Phoenix Security - Appsec Phoenix - Cloud Security

Phoenix Security Platform
From code to cloud, prioritize vulnerabilities with contextual-driven risk quantification

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

A new @appsecphx video intro...we never thought that making a video would have taken so many people! it was a journey! 😎😁

https://t.co/iUI2SsFIvu

#cyber #cybersecurity #app #appsec #cloud #vulnerabilities #priorities #assessment #automation #orchestration #applicaitonsecurity

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Overcoming LLM limitations in vulnerability research. This approach integrates with Brave for efficient web searches, unlocking new levels of security analysis. #Cybersecurity #AI #LLMs

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Francesco Cipollone reveals a tool for quick vulnerability understanding. Get automatic summaries and snippets from this free, open-source project. #OpenSource #Cybersecurity #DevTools

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Full analysis + IOCs: https://t.co/d9H5nz8H6L

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

⚠️ SANDWORM_MODE is an active npm supply chain worm targeting DevSecOps and AI toolchains.

19 malicious packages.
CI poisoning.
AI MCP injection.
Credential exfiltration on import.

If installed, assume breach.

#DevSecOps #AppSec #SupplyChainSecurity #npm

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

#AppSec #CyberSecurity #ASPM #DevSecOps

Read more and download the full report here:
👉 https://t.co/fkF8rpBsQl

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Phoenix Security recognized as a Management Leader in the 2026 Latio AppSec Report.

Enterprise vuln programs break when ownership, reachability, and remediation aren’t aligned.

Attribution.
Tool-agnostic reachability.
AI-driven remediation.

From ownership → executable fix.

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Dashboards don’t reduce risk.
Shipping does.

https://t.co/Q36xkR6zeU

#AppSec #DevSecOps #CyberSecurity

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Security teams don’t have a visibility problem.

They have a remediation throughput problem.

40,000 vulnerabilities → 12 fixes that matter.

Latest breakdown:
• Reachable + exploitable prioritization
• Container lineage tracing
• Minimum-impact upgrades
• Dual SLA clocks

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Together, we raised £556,414 for NSPCC.
Proof that when the security community comes together, real impact happens.

Proud to be part of this. See you next year. 🖤🔥

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

White Hat Ball 2026 was something special.

This year, Phoenix Security joined not just as guests — but as sponsors, hosting a table and celebrating an incredible community.

#WhiteHatBall #PhoenixSecurity #CyberSecurity #Community #GivingBack

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Proud to sponsor White Hat Ball 2026 🎩

📍 London
📅 Jan 30, 2026
🖤 Black Tie
💙 Supporting Childline (NSPCC)

Cybersecurity is about protecting people — and community matters.

See you there.

#WhiteHatBall #PhoenixSecurity #InfoSec #CyberSecurityCommunity #NSPCC

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

We’ll be at these events showing how Phoenix Security | ASPM helps security teams focus on what actually matters in production — not just dashboards.

👉 Book a live demo here: https://t.co/3xbu9FGExb

hashtag#CTEM hashtag#AppSec hashtag#VulnManagement hashtag#SecurityTeams

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Join Phoenix in 2026 🚀
We’ll be at VulnCon, OWASP EU & Global, LASCON, Black Hat USA and more.

Let’s talk real vulnerability exposure, remediation, and security that works in practice.

See you there 👋
#AppSec #CyberSecurity #InfoSec #SecurityCommunity

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Full technical breakdown 👇
https://t.co/hQy6RD1L0B

#Sha1Hulud #SupplyChainSecurity #AppSec #DevSecOps #npm

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

🚨 Sha1-Hulud 3.0 isn’t a CVE — it’s install-time execution on trust.

Runs inside dev machines & CI
Steals npm/GitHub tokens
Spreads using your own pipelines

One package is enough.

#Sha1Hulud #SupplyChainSecurity #AppSec #DevSecOps #npm

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

87k+ exposed instances. Public PoC. Silent exploitation.
👉 Read the full analysis here:
https://t.co/yAhCNEN1ab

#PhoenixSecurity #MongoBleed #SecurityResearch #ExposureManagement

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

MongoDB vulnerability that leaks memory before auth — and behaves like RCE without executing code.

MongoBleed (CVE-2025-14847) is a trust-boundary failure in zlib compression that turns memory disclosure into full compromise via stolen credentials.

#MongoBleed #PhoenixSecurity

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Curious what we’ve been building this year?

From AI security agents to new platform features focused on context, prioritization, and real remediation outcomes — we’ve been busy.

👉 See the platform in action: https://t.co/3xbu9FGExb

#VulnerabilityManagement #SecurityTeams

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Wrapping up 2025 with momentum 🎉

‣ 2→3× ARR
‣ 200% growth
‣ New teams, new locations
‣ Trusted by top global security teams

Onward to 2026 🚀
#CyberSecurity #SaaS #PhoenixSecurity #CTEM

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

87,000+ MongoDB instances are exposed.
Public PoC exists.

This isn’t RCE — but it’s how attackers get there.

Full technical breakdown 👇
https://t.co/yAhCNEN1ab

[Phoenix Security - Appsec Phoenix - Cloud Security @sec_phoenix]

Your MongoDB might be leaking memory — silently.

MongoBleed (CVE-2025-14847) allows unauthenticated attackers to extract heap memory over the network.
No crash. No logs. Just data exposure.

#MongoBleed #CVE202514847 #MongoDB #AppSec #DevSecOps