Top Tweets for #OpenSourceSecurity
Every library, VS Code extension, GitHub repo, or AI skill your developers pull in is third-party code and can carry malware.
Listen to Paul McCarty and Jenn Gile on the Future of Threat Intelligence: https://t.co/at1EBedGsH
#SoftwareSupplyChain #OpenSourceSecurity
Technical details and PoC exploit code for the critical Penpot file takeover flaw are now public. Upgrade to version 2.18.0 now.
#Penpot #OpenSourceSecurity #GHSA8qqwwm5845v7 #Cybersecurity #InfoSec
https://t.co/00hymBdw5s
Red Hat & IBM launch Project Lightwell, a $5B effort with 20K engineers to secure open source.
#opensourcesecurity #softwaresupplychain #devsecops #vulnerabilitymanagement
Red Hat's Project Lightwell and a new event spotlight platform engineers' vital role in securing the software supply chain via integrated security.
#opensourcesecurity #supplychainsecurity #platformengineering #devsecops
Jenn Gile warns that malware spreads via trusted maintainers' accounts.
Hear more on the Future of Threat Intelligence podcast!
https://t.co/at1EBedGsH
#ThreatIntelligence #SoftwareSupplyChain #OpenSourceSecurity #AppSec
Opening and Closing Remarks
🎤 Vandana Verma Sehgal @infosecvandana
🗓 Sep 22 | 3:30 PM–3:45 PM PDT
📺 https://t.co/hoSzJVdkbv
#OWASP25 #OWASPCommunity #OpenSourceSecurity #AppSec
Local Windows security companion for Defender evidence, fixed scans, post-change monitoring, deterministic checks, with encrypted quarantine. #ZSEC #OpenSourceSecurity
Scan Malware is now a source for the excellent tool subfinder by @pdiscoveryio. Subfinder is an open-source passive subdomain enumeration tool
#CyberSecurity #OSINT #SubdomainEnumeration #AttackSurfaceManagement #BugBounty #OpenSourceSecurity #RedTeaming #redteam #pentesting
@scanmalware is now a source for the excellent tool subfinder by @pdiscoveryio. Subfinder is an open-source passive subdomain enumeration tool
#CyberSecurity #OSINT #SubdomainEnumeration #AttackSurfaceManagement #BugBounty #OpenSourceSecurity #RedTeaming #redteam #pentesting #penetrationtest
Responsible AI starts with accountability, and accountability starts with audits.
#opensourcesecurity #aiaudit #ai
Nobody rewrites a working app on someone else's schedule.
React 16 and 17 no longer get upstream security patches. NES for React ships supported drop-in replacements with ongoing CVE fixes, so your app stays secured and compliant. 🔒
#React #OpenSourceSecurity #AppSec
New Sleeper Gem Malware Campaign Puts Ruby Developers at Risk
Read more: https://t.co/fvda74ATBJ
#CyberSecurity #SleeperGem #RubyGems #Ruby #Malware #SupplyChainAttack #DeveloperSecurity #OpenSourceSecurity #Hacking #InfoSec #SoftwareSecurity #DataBreach #ThreatIntelligence
How do you secure software you can’t easily update?
At #DEFCON34, Roee Idan’s talk, “Security Analysis of Open-Source Software Used in Onboard Satellite Systems,” examines how open-source adoption is reshaping risk in satellite operations.
#OpenSourceSecurity
Nearly 300 GitHub repositories posed as legitimate software to spread malware - trust in open source must be earned, not assumed. Verify before you clone. 📦⚠️ #OpenSourceSecurity #SupplyChainAttack
https://t.co/q6asSf0cOj
AI Bug Hunting: What It Means for Solo Devs https://t.co/jAdvjEd8A9 #AIBugHunting #IndieDev #OpenSourceSecurity #VulnerabilityDetection #CodeSafety
Securing the Software Supply Chain: The Growing Role of Software Composition Analysis Tools
https://t.co/ZCBh0LdeFw
https://t.co/7yeZC2payb
#SoftwareCompositionAnalysis #ApplicationSecurity
#SoftwareSupplyChain #OpenSourceSecurity
The FreeBSD Project fixes seven vulnerabilities, including a zero-interaction Wi-Fi shell expansion RCE (CVE-2026-45255) and severe kernel leaks.
#FreeBSD #VulnerabilityAlert #SysAdmin #KernelExploit #WiFiRCE #InfoSec #CyberSecurity #OpenSourceSecurity
https://t.co/5dfMkoCohv
Malicious packages grew 156% YoY. Your AI coding assistant is pulling from those same registries right now. A plugin for your AI tool doesn't fix that. Governing what it resolves to does.
Read more: https://t.co/qjqbKb4BAl
#opensourcesecurity #softwaresupplychain #AIcode #CISO
Researchers discovered 36 malicious npm packages disguised as Strapi CMS plugins.
https://t.co/3H8rTy0yZe
#CyberSecurity #npm #SupplyChainAttack #Strapi #Malware #Redis #PostgreSQL #InfoSec #OpenSourceSecurity #DevSecOps
Last Seen Hashtags on Sotwe
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.3M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.9M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.4M followers
Kim Kardashian
@kimkardashian
70.8M followers
YouTube
@youtube
68.7M followers
Neymar Jr
@neymarjr
66.4M followers
Bill Gates
@billgates
65.2M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.6M followers