#securecode — Public Fediverse posts

🚀 Oh joy, yet another #release from the astral realms of GitHub! 🎩✨ With "uv 0.12.0," your code will be so secure, even your secrets will remain secrets... from you. 🤖🔒 Let's just hope the AI knows what it's doing because apparently, no one else does. 🙃
https://github.com/astral-sh/uv/releases/tag/0.12.0 #GitHub #uv0.12.0 #SecureCode #AIUpdates #SecretsBeware #HackerNews #ngated

🚀 Oh joy, yet another #release from the astral realms of GitHub! 🎩✨ With "uv 0.12.0," your code will be so secure, even your secrets will remain secrets... from you. 🤖🔒 Let's just hope the AI knows what it's doing because apparently, no one else does. 🙃
https://github.com/astral-sh/uv/releases/tag/0.12.0 #GitHub #uv0.12.0 #SecureCode #AIUpdates #SecretsBeware #HackerNews #ngated

RE: https://infosec.exchange/@SheHacksPurple/116847520079170601

Join @SheHacksPurple and @insiderphd for a book stream about #securecoding !

You're a developer that want to improve your code? This book stream is for you (obviously, the book too)

#infosec #code #dev #securecode #softwaredevelopment #development #developer

RE: https://infosec.exchange/@SheHacksPurple/116847520079170601

Join @SheHacksPurple and @insiderphd for a book stream about #securecoding !

You're a developer that want to improve your code? This book stream is for you (obviously, the book too)

#infosec #code #dev #securecode #softwaredevelopment #development #developer

The Real Problem Isn't That #AI Can't Write #SecureCode - It's That It's Expanding #AttackSurface

https://thehackernews.com/expert-insights/2026/03/the-real-problem-isnt-that-ai-cant.html

The Real Problem Isn't That #AI Can't Write #SecureCode - It's That It's Expanding #AttackSurface

https://thehackernews.com/expert-insights/2026/03/the-real-problem-isnt-that-ai-cant.html

The story of Propolice, the OpenBSD stack protector https://www.undeadly.org/cgi?action=article;sid=20251212094310 #openbsd #propolice #stackprotection #security #securecode #exploitmitigation #secureprogramming

The story of Propolice, the OpenBSD stack protector https://www.undeadly.org/cgi?action=article;sid=20251212094310 #openbsd #propolice #stackprotection #security #securecode #exploitmitigation #secureprogramming

OpenAI’s New Model Just Got Much Better At Writing More Secure Code https://www.forbes.com/sites/the-wiretap/2025/11/18/openais-new-model-just-got-much-better-at-writing-more-secure-code/ #cybersecurity #ChatGPT #coding #codereview #securecode

The ongoing battle between shipping code fast and shipping it securely is a real challenge. Here are some strategies for AppSec teams to manage the risk. https://www.reversinglabs.com/blog/deadlines-vs-secure-code #SecureCode #AppSec #SoftwareDevelopment #DevSecOps #CyberRisk

Secondary Context Path Traversal in Omnissa Workspace ONE UEM:

https://slcyber.io/assetnote-security-research-center/secondary-context-path-traversal-in-omnissa-workspace-one-uem/

#cybersecurity #vulnerability #hacking #securecode #exploitation

Secondary Context Path Traversal in Omnissa Workspace ONE UEM:

https://slcyber.io/assetnote-security-research-center/secondary-context-path-traversal-in-omnissa-workspace-one-uem/

#cybersecurity #vulnerability #hacking #securecode #exploitation

🚀Λοιπόν δοκίμασα το Lumo της Proton και έχω να πω ότι είναι εξαιρετικό και στην ιδιωτικότητα της συνομιλίας και στην παραγωγή ασφαλούς κώδικα! Μπράβο Proton και Lumo ίσως γίνετε το αγαπημένο μου toolbox του μήνα! @asklumo @asklumo.proton.me‬ #LumoAI #PrivacyFirst #SecureCode

Join Tanya Janca on November 5 for a 1-day, hands-on training session at OWASP Global AppSec USA 2025 and learn how to design and harden APIs the right way.

