#devSec - Twitter Hashtag

about 23 hours ago

New one-click attack in VS Code can steal your GitHub token. The good news: it only takes one click. The bad news: your devs click everything. Happy Friday, IT fam. #DevSec

0

11

AI | Xplore @TumatiKiran

1 day ago

ClaudeSec drops free AI that scans code for bugs—devs, lock down security now 🔥 #AI #DevSec 📰 Source: https://t.co/itDvTHvYh0 👉 Follow for daily AI & tech news!

0

1

0

19

JFrog

@jfrog

3 days ago

Mumbai, the Frogs are coming 🐸 Meet the JFrog team at the 3rd India #DevSec Show 2026, one of India's premier gatherings for #DevSecOps and #security engineering leaders. Whether you want to see a live demo, talk #supplychainsecurity, or simply connect with our team, we'd love to have a conversation. 📅 11 June 2026 | The Lalit, Mumbai 📩 Book a meeting with us: https://t.co/JwnguKumM8 #IndiaDevSecShow2026 #Mumbai

jfrog's tweet photo. Mumbai, the Frogs are coming 🐸

Meet the JFrog team at the 3rd India #DevSec Show 2026, one of India's premier gatherings for #DevSecOps and #security engineering leaders.

Whether you want to see a live demo, talk #supplychainsecurity, or simply connect with our team, we'd love to have a conversation.

📅 11 June 2026 | The Lalit, Mumbai

📩 Book a meeting with us: https://t.co/JwnguKumM8

#IndiaDevSecShow2026 #Mumbai

0

89

Decryption Digest ® @DecryptionDigst

16 days ago

160 npm packages. Developer credentials on the dark web. Rotate AWS + GitHub tokens NOW if you used @tanstack on May 11 (19:20-19:42 UTC). https://t.co/hi6Gy04edk #CyberSecurity #npm #SupplyChain #DarkWeb #DevSec #GitHub

1

3

0

125

Archange Shadow

@Archange_Shadow

about 1 month ago

🚨 BREAKING: Bitwarden CLI 2026.4.0 compromised via GitHub Actions in Checkmarx supply chain attack. Malicious package harvested credentials before removal. No end-user vault data accessed. #BreakingNews #CyberSecurity #SupplyChainAttack #DevSec

Archange_Shadow's tweet photo. 🚨 BREAKING: Bitwarden CLI 2026.4.0 compromised via GitHub Actions in Checkmarx supply chain attack. Malicious package harvested credentials before removal. No end-user vault data accessed. #BreakingNews #CyberSecurity #SupplyChainAttack #DevSec https://t.co/T672HWW3hG

0

2

0

184

Gray Hats @the_yellow_fall

about 2 months ago

Attackers are impersonating Linux leaders on Slack to drop malware via fake Google Workspace links. Protect your dev environment—verify before acting! #SocialEngineering #SlackAttack #DevSec #CyberSecurity #InfoSec #LinuxFoundation https://t.co/BZ4nFRgtf4

the_yellow_fall's tweet photo. Attackers are impersonating Linux leaders on Slack to drop malware via fake Google Workspace links. Protect your dev environment—verify before acting!

#SocialEngineering #SlackAttack #DevSec #CyberSecurity #InfoSec #LinuxFoundation
https://t.co/BZ4nFRgtf4 https://t.co/blLbVxiuLY

0

11

2

919

Gray Hats @the_yellow_fall

2 months ago

Fake npm package "gemini-ai-checker" linked to North Korea targets AI dev tools like Cursor and Claude to steal keys and source code. Is your environment safe? #GeminiAI #npm #MalwareAlert #NorthKorea #CyberSecurity2026 #Infosec #DevSec https://t.co/aky4EQzgAX

the_yellow_fall's tweet photo. Fake npm package "gemini-ai-checker" linked to North Korea targets AI dev tools like Cursor and Claude to steal keys and source code. Is your environment safe?

#GeminiAI #npm #MalwareAlert #NorthKorea #CyberSecurity2026 #Infosec #DevSec
https://t.co/aky4EQzgAX https://t.co/TrUsyZ6cC6

0

2

1

343

Paul M. Roe

@ZadienLabs

2 months ago

I did a #DataDump of my #RHEA_Crypt software while running encryption tasks. I would be delighted if any #DevSec Pro's tried to harvest information or reverse engineer it.

