Semmle

Semmle has joined GitHub.
Finding zero-days and automating variant analysis | Creators of CodeQL and @LGTM

[Semmle @Semmle]

Big news! Semmle is joining the @Github team to bring community-powered security analysis to millions of developers. Learn more from Semmle CEO @oegerikus here: https://t.co/iDN5RrY8J1

[GitHub Security Lab @GHSecurityLab]

ICYMI: We're running a CTF until December 31st. Write a CodeQL query to find a specific class of DOM-based XSS vulns. The 2 best submissions will win Nintendo Switches, and 10 additional entries will receive coupons that can be used for GitHub Swag.

https://t.co/fqliovIXP2

[GitHub Security Lab @GHSecurityLab]

We've just launched a new slack workspace for anyone interested in being part of the mission to secure the open source software we all depend on. https://t.co/DH4ICBskUF

If you'd like to receive an invitation to join the workspace, send us a DM with your email address.

[GitHub Security Lab @GHSecurityLab]

Yesterday we had our first GitHub Security Meetup, with ligthning talks by @kevin_backhouse @Nosoynadiemas @agustingianni and Abishek Arya (Google). But also with exciting discussions with security folks. Thanks to all attendees and others: stay tuned for the next one in January.

[GitHub Security Lab @GHSecurityLab]

Learn how our security researcher @nicowaisman found wireless vulnerabilities in the Linux Kernel, and variants, thanks to CodeQL: https://t.co/eKE0VPPna5

[GitHub Security Lab @GHSecurityLab]

Want to challenge your vulnerability hunting skills? Try our latest Capture The Flag and discover XSS-unsafe jQuery plugins: https://t.co/fqliovIXP2

[GitHub Security Lab @GHSecurityLab]

Check out the GitHub Security Lab bounty program! https://t.co/v4zfP0oSco. Write a query, find bugs, get rewarded.

[Semmle @Semmle]

Welcome to the GitHub Security Lab @GHSecurityLab! Join us and contribute to secure the world's code! Visit https://t.co/5xpshQ0Aot

[Semmle @Semmle]

Want to learn more about QL and how you can use it to find variants of vulnerabilities in your code? Join us for our Semmle User Group this Wednesday night at Mozilla. See the event details for more information.

https://t.co/5q6F0x2o2V

[Semmle @Semmle]

Semmle security researcher @kevin_backhouse discloses another integer overflow vulnerability in libssh2, which could potentially lead to information disclosure https://t.co/nMHic8zpko

[Semmle @Semmle]

Wondering how @fjserna found 13 CVEs in U-boot? Watch his #BlackHat presentation "Using One Exploitable Zero-Day to Eradicate an Entire Class of Vulnerabilities" on-demand: https://t.co/OZ3gUOaLze

[Semmle @Semmle]

Is your code VUCA (Volatile, Uncertain, Complex, Ambiguous)? Let's see how the OODA Loops theory inspires our code review practices. https://t.co/vjCnO9vkEc

[Fermin J. Serna @fjserna]

Join us today for some @Semmle fun and examples of finding vulnerabilities! Let's democratize security

[Semmle @Semmle]

In this video, @kevin_backhouse discusses the libssh2 integer overflows and out-of-bounds read he recently discovered. See how it can be triggered by connecting to a malicious ssh server https://t.co/yV8F1AP8pU

[Semmle @Semmle]

Imagine if your dev team could have automated code review powered by security expertise? Tomorrow, join @oegerikus and @fjserna to see how community-powered security can become a part of the developer’s workflow. https://t.co/iUgx8IY9oi

[Nico Waisman @nicowaisman]

Thanks for everyone that attend my QL workshop at #Ekoparty!
Here is some of the material covered during the workshop:
https://t.co/Z6kHUtk6tP

[Semmle @Semmle]

Are unit tests really effective in preventing bugs? We analyzed over 50k LGTM projects in Java, Python, and Javascript to find out. https://t.co/pZAwZs6htu

[LGTM @LGTM]

Now in beta! LGTM is supporting Golang and we have some projects that you can explore. Check them out and suggest others you'd like us to analyze. https://t.co/wTgvI4iPuU

[Semmle @Semmle]

.@mmolgtm takes a deep dive into past Android #deserialization vulnerabilities that exploited C++ pointers wrapped inside Java objects. https://t.co/QaIVdCbEve

[Ekoparty | Hacking everything @ekoparty]

Un honor tener a @nicowaisman en la eko, esta vez con su workshop "Cazando bugs con redes de pesca". Aprendimos cómo modelar bugs para encontrar vulnerabilidades 🎣
.
Such an honor to have @nicowaisman at ekoparty, this time with his workshop "Hunting bugs with fishing nets" 🎣

[Semmle @Semmle]

Imagine if your dev team could have automated code review powered by security expertise? Join @oegerikus and @fjserna as they share their vision for community-powered secure development: https://t.co/6ZmmBJvVcH