Secure your training spot now: https://owasp.glueup.com/event/131624/register/

#GlobalAppSecUS #Cybersecurity #CyberSec #ThreatModeling #DevSecOps #AI #Hacking #WashingtonDC #AppSec #APISecurity #SecureCode #API

Join Tanya Janca on November 5 for a 1-day, hands-on training session at OWASP Global AppSec USA 2025 and learn how to design and harden APIs the right way.

Secure your training spot now: https://owasp.glueup.com/event/131624/register/

#GlobalAppSecUS #Cybersecurity #CyberSec #ThreatModeling #DevSecOps #AI #Hacking #WashingtonDC #AppSec #APISecurity #SecureCode #API

🚨 Ny spännande rapport från företaget Wiz!

"State of Code Security 2025" ger en ny inblick i hur dagens kod påverkar molnsäkerheten samt vilka sårbarheter som just nu är mest kritiska. Missa inte insikterna 🔍 💻

https://kryptera.se/wiz-rapport-state-of-code-security-2025/

#cybersecurity #securecode #molnsäkerhet

🚨 Ny spännande rapport från företaget Wiz!

"State of Code Security 2025" ger en ny inblick i hur dagens kod påverkar molnsäkerheten samt vilka sårbarheter som just nu är mest kritiska. Missa inte insikterna 🔍 💻

https://kryptera.se/wiz-rapport-state-of-code-security-2025/

#cybersecurity #securecode #molnsäkerhet

You write C++ code?
You have an opinion about C++?

Go, and watch this video! ☝️

WATCH IT!

#programming #cpp #securecode #moderncode #peopleproblem

@c_discussions

You write C++ code?
You have an opinion about C++?

Go, and watch this video! ☝️

WATCH IT!

#programming #cpp #securecode #moderncode #peopleproblem

@c_discussions

The new #OpenBSD 7.7 https://www.openbsd.org/77.html release is out, now go install the thing!

Then you can prepare for the daily tasks by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html, and watch for updates over on the OpenBSD Journal https://undeadly.org

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode (again for those in inconvenient time zones)

The new #OpenBSD 7.7 https://www.openbsd.org/77.html release is out, now go install the thing!

Then you can prepare for the daily tasks by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html, and watch for updates over on the OpenBSD Journal https://undeadly.org

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode (again for those in inconvenient time zones)

OpenBSD 7.7 Released https://www.undeadly.org/cgi?action=article;sid=20250427183032 #openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

(again for those in inconvenient time zones)

OpenBSD 7.7 Released https://www.undeadly.org/cgi?action=article;sid=20250427183032 #openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

(again for those in inconvenient time zones)

The #openbsd 7.7 release https://www.openbsd.org/77.html is *really* close now. You can prepare by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html, and watch for updates over on the OpenBSD Journal https://undeadly.org

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

The #openbsd 7.7 release https://www.openbsd.org/77.html is *really* close now. You can prepare by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html, and watch for updates over on the OpenBSD Journal https://undeadly.org

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

The #openbsd 7.7 release https://www.openbsd.org/77.html is so close it's too late to upgrade from a shapshot to the release, but you can prepare by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html, and watching for updates over on the OpenBSD Journal https://undeadly.org

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

The #openbsd 7.7 release https://www.openbsd.org/77.html is so close it's too late to upgrade from a shapshot to the release, but you can prepare by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html, and watching for updates over on the OpenBSD Journal https://undeadly.org

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

The #openbsd 7.7 release page https://www.openbsd.org/77.html is filling out nicely (yes, the release is SOON now), you can prepare for the event by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html, and watching for updates over on the OpenBSD Journal https://undeadly.org

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

The #openbsd 7.7 release page https://www.openbsd.org/77.html is filling out nicely (yes, the release is SOON now), you can prepare for the event by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html, and watching for updates over on the OpenBSD Journal https://undeadly.org

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

With this spring's (or autumn's) #OpenBSD release creeping ever closer (see https://www.openbsd.org/77.html filling out in near real time), you can prepare for the event by by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html.