0

2

0

28

CyberSecurity88 @CSec88

3 months ago

Hot take: AI coding tools are a gift to attackers. 10× more vulnerabilities shipped. 45% vuln rate. 97.5% of orgs exposed. The bottleneck was never writing code. It was reviewing it. Nobody fixed that part. ⚠️ #DevSec #CyberSecurity

CSec88's tweet photo. Hot take: AI coding tools are a gift to attackers.
10× more vulnerabilities shipped. 45% vuln rate. 97.5% of orgs exposed.
The bottleneck was never writing code. It was reviewing it.
Nobody fixed that part. ⚠️
#DevSec #CyberSecurity https://t.co/9jpr28dQfY

0

1

0

42

Gray Hats @the_yellow_fall

3 months ago

Cybercriminals are targeting OpenClaw developers with a fake $5,000 CLAW token airdrop. Learn how this GitHub-based wallet drainer works and stay protected. #OpenClaw #CryptoScam #GitHub #Phishing2026 #Web3Security #CLAWToken #DevSec #BlockchainSecurity https://t.co/kxARyh2NZq

the_yellow_fall's tweet photo. Cybercriminals are targeting OpenClaw developers with a fake $5,000 CLAW token airdrop. Learn how this GitHub-based wallet drainer works and stay protected.

#OpenClaw #CryptoScam #GitHub #Phishing2026 #Web3Security #CLAWToken #DevSec #BlockchainSecurity
https://t.co/kxARyh2NZq https://t.co/8A6NMDgKME

1

4

3

1

572

Grafana @grafana

3 months ago

🤝 Time to bridge the #DevSec divide. We've partnered with @MiggoSecurity on a joint solution that builds on production telemetry in Grafana Cloud to deliver evidence-based runtime security. https://t.co/I2cBZvCKpj

0

4

1

0

917

White Knight Labs @WKL_cyber

5 months ago

The future of offensive security belongs to those who can build their own solutions rather than relying on existing frameworks. Build your foundation at https://t.co/wMr2b48dpe #DevSec #CodingSkills #OffensiveEngineer

WKL_cyber's tweet photo. The future of offensive security belongs to those who can build their own solutions rather than relying on existing frameworks. Build your foundation at https://t.co/wMr2b48dpe #DevSec #CodingSkills #OffensiveEngineer https://t.co/BQHy8cxQci

0

2

0

83

Kloint Inc @KlointI44061

6 months ago

🚨 VSCode Security Alert If task.allowAutomaticTasks is enabled, malicious code can auto-execute when you open a project folder. Check your settings NOW! https://t.co/eQAfapUXDo #VSCode #CyberSecurity #DevSec #InfoSec #Lazarus #DPRK

0

1

0

29

Akash Ranjan

@akashbitm787

9 months ago

@P3b7_ For Developers: Audit your entire dependency tree Lock & verify package versions Watch for suspicious package updates Treat every sub-dependency as a potential vector Your code isn’t always your weakest link! #DevSec #npm

0

2

0

7

David Akaluzia @x_occupythemind

9 months ago

Woe unto you if you coded something similar because you've just introduced a low severity business logic vulnerability. Can you spot it? else, Check comment 👇🏻👇🏻 #CyberSecurity #DevSec #BugBounty #WebSecurity #SecureCoding

x_occupythemind's tweet photo. Woe unto you if you coded something similar because you've just introduced a low severity business logic vulnerability.

Can you spot it?
else, Check comment 👇🏻👇🏻

#CyberSecurity #DevSec #BugBounty #WebSecurity #SecureCoding https://t.co/KGNs5LlL2D

3

2

0

56

Auth0 @auth0

10 months ago

Think JWTs are always the right choice? 🤔 In this myth-busting post, #Auth0’s @andychiare debunks 5 common JWT misconceptions: 🔑 #JWT ≠ access token 👀 Readable ≠ insecure ✅ Signed ≠ safe 🔐 JWT ≠ session 🔄 Revocation is hard 🔗 https://t.co/MLU8HAfm2M #OAuth2 #DevSec

auth0's tweet photo. Think JWTs are always the right choice? 🤔
In this myth-busting post, #Auth0’s @andychiare debunks 5 common JWT misconceptions:

🔑 #JWT ≠ access token
👀 Readable ≠ insecure
✅ Signed ≠ safe
🔐 JWT ≠ session
🔄 Revocation is hard
🔗 https://t.co/MLU8HAfm2M

#OAuth2 #DevSec https://t.co/jqcY4G01w2

0

3

1

734

C Thomas (Tom) Smith @ctsmithiii

10 months ago

https://t.co/dkNODlg1dQ @Wallarm @d0znpp #AI #CyberSecurity #BlackHat2025 #DevSec #APIAttacks #ThreatIntelligence #InfoSec

0

2

1

219

Finisher

@aj_success

11 months ago

Want a clean Docker setup for testing projects safely? Reply “secure dev” and I’ll share it. Protect your machine. Protect your data. Protect your keys. Protect yourself. 🛡️💻 #DevSec #Web3 #Nodejs #npm #CareerTips

0

4

0

34

24 🥷🏽 @twenty4_io

12 months ago

Guy at a tech meetup in Lagos: “SSL is a joke, I know the guy who built the backdoor.” Developer next to him: “ofcourse. It’s now a dependency in node_modules.” #DevSec jokes 😜

24 🥷🏽 @twenty4_io

12 months ago

I have a joke 🤨

4

0

446

0

2

0

151