CONTOS DUNNE

INFORMATION SECURITY research, information, companies and tools. Also: open source, privacy, encryption, mobile, social, cloud and data management.

[CONTOS DUNNE @CONTOSDUNNE]

THIS COMPANY IS A RISING STAR . . .
Via @TechCrunch: @EndorLabs, which helps companies secure their #opensource packages, raises $70M https://t.co/4EeNCaRe2E

#appsec #developer #DevSecOps #cybersecurity #OSS #devops #supplychain #security #VC #VentureCapital

[CONTOS DUNNE @CONTOSDUNNE]

The Wall Street Journal gets insights from @NCCsecurityUS into what we can learn from the FBI Internet Crimes report https://t.co/xAb6GOeSwC #cybersecurity

[Linda Harden @LindaHardenCCP]

CRM AI’s Hidden Security Risks - By Aaron Costello @AppOmniSecurity
https://t.co/Yj4XPTEy5t

#cctr #custserv #cx #contactcenter #customerservice #customersuccess #customerexperience #callcenter #artificialintelliegence #ai

[CONTOS DUNNE @CONTOSDUNNE]

Read this in-depth report by @DarkReading about BodySnatcher, a #ServiceNow flaw that @AppOmniSecurity researcher @ConspiracyProof says is "the most severe #AI-driven vulnerability uncovered to date" https://t.co/1rxJ8jSo0v

[Aaron Costello @ConspiracyProof]

‼️ New Research Drop ‼️

I’m excited to share my latest @AppOmniSecurity Labs research: a CVSS 9.3 critical vulnerability in #ServiceNow’s AI platform.

It's dubbed "BodySnatcher" (CVE-2025-12420) because of its novel exploit path: it allowed an unauthenticated attacker to impersonate any user on the platform and execute powerful out-of-the-box (OOB) AI agents with the victim's permissions. The result? Complete platform takeover.

Read my write-up here for the juicy technical details: https://t.co/TvnOswPiW2

#cybersecurity #ai #saas #vulnerability

[CONTOS DUNNE @CONTOSDUNNE]

TechRepublic speaks with @NCCGroupplc about why addressing skills gaps in #OperationalTechnology teams, especially as they relate to #AI will be a challenge this year https://t.co/65osVsZIi1

[CONTOS DUNNE @CONTOSDUNNE]

IT Brew gets insights from @AppOmniSecurity about #AI hype in 2025 https://t.co/MpBoqknjgL

[CONTOS DUNNE @CONTOSDUNNE]

IEEE Spectrum explores the world of real-time audio #deepfakes and how simple it's become to make them, based on research from @NCCsecurityUS https://t.co/eTKtBC9CAA

[CONTOS DUNNE @CONTOSDUNNE]

Treating every #security alert in your software development lifecycle is one pitfall to avoid, says @EndorLabs CEO @varun__badhwar. Instead, get context to help developers prioritize the risks that matter most https://t.co/VwhbObKgSE #SDLC

[CONTOS DUNNE @CONTOSDUNNE]

In its latest episode, @SecWeekly interviews @ConspiracyProof of @AppOmniSecurity about a #dataexposure he uncovered in #ServiceNow Knowledge Bases affecting 1,000+ instances https://t.co/oHet4xhX1w

[CONTOS DUNNE @CONTOSDUNNE]

According to an @NCCsecurityUS report, governments have levied at least 2,700 #dataprivacy fines totaling around $7.3 billion since 2020. Read the story by @thetomzone in @ITBrew https://t.co/gxxZ1my0Yh #cyberpolicy

[CONTOS DUNNE @CONTOSDUNNE]

Private data for #Fortune200 organizations and others around the globe is currently being exposed on the web from #ServiceNow applications #misconfigured for general public access, finds @AppOmniSecurity. Read the story by @adrianweckler https://t.co/r7zgNNT3qG

[CONTOS DUNNE @CONTOSDUNNE]

#OpenSource #security patches have a 75% chance of breaking an #application. Read the story by @F_Jcksn in @TechRepublic about new @EndorLabs research: https://t.co/RuM6DcD965

[CONTOS DUNNE @CONTOSDUNNE]

Comprehensive @AppOmniSecurity report surveying 644 organizations across six countries finds the #security of enterprise #SaaS applications is still far short of ideal, and 1/3 of companies have been breached. https://t.co/qc5BYy2D0b

[CONTOS DUNNE @CONTOSDUNNE]

From #BlackHat, #SupplyChainSecurity leader @EndorLabs unveils groundbreaking capabilities providing a new way to remediate #ApplicationSecurity risks https://t.co/uqGuH6LLsq

[CONTOS DUNNE @CONTOSDUNNE]

#SaaS-aware identity #threatdetection and response capabilities unveiled by @AppOmniSecurity at #BlackHat provide industry-leading protection for critical enterprise Software-as-a-Service environments https://t.co/zDvaWIDEuG

[CONTOS DUNNE @CONTOSDUNNE]

Leader in software #supplychainsecurity @EndorLabs announces strategic #VC investment from @CitiVentures https://t.co/wHsvHj0taa

[CONTOS DUNNE @CONTOSDUNNE]

In a new video, @TechstrongTV interviews Escode, part of @NCCGroupplc about the growing importance of #SoftwareEscrow
https://t.co/wVdSf3Kz31 #resilience

[CONTOS DUNNE @CONTOSDUNNE]

Frost & Sullivan names @AppOmniSecurity 2023 Company of the Year for global SaaS Security Posture Management (#SSPM) industry leadership as the first solution enabling common #security capabilities across an organization’s entire #SaaS ecosystem. https://t.co/6RPoEkGbsk

[CONTOS DUNNE @CONTOSDUNNE]

Creator of the Code and Pipeline Governance Platform @EndorLabs raises $70M in #SeriesA #venturecapital financing to create effective #appsec programs without the #developer productivity tax. https://t.co/WWwAFho4oh