Enjoy #OpenBSD!

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

With this spring's (or autumn's) #OpenBSD release creeping ever closer (see https://www.openbsd.org/77.html filling out in near real time), you can prepare for the event by by reading "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html.

Enjoy #OpenBSD!

#openbsd #bsd #unixlike #newrelease #devops #development #sysadmin #networking #security #sanity #qualitysoftware #securecode #correctcode

You Have Installed OpenBSD. Now For The Daily Tasks. https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html refreshed in anticipation of the #openbsd 7.7 release #newrelease #development #freesoftware #libresoftware #security #securecode

You Have Installed OpenBSD. Now For The Daily Tasks. https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html refreshed in anticipation of the #openbsd 7.7 release #newrelease #development #freesoftware #libresoftware #security #securecode

The economic indicators are overblown, yes, but most will read this as "developers don't need to write secure code."

https://www.darkreading.com/application-security/shift-left-pushback-triggers-security-soul-searching

#appsec #securecode

The economic indicators are overblown, yes, but most will read this as "developers don't need to write secure code."

https://www.darkreading.com/application-security/shift-left-pushback-triggers-security-soul-searching

#appsec #securecode

So far, I have written 706 pages to help the security community. My goal will be writing new articles of the Exploiting Reversing Series (ERS), which is focused on security research. However, I am planning to write one or two additional articles of my previous series MAS (Malware Analysis Series) to finish it off.

10. https://exploitreversing.com/2024/01/03/exploiting-reversing-er-series-article-02/
09. https://exploitreversing.com/2023/04/11/exploiting-reversing-er-series/
08. https://exploitreversing.com/2024/08/07/malware-analysis-series-mas-article-08/
07. https://exploitreversing.com/2023/01/05/malware-analysis-series-mas-article-7/
06. https://exploitreversing.com/2022/11/24/malware-analysis-series-mas-article-6/
05. https://exploitreversing.com/2022/09/14/malware-analysis-series-mas-article-5/
04. https://exploitreversing.com/2022/05/12/malware-analysis-series-mas-article-4/
03. https://exploitreversing.com/2022/05/05/malware-analysis-series-mas-article-3/
02. https://exploitreversing.com/2022/02/03/malware-analysis-series-mas-article-2/
01. https://exploitreversing.com/2021/12/03/malware-analysis-series-mas-article-1/

#windows #idapro #kerneldrivers #kernel #infosec #reversing #malwareanalysis #vulnerability #securecode

So far, I have written 706 pages to help the security community. My goal will be writing new articles of the Exploiting Reversing Series (ERS), which is focused on security research. However, I am planning to write one or two additional articles of my previous series MAS (Malware Analysis Series) to finish it off.

10. https://exploitreversing.com/2024/01/03/exploiting-reversing-er-series-article-02/
09. https://exploitreversing.com/2023/04/11/exploiting-reversing-er-series/
08. https://exploitreversing.com/2024/08/07/malware-analysis-series-mas-article-08/
07. https://exploitreversing.com/2023/01/05/malware-analysis-series-mas-article-7/
06. https://exploitreversing.com/2022/11/24/malware-analysis-series-mas-article-6/
05. https://exploitreversing.com/2022/09/14/malware-analysis-series-mas-article-5/
04. https://exploitreversing.com/2022/05/12/malware-analysis-series-mas-article-4/
03. https://exploitreversing.com/2022/05/05/malware-analysis-series-mas-article-3/
02. https://exploitreversing.com/2022/02/03/malware-analysis-series-mas-article-2/
01. https://exploitreversing.com/2021/12/03/malware-analysis-series-mas-article-1/

