MyDevSecOps

Inclusive community that educates and enables developers in application security.

Join our mailing list: community:

[AI Security Engineers @aiseceng]

#SecAdvent Day 25 - A big thank you to @jordansissel for opening & closing this excellent blog post series, and all the awesome writers who contributed.

Now learn about his favorite #infosec project from VPN to OAuth2. https://t.co/aZOxpUXDBk

It's a wrap - hope you enjoyed it!

[AI Security Engineers @aiseceng]

#SecAdvent Day 24 - just two more days left... and we've saved the best for last. Check out this excellent post by the one & only @lizrice of @AquaSecTeam on rootless containers.

https://t.co/4cVA6BFlYM

#cloudnative #security

[AI Security Engineers @aiseceng]

#SecAdvent Day 22 - @Odedon of @akeylessio makes a convincing argument about why we should use #SSH certificates instead of SSH keys in this final week of excellent posts.

https://t.co/1T1r6swLtS

#DevSecOps #security #infosec

[AI Security Engineers @aiseceng]

#SecAdvent Day 23 - catch @InfosecVandana's great post on #DevSecOps culture - and how to do it right. (HINT: it takes, dev, ops and security working together...)

https://t.co/gGOLqu09ig

#DevOps #InfoSec #Security

[AI Security Engineers @aiseceng]

#SecAdvent Day 21 - #AI always seems like one of those areas that are more science fiction than reality. This post by @cu_0xff of @DeepCodeAI gives a good overview of what artificial intelligence really is - and what it's doing for the world of #security

https://t.co/UhK8dvPFsf

[Sharone Revah Zitzman 💙🇮🇱 @shar1z]

Great post by @AlyssaM_InfoSec for #SecAdvent on #threatmodeling

Check it out 👇

[codeisgo.com @CodeIsGo_com]

RT @devseccon #SecAdvent Day 2 - super awesome @Wuytski talks about #privacy, glitter and 🦄

https://t.co/WrtPRNkZ6y

On the conflict between privacy and security - and how that doesn't have to be case with good #threatmodeling

#devsecops #shiftleft

[Gareth Rushgrove @garethr]

Wrote a quick post for #secadvent on software bill of materials in general and @CycloneDX_Spec in particular. https://t.co/4236OsDeL6

[Kim Wuyts @Wuytski]

"Threat modeling is extremely valuable in pushing security left, ensuring that it is “baked-in” from the very beginning of the pipeline. It not only helps the security posture of our software, but can actually make our pipelines more efficient."

Read Alyssa's #SecAdvent post:

[Liran Tal @liran_tal]

"Working with ecosystem environment variables allows us to centralize and secure the sensitive information that our project needs to use." Read @josej_pr's post via @devseccon #SecAdvent #NodeJS #AppSec #DevSecOps https://t.co/L86gIfVQ9w

[AI Security Engineers @aiseceng]

#SecAdvent Day 20 - @guypod of @snyksec creating some order in the chaos of common #security titles and what each really focuses on.

https://t.co/HWG31TJRRh

#DevSecOps #securityengineering #productsecurity

[AI Security Engineers @aiseceng]

#SecAdvent Day 17 - what an exceptional and useful deep dive on #Kubernetes security by @magnologan of @TrendMicro

https://t.co/EQGS08j0az

#cloudnative #security

[AI Security Engineers @aiseceng]

#SecAdvent Day 19 - the awesome @datadoghq team gives us some in-depth insights on file integrity monitoring with #eBPF

https://t.co/s25IUdYteI

By Sylvain Boubeau @s_afchain
& @gui774ume

#DevSecOps #Security

[AI Security Engineers @aiseceng]

#SecAdvent Day 16 - @jeanqasaur of @AkitaSoftware talks about how the API Graph can bridge the gap between developers and security - and there's also a super fun GIF.

We always love a good GIF.

https://t.co/sBywwAxxf8

#AppSec #DevSecOps

[AI Security Engineers @aiseceng]

#SecAdvent Day 14 - one thing that is certainly important when it comes to #security is at least maintaining a sense of humor about it. Check out this excellent post by Natalie Godec of @babylonhealth on cloud function security.

https://t.co/CsXFHb11By

#serverless #cloudnative

[AI Security Engineers @aiseceng]

#SecAdvent Day 13 - and now for something a little different.

@SecurityPony reminds us of the core principles behind doing #security right - through her poetic and philosophical post.

You won't want to miss this one
https://t.co/3IXAAMZpEK

#securityculture

[AI Security Engineers @aiseceng]

#SecAdvent Day 11 - Security isn't something you can put on the backburner 11 months out of the year, it's a year-round effort. Read @mmadou's post of @SecCodeWarrior post and learn how to make this happen in your organization.

https://t.co/O53T0OBRLC

#securityculture

[Sharone Revah Zitzman 💙🇮🇱 @shar1z]

Don't forget to join us in just a couple minutes with @phennex and the team from @lunarbank alongside @mattj_io to hear about the #Prometheus exporter for @snyksec

https://t.co/tkf9wz3kXV

#cloudnative #opensource

[AI Security Engineers @aiseceng]

#SecAdvent Day 9 - When launching a new startup #security almost always comes as an afterthought.

@rotembar of @appsflyerdev takes us on a journey of real-world hyper-growth companies & managing security at scale.

https://t.co/H1vLa73h1A

#devsecops #appsec

[AI Security Engineers @aiseceng]

[DevSecCon] Reminder - Event Starting in an Hour! There's still time to join us!
https://t.co/6uPj7SE7WS

@devseccon #devsecops #cloudnative #opensource