#securecoding — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #securecoding, aggregated by home.social.
-
It's time for another toot in our #peoplebehindosco series.
Hi @lisihocke 👋
Lisi found tech as her place to be in 2009 and has grown as a specialized generalist ever since. Building great products that deliver value together with great people motivates her and lets her thrive. As a security engineer, she’s now fully focusing on all things product security to help build more secure solutions. She’s committed to testing and quality, passionate about whole-team approaches to increase effectiveness and resilience, and enjoys experimenting and learning continuously. Having received a lot from communities, Lisi is paying it forward by sharing her stories and learning in public.
Her tags: #ProdSec, #AppSec, #DevSecOps, #SecureCoding, #SecurityTesting
She posts on Mastodon as @lisihocke and blogs at https://www.lisihocke.com.
In her free time, she plays indoor volleyball or delves into computer games and stories of all kinds.
Thank you very much for your work as a volunteer and your support in organizing the Open Security Conference.
Stay tuned and follow the hashtag #peoplebehindosco for more people behind osco.
-
It's time for another toot in our #peoplebehindosco series.
Hi @lisihocke 👋
Lisi found tech as her place to be in 2009 and has grown as a specialized generalist ever since. Building great products that deliver value together with great people motivates her and lets her thrive. As a security engineer, she’s now fully focusing on all things product security to help build more secure solutions. She’s committed to testing and quality, passionate about whole-team approaches to increase effectiveness and resilience, and enjoys experimenting and learning continuously. Having received a lot from communities, Lisi is paying it forward by sharing her stories and learning in public.
Her tags: #ProdSec, #AppSec, #DevSecOps, #SecureCoding, #SecurityTesting
She posts on Mastodon as @lisihocke and blogs at https://www.lisihocke.com.
In her free time, she plays indoor volleyball or delves into computer games and stories of all kinds.
Thank you very much for your work as a volunteer and your support in organizing the Open Security Conference.
Stay tuned and follow the hashtag #peoplebehindosco for more people behind osco.
-
🐱💻 Oh sure, because nothing says "secure" like trusting your deepest secrets to a #GitHub repo named after a fish 🐠. PISIGuard promises to protect your whispers to AI, but hey, why not just shout them in a crowded room for the same effect? 😆🔒
https://github.com/mohamed--abdel-maksoud/pisiguard #securecoding #privacy #concerns #AIwhispers #security #techhumor #HackerNews #ngated -
🐱💻 Oh sure, because nothing says "secure" like trusting your deepest secrets to a #GitHub repo named after a fish 🐠. PISIGuard promises to protect your whispers to AI, but hey, why not just shout them in a crowded room for the same effect? 😆🔒
https://github.com/mohamed--abdel-maksoud/pisiguard #securecoding #privacy #concerns #AIwhispers #security #techhumor #HackerNews #ngated -
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
RE: https://infosec.exchange/@SheHacksPurple/116847520079170601
Join @SheHacksPurple and @insiderphd for a book stream about #securecoding !
You're a developer that want to improve your code? This book stream is for you (obviously, the book too)
#infosec #code #dev #securecode #softwaredevelopment #development #developer
-
RE: https://infosec.exchange/@SheHacksPurple/116847520079170601
Join @SheHacksPurple and @insiderphd for a book stream about #securecoding !
You're a developer that want to improve your code? This book stream is for you (obviously, the book too)
#infosec #code #dev #securecode #softwaredevelopment #development #developer
-
AI-assisted development is moving fast, and AppSec has to move with it.
Shoutout to Symbiotic Security, a Silver Sponsor of AppSec Village, for supporting the community and the conversations around securing AI-generated code.
Check them out: https://buff.ly/V8U1caS
-
AI-assisted development is moving fast, and AppSec has to move with it.
Shoutout to Symbiotic Security, a Silver Sponsor of AppSec Village, for supporting the community and the conversations around securing AI-generated code.
Check them out: https://buff.ly/V8U1caS
-
Anthropic Expands AI Bug Hunting Program
In just eight weeks, Cisco's AI-powered bug hunting program scanned a staggering 1.8 billion lines of code, a task that would have taken their top security team a whopping eight years to complete. This groundbreaking feat showcases the incredible potential of AI-driven cybersecurity solutions.
#AiBugHunting #ArtificialIntelligence #VulnerabilityScanning #SecureCoding #EmergingThreats
-
Ich möchte euch auf ein wichtiges Thema aufmerksam machen: Sicherheitslücken in Go, der von Google entwickelten Programmiersprache! Hier sind die relevanten Informationen:
* Go-Team hat neue Versionen veröffentlicht, die die Schwachstellen beheben
* Nutzer sollten ihre Installationen auf die aktuellen Updates migrieren, um Angriffe zu verhindern
* Go-Team reagiert gezielt auf Sicherheitsprobleme
#Go #Sicherheit #DecentralizedDevelopment #SecureCoding -
Fake Claude Code installer campaigns are abusing trusted developer workflows instead of exploiting software vulnerabilities.