#windows #idapro #kerneldrivers #kernel #infosec #reversing #malwareanalysis #vulnerability #securecode

FBI urges software developers to end command injection

https://stackdiary.com/fbi-urges-software-developers-to-end-command-injection/

#Cybersecurity #Software #Coding #Development #Security #FBI #CISA #Tech #Programming #Innovation #Safety #Protection #Hackers #Vulnerabilities #CommandInjection #SecureCode #Digital #Technology #CodingLife #DevOps #SecurityAlert #IT #SoftwareDev #Cyber #DataProtection #OnlineSafety #TechNews #BugBounty #Infosec #TechUpdate #SecureByDesign

FBI urges software developers to end command injection

https://stackdiary.com/fbi-urges-software-developers-to-end-command-injection/

#Cybersecurity #Software #Coding #Development #Security #FBI #CISA #Tech #Programming #Innovation #Safety #Protection #Hackers #Vulnerabilities #CommandInjection #SecureCode #Digital #Technology #CodingLife #DevOps #SecurityAlert #IT #SoftwareDev #Cyber #DataProtection #OnlineSafety #TechNews #BugBounty #Infosec #TechUpdate #SecureByDesign

To date I've already written 644 pages to help the security community and, hopefully, more articles will be released in the coming months:

9. https://exploitreversing.com/2024/01/03/exploiting-reversing-er-series-article-02/
8. https://exploitreversing.com/2023/04/11/exploiting-reversing-er-series/
7. https://exploitreversing.com/2023/01/05/malware-analysis-series-mas-article-7/
6. https://exploitreversing.com/2022/11/24/malware-analysis-series-mas-article-6/
5. https://exploitreversing.com/2022/09/14/malware-analysis-series-mas-article-5/
4. https://exploitreversing.com/2022/05/12/malware-analysis-series-mas-article-4/
3. https://exploitreversing.com/2022/05/05/malware-analysis-series-mas-article-3/
2. https://exploitreversing.com/2022/02/03/malware-analysis-series-mas-article-2/
1. https://exploitreversing.com/2021/12/03/malware-analysis-series-mas-article-1/

#windows #idapro #kerneldrivers #kernel #infosec #reversing #malwareanalysis #vulnerability #securecode

To date I've already written 644 pages to help the security community and, hopefully, more articles will be released in the coming months:

9. https://exploitreversing.com/2024/01/03/exploiting-reversing-er-series-article-02/
8. https://exploitreversing.com/2023/04/11/exploiting-reversing-er-series/
7. https://exploitreversing.com/2023/01/05/malware-analysis-series-mas-article-7/
6. https://exploitreversing.com/2022/11/24/malware-analysis-series-mas-article-6/
5. https://exploitreversing.com/2022/09/14/malware-analysis-series-mas-article-5/
4. https://exploitreversing.com/2022/05/12/malware-analysis-series-mas-article-4/
3. https://exploitreversing.com/2022/05/05/malware-analysis-series-mas-article-3/
2. https://exploitreversing.com/2022/02/03/malware-analysis-series-mas-article-2/
1. https://exploitreversing.com/2021/12/03/malware-analysis-series-mas-article-1/

#windows #idapro #kerneldrivers #kernel #infosec #reversing #malwareanalysis #vulnerability #securecode

To date I've already written 644 pages to help the security community and, hopefully, more articles will be released in the coming months:

9. https://exploitreversing.com/2024/01/03/exploiting-reversing-er-series-article-02/
8. https://exploitreversing.com/2023/04/11/exploiting-reversing-er-series/
7. https://exploitreversing.com/2023/01/05/malware-analysis-series-mas-article-7/
6. https://exploitreversing.com/2022/11/24/malware-analysis-series-mas-article-6/
5. https://exploitreversing.com/2022/09/14/malware-analysis-series-mas-article-5/
4. https://exploitreversing.com/2022/05/12/malware-analysis-series-mas-article-4/
3. https://exploitreversing.com/2022/05/05/malware-analysis-series-mas-article-3/
2. https://exploitreversing.com/2022/02/03/malware-analysis-series-mas-article-2/
1. https://exploitreversing.com/2021/12/03/malware-analysis-series-mas-article-1/

