Agile Security

Agile Development and Testing with Security #agilesecurity #security #development #agiletesting #owasp @andifalk

[OWASP® Foundation @owasp]

Got secrets? An API? Tokens? Or a fancy new AI bot?

@OWASP's Project team just dropped the Non-Human Identities Top 10 Project, breaking down the biggest risks + how to secure them. 🔐
https://t.co/wmUD9x9sJO

[Zed Attack Proxy @zaproxy]

Learn all about ZAP Technology Support: https://t.co/DmAXT1R2mb
#zaproxy #appsec #dast

[Spring Security @SpringSecurity]

Spring Security 6.2 goes GA! https://t.co/UrbhVb2FVJ

[IWCON - The Infosec Writeups' Security Conference @IWcon_]

#IWCON2023 is happening on 🗓16 and 17 December 2023, 6 PM IST onwards.

16 amazing 🎙speakers like @vivekramac, @rez0__, @Jhaddix & @psiinon

📣All talks accompanied by 48 hours⌚ of live Q&A and networking.🤝

🎟Book your tickets today: https://t.co/GLdzxpS2Gw

[Simon Bennetts ⚡🇺🇦 @psiinon]

As a pentester, you should not rely on security tools unless you understand how they work.
Understand the underlying principles, then use tools to make your life easier.
#appsec #unpopularOpinion

[Novatec GmbH @novatecgmbh]

In unserem #Podcast #notJustCoding spricht @cschapoehler mit unserem Experten Franco Sollner über den Stellenwert von #Observability in der Entwicklung und gibt spannende Einblicke in die Tool-Landschaft. 📊

Hör’ gerne mal rein: https://t.co/LWqLujcjOl

#ExpertTalk #Technology

[Burp Suite @Burp_Suite]

A Friday roundup of the latest Burp Scanner updates:

Added Status column in Crawl Paths>Outlinks to aid discovery.

Project-wide crawl path sharing boosts scan efficiency.

Perform GraphQL endpoint introspection queries to access query/mutation info.

https://t.co/4dJYezMlm8

[DEF CON @defcon]

All #defcon domains are down while we investigate a suspected DoS attack. Thank you for being patient- we’ll post when we are back online.

[Spring I/O @spring_io]

🪄 All your APIs are mine - Secure them now by @andifalk @ Spring I/O 2023

▶️ Video: https://t.co/gk3Y9Ml1S4

🔗 Slides: https://t.co/57RVlXgOib

🛠️ GitHub Repo:  https://t.co/jiKq6pCOTH

#springio23

[Novatec GmbH @novatecgmbh]

We are part of the @spring_io with insightful presentations around the topics #Cloud, #Container and #Security! 🎉

Look forward to the speeches from our experts @alaisamiM, @barraganc, @andifalk, @jakobyte1024, and @maeddes.

Hasta pronto! 👋

#Developers #Congress #Speakers

[OffSec @offsectraining]

Download our #OSCP ebook - a comprehensive resource for OSCP prep from start to finish: https://t.co/GItBMylfz9

#RoadtoOSCP #offensivesecurity #pen200

[Kushal Das 🇵🇸🇸🇪 @kushaldas]

Wrote about my experience in @secworkshop https://t.co/0pLhxM7oXo @dfett42 @gtrsde @HekletTruse Thank you once again.

[raptor @0xdea]

Automating binary vulnerability discovery with Ghidra and @Semgrep, by yours truly 💚

https://t.co/zZWKvsAaAS

[Jim Manico from Manicode Security @manicode]

It’s time to be clear about the very significant limits of Dependabot.

[Burp Suite @Burp_Suite]

This release provides a couple of bug fixes and an upgrade for Burp's browser.

https://t.co/3biQ7eZAXq

[Tanya Janca | Shehackspurple @shehackspurple]

The @opensecsummit will be hosting monthly mini-summits, and I will be speaking at the next one!!!

If you want to learn all about security champions, join me on March 16th, at 5:500 pm GMT for FREEEE!

Get your tickets below! 🙌
https://t.co/9CZtzFLctl

[OWASP Mobile App Security @OWASP_MAS]

We released v1.3.0 of the OWASP MSTG!

✅ New #PRIVACY chapter 🥷🚀
✅ iOS Bin. protection, debug symbol s
✅ iOS loaded native libs

And more: https://t.co/rRyOJSy1N9

💬 You can use GitHub Discussions for feedback

Thanks to all our contributors and donators!

[Vittorio @vibronet]

The session recordings for @secworkshop are already available on YouTube!
As usual, that was an incredibly productive event. Here's a short thread highlighting some of the sessions I attended/presented at. 1/5

[Andreas Falk @andifalk]

Update fast #Log4Shell #log4j

[Keycloak @keycloak]

Keycloak 15.1.1 is out with an important security fix, we recommend everyone to upgrade as soon as possible.