Rhys Downing of Ontinue explains how attackers used fake documentation pages, modified install commands, PowerShell loaders, and browser compromise techniques to steal credentials and establish persistence.“Developers are becoming a preferred target because they sit at the intersection of trust and access.”
Read more:
https://www.technadu.com/copy-paste-compromise-why-developer-workflows-need-new-guardrails/628593/#Cybersecurity #ThreatResearch #Developers #ApplicationSecurity #Ontinue #SecureCoding
-
RE: https://infosec.exchange/@SheHacksPurple/116637531032335169
Join @SheHacksPurple for her live book stream "Alice and Bob learn secure coding" on June 3 with special guest @ScottHelme
-
RE: https://infosec.exchange/@SheHacksPurple/116637531032335169
Join @SheHacksPurple for her live book stream "Alice and Bob learn secure coding" on June 3 with special guest @ScottHelme
-
https://www.wiz.io/blog/mini-shai-hulud-strikes-again-tanstack-more-npm-packages-compromised
#CyberSecurity #InfoSec #SupplyChainSecurity #SoftwareSupplyChain #NPM #OpenSourceSecurity #AppSec #DevSecOps #ThreatIntel #Malware #JavaScript #NodeJS #CICD #GitHubActions #CloudSecurity #TypeScript #ReactJS #WebDev #OpenSource #DevTools #SoftwareEngineering #DeveloperSecurity #SecureCoding #GitHub #SupplyChainAttack #Programming #TechNews #DevOps #ApplicationSecurity #ThreatResearch #SecurityEngineering #CyberAttack #Hackers #MalwareAlert #SecurityResearch #DevCommunity -
https://www.wiz.io/blog/mini-shai-hulud-strikes-again-tanstack-more-npm-packages-compromised
#CyberSecurity #InfoSec #SupplyChainSecurity #SoftwareSupplyChain #NPM #OpenSourceSecurity #AppSec #DevSecOps #ThreatIntel #Malware #JavaScript #NodeJS #CICD #GitHubActions #CloudSecurity #TypeScript #ReactJS #WebDev #OpenSource #DevTools #SoftwareEngineering #DeveloperSecurity #SecureCoding #GitHub #SupplyChainAttack #Programming #TechNews #DevOps #ApplicationSecurity #ThreatResearch #SecurityEngineering #CyberAttack #Hackers #MalwareAlert #SecurityResearch #DevCommunity -
Do it today, please. Tell your team. Watch the full 60 seconds.
Video link: https://twp.ai/4hpg2D
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm
2/2 -
Do it today, please. Tell your team. Watch the full 60 seconds.
Video link: https://twp.ai/4hpg2D
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm
2/2 -
How we reshape the fallout, is up to us.
But, there will be monsters.
There always are.
-
How we reshape the fallout, is up to us.
But, there will be monsters.
There always are.
-
Do it today, please. Tell your team. Watch the full 60 seconds.
Video link: https://twp.ai/4hpWKl
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm
2/2 -
Do it today, please. Tell your team. Watch the full 60 seconds.
Video link: https://twp.ai/4hpWKl
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm
2/2 -
New by me: Vibe Coding Has a Security Problem, and Shipping Code You Do Not Understand Is Not a Strategy
AI-assisted coding can absolutely help teams move faster. It can also help them ship weak access controls, insecure defaults, risky dependencies, and code nobody on the team can confidently defend.
I wrote about why that matters and why review still matters just as much as speed.
-
New by me: Vibe Coding Has a Security Problem, and Shipping Code You Do Not Understand Is Not a Strategy
AI-assisted coding can absolutely help teams move faster. It can also help them ship weak access controls, insecure defaults, risky dependencies, and code nobody on the team can confidently defend.
I wrote about why that matters and why review still matters just as much as speed.
-
Do it today, please. Tell your team. Watch the full 60 seconds.
Video link: https://twp.ai/E5Aq2o
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm
2/2 -
Do it today, please. Tell your team. Watch the full 60 seconds.
Video link: https://twp.ai/E5Aq2o
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm
2/2 -
🚨 Emergency DevSec Station drop.
There's an active npm supply chain attack happening right now. Compromised packages are stealing SSH keys, AWS credentials, GitHub tokens, browser passwords, and crypto wallets on install. Then using your publish token to infect every package you maintain.
One command can protect you immediately: npm config set ignore-scripts true
Do it today, please. Tell your team. Watch the full 60 seconds.
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm -
🚨 Emergency DevSec Station drop.
There's an active npm supply chain attack happening right now. Compromised packages are stealing SSH keys, AWS credentials, GitHub tokens, browser passwords, and crypto wallets on install. Then using your publish token to infect every package you maintain.
One command can protect you immediately: npm config set ignore-scripts true
Do it today, please. Tell your team. Watch the full 60 seconds.
#AppSec #SupplyChainSecurity #DevSecOps #SecureCoding #npm -
NoSQL Injection Attacks: MongoDB, CouchDB, and More – NoSQL injection
In this article, I cover how NoSQL injection works, common attack vectors, and practical mitigation techniques.
https://denizhalil.com/2025/12/23/nosql-injection-attacks-mongodb-couchdb/#CyberSecurity #NoSQL #MongoDB #CouchDB #WebSecurity #AppSec #Injection #InfoSec #Pentesting #RedTeam #BlueTeam #securecoding
-
NoSQL Injection Attacks: MongoDB, CouchDB, and More – NoSQL injection
In this article, I cover how NoSQL injection works, common attack vectors, and practical mitigation techniques.
https://denizhalil.com/2025/12/23/nosql-injection-attacks-mongodb-couchdb/#CyberSecurity #NoSQL #MongoDB #CouchDB #WebSecurity #AppSec #Injection #InfoSec #Pentesting #RedTeam #BlueTeam #securecoding
-
The security implications of "Tokenmaxxing" cannot be ignored. As code churn increases by 800%+, the window for technical debt - and potential vulnerabilities - widens. If 10-30% of AI code is being rewritten within weeks, what does that say about the initial security audit of that code?
Source: https://techcrunch.com/2026/04/17/tokenmaxxing-is-making-developers-less-productive-than-they-think/
Are you seeing more insecure patterns creeping into codebases via AI agents? Let’s discuss the risk-to-reward ratio of AI-accelerated development. Follow us for more technical analysis of the AI landscape.
#InfoSec #AppSec #CyberSecurity #SecureCoding #DevSecOps #Technadu
-
The security implications of "Tokenmaxxing" cannot be ignored. As code churn increases by 800%+, the window for technical debt - and potential vulnerabilities - widens. If 10-30% of AI code is being rewritten within weeks, what does that say about the initial security audit of that code?
Source: https://techcrunch.com/2026/04/17/tokenmaxxing-is-making-developers-less-productive-than-they-think/
Are you seeing more insecure patterns creeping into codebases via AI agents? Let’s discuss the risk-to-reward ratio of AI-accelerated development. Follow us for more technical analysis of the AI landscape.
#InfoSec #AppSec #CyberSecurity #SecureCoding #DevSecOps #Technadu
-
Firms Scramble to Secure AI-Generated Code
As AI-generated code becomes more prevalent, a pressing question emerges: how much attention should security teams give to code produced by artificial intelligence? The surprising answer: a lot, with 58% of organizations dedicating over 10 hours a month to securing it.
#AigeneratedCode #CodeSecurity #ArtificialIntelligence #EmergingThreats #SecureCoding
-
Join Fabio Cerullo’s 3-Day Web App Security Essentials training ⚔️
Exploit real vulnerabilities, understand OWASP Top 10 (2025), and tackle modern risks like AI-generated code, all in hands-on labs.
https://owaspglobalappseceuvienna20.sched.com/event/2EBUO#AppSec #CyberSecurity #OWASP #EthicalHacking #SecureCoding #Infosec
-
Join Fabio Cerullo’s 3-Day Web App Security Essentials training ⚔️
Exploit real vulnerabilities, understand OWASP Top 10 (2025), and tackle modern risks like AI-generated code, all in hands-on labs.
https://owaspglobalappseceuvienna20.sched.com/event/2EBUO#AppSec #CyberSecurity #OWASP #EthicalHacking #SecureCoding #Infosec
-
Java for Secure Enterprise Systems: Why It Still Dominates
Learn why Java still leads in secure enterprise systems. It offers strong security, scalability, and reliable performance. In this blog, Deuex Solutions explains why businesses trust Java for building safe and powerful applications. Read more to explore the full insights.
https://deuexsolutions.com/blog/java-for-secure-enterprise-systems
#Java #EnterpriseSoftware #CyberSecurity #SecureCoding #EnterpriseSystems #TechBlog #ITSolutions #DeuexSolutions
-
DevSecOps Services That Actually Strengthen Your Software
Looking for reliable DevSecOps services? Deuex Solutions helps you build secure software from day one by integrating security into every stage of development. Explore trusted DevSecOps services in India for safer, faster releases.
https://medium.com/@deuexsolutions/devsecops-services-that-actually-strengthen-your-software-bfffcdeca3eb#DevSecOps #DevSecOpsServices #CyberSecurity #SoftwareDevelopment #DevSecOpsIndia #SecureCoding #CloudSecurity #ITServices #DeuexSolutions
-
🔎 Cybersecurity Challenge #6 – Spot the Vulnerability
This application fetches an image from a URL provided by the user. Sounds harmless, right? 👨💻
But allowing servers to