AppSec is assisted intuition.
#AppSec #AIsecurity #LLM

[Ashiq JA @AshiqJA]

Breaking down ‘EchoLeak’, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot https://t.co/An544b57zG #infosec #ZeroClick #Vulnerability #AI

[Ashiq JA @AshiqJA]

🚨 Researchers uncovered “EchoLeak” — a zero-click AI flaw exposing Microsoft 365 Copilot data without user involvement. Reminder: as we integrate generative AI into workflows, we need zero-trust thinking https://t.co/fagQwHUAJi

#AIrisk #ZeroTrust #CloudSecurity

[Ashiq JA @AshiqJA]

Good security leaders don’t just secure systems—they create environments where engineers build securely by default. Leadership in AppSec is empathy + enablement + strategic depth
#CyberSecurity #SecurityLeadership #CISO

[Ashiq JA @AshiqJA]

Snyk, GitHub, Dependabot, CodeQL…
Engineers today are drowning in alerts.
The real challenge? Prioritizing what truly matters.
I believe security signal intelligence and security automation will be the next evolution
#AppSec #AIforSecurity #SignalNoiseProblem

[Ashiq JA @AshiqJA]

The best security leaders don’t just block threats—they build systems that scale trust.
A resilient security culture = secure-by-default + empathy-driven leadership

#CISO #SecurityLeadership #AppSec

[Ashiq JA @AshiqJA]

🔐 Enhancing Application Security with AI
- As AI becomes more embedded in engineering workflows, tools like Anthropic’s Claude are starting to add real value — especially for security-conscious teams #infosec #AI #Security #LLM
https://t.co/hPc0z4gEVG

[Ashiq JA @AshiqJA]

Quantum computing is no longer science fiction.
If you’re in AppSec or Identity, start exploring post-quantum cryptography. NIST’s PQC standards will shape the next decade of secure software.
#CyberSecurity #QuantumComputing #PQC

[Book Therapy @Book_therapy223]

Strategic thinking