#windows #idapro #kerneldrivers #kernel #infosec #reversing #malwareanalysis #vulnerability #securecode

To date I've already written 644 pages to help the security community and, hopefully, more articles will be released in the coming months:

9. https://exploitreversing.com/2024/01/03/exploiting-reversing-er-series-article-02/
8. https://exploitreversing.com/2023/04/11/exploiting-reversing-er-series/
7. https://exploitreversing.com/2023/01/05/malware-analysis-series-mas-article-7/
6. https://exploitreversing.com/2022/11/24/malware-analysis-series-mas-article-6/
5. https://exploitreversing.com/2022/09/14/malware-analysis-series-mas-article-5/
4. https://exploitreversing.com/2022/05/12/malware-analysis-series-mas-article-4/
3. https://exploitreversing.com/2022/05/05/malware-analysis-series-mas-article-3/
2. https://exploitreversing.com/2022/02/03/malware-analysis-series-mas-article-2/
1. https://exploitreversing.com/2021/12/03/malware-analysis-series-mas-article-1/

#windows #idapro #kerneldrivers #kernel #infosec #reversing #malwareanalysis #vulnerability #securecode

Full Chain Baseband Exploits:

Part 1: https://labs.taszk.io/articles/post/full_chain_bb_part1/

Part 2: https://labs.taszk.io/articles/post/full_chain_bb_part2/

Part 3: https://labs.taszk.io/articles/post/full_chain_bb_part3/

#exploit #exploitation #cve #security #informationsecurity #infosec #securecode #mobile

Full Chain Baseband Exploits:

Part 1: https://labs.taszk.io/articles/post/full_chain_bb_part1/

Part 2: https://labs.taszk.io/articles/post/full_chain_bb_part2/

Part 3: https://labs.taszk.io/articles/post/full_chain_bb_part3/

#exploit #exploitation #cve #security #informationsecurity #infosec #securecode #mobile

If you could wave a magic wand, and "solve" 3 security problems, what would they be? And why?
#appsec #securecode #cybersecurity

If you could wave a magic wand, and "solve" 3 security problems, what would they be? And why?
#appsec #securecode #cybersecurity

@xyhhx I have used Secure code warrior before https://www.securecodewarrior.com/ which shows fake code reviews with vulnerable code and you have to find it and fix it.

I know a lot of people (myself included) that have found it useful to learn via this method!

Hope it helps! #securecode #securecodewarrior

This is excellent news! GitHub is now providing secrets scanning for free for everyone! #WootWoot #GitHub #SecretScanning #SecureCode https://thehackernews.com/2022/12/github-announces-free-secret-scanning.html

This is excellent news! GitHub is now providing secrets scanning for free for everyone! #WootWoot #GitHub #SecretScanning #SecureCode https://thehackernews.com/2022/12/github-announces-free-secret-scanning.html

G'day! I'm Jakob and I'm an Application Security guy from Australia.

I spend most of my work life thinking about software security, be it #Pentesting, #SecureCode, #CloudArchitecture, or helping orgs establish #AppSec programs. I also teach secure software development at the University of South Australia.

Outside of work, I'm a runner, cyclist, woodworker, gamer and an average cook. Above all else, I like to learn and share what I'm learning!

#introduction

G'day! I'm Jakob and I'm an Application Security guy from Australia.

I spend most of my work life thinking about software security, be it #Pentesting, #SecureCode, #CloudArchitecture, or helping orgs establish #AppSec programs. I also teach secure software development at the University of South Australia.

Outside of work, I'm a runner, cyclist, woodworker, gamer and an average cook. Above all else, I like to learn and share what I'm learning!

#introduction