David

[Absolute AppSec @absoluteappsec]

Heads up, everyone, @absoluteappsec is shifting times this week! Join us Thursday at 2:30 EDT. @DarrenPMeyer from @EndorLabs is coming on the show to discuss Endor's brand new Dependency Management 2024 report. Set your calendars and join us here: https://t.co/ueRHakLwy4

[David @appsecuk]

https://t.co/iLq8uRhoch

[Endor Labs @EndorLabs]

🚀 Today we're at Supply Chain Cyber Security Summit in Madrid! 🇪🇸 Join us at the Endor Labs booth for insights, networking, and maybe even some surprise swag! See you there! 👋 #SupplyChainSecurity #CyberSecurity https://t.co/DUKF0Lfpd1

[Endor Labs @EndorLabs]

Are you interested in code traceability, admission control, and provenance?

Then our next webinar might be for you!

Learn more and register at https://t.co/jULqzTCPGK

[Endor Labs @EndorLabs]

We're excited to announce our latest product: Endor Labs CI/CD

🔎 CI/CD Discovery
🕵️ Repository security posture management (RSPM)
📜 Build Integrity Verification

Read more >>> https://t.co/1aYCNmsCQt

#security

[Endor Labs @EndorLabs]

“SCA with 80% less noise? I’d love to see that!” Now you can, free for 30 days: https://t.co/rP3BTaEstC
#appsec #cybersecurity #sca #sbom #compliance #devsecops

[Nathe Britton @nathebritton]

Evening everyone. On May 4th OWASP Brum returns for an in-person event to discuss going #devsecops in #gitlab and debunking myths around #IAST and #RASP

Be great to see the local tech community at this event. Will share more deta…https://t.co/GYoKkJxOhq https://t.co/lCsZPXRQTQ

[Grant Ongers (https://defcon.social/@rewtd) @rewtd]

Yes! @LMaccherone and I are hosting a #DevOps transformation workshop (the Sec is just doing it right) and we’ll be #ShiftSmart.

It’s in London on Tuesday 21st of March. Limited spaces though so strike while the iron is hot. As @planetlevel mentioned I…https://t.co/aO4Nr0JmrK

[David @appsecuk]

@Outlook your exclusive inbox junk filters are broken 🎣🎣🎣

[Contrast Security @contrastsec]

Recently, our Contrast Labs research team came across an article discussing a Web Application Firewall (WAF) bypass. Here’s our take on the situation and how you can use this as an opportunity to improve your security posture. https://t.co/kq6OBOimXJ

[Contrast Security @contrastsec]

We're excited to announce our new Open Source Software Sponsorship Program today which will financially support the #developers of open source projects to help augment proprietary code developed in-house and to accelerate time-to-market. Learn more here: https://t.co/NaxkMI3d0S

[David @appsecuk]

Runtime SCA matters.

[David Lindner @golfhackerdave]

CVE-2022-42889: Our data shows - 21% of Java applications package commons-text; 11% of Java applications package a vulnerable version of commons-text...and the kicker...exactly ZERO of the applications are using the vulnerable class. #themoreyouknow #cvssisbroken #fud

[David @appsecuk]

CVE-2022-42889: Don’t panic, do patch | Contrast Security https://t.co/tS8x0cshmX

[contrast-labs @_contrast_labs]

A Contrast Python Agent Developer used Contrast to discover a vulnerability in the wild, read more about it here!

https://t.co/6UcYEDvSQA

[David @appsecuk]

Log4Shell Defenses: Java Agents in Conversation with Contrast Security’s Arshan Dabirsiaghi https://t.co/PehmxHVk1R

[Contrast Security @contrastsec]

Contrast is releasing SafeLog4j, a free and open-source, general purpose tool that can detect/verify vulnerable log4j applications and protect them. Learn more: https://t.co/u6L4KqwfUB

#log4j #zeroday #cybersecurity

[David @appsecuk]

Using .NET 6 already? We got you! https://t.co/5XnCWuUNRd

[David @appsecuk]

Why Less Is More for Static Application Scanning - Surag Patel https://t.co/ufAp3bR6h8 #AppSec

[Adam Schaal @clevernyyyy]

This is really going to be a fun talk. Join @mattaustin and I as we talk about supply chains from soup to nuts. Plus we'll throw in a few real-life examples we've identified.

Our webinar is on October 4th, sign up today!

https://t.co/IxuVgWM9Rz

[David @appsecuk]

A peep at how sensors allow us to constantly refine our #appsec rules for the highest "accuracy": https://t.co/DyMoPyCnYA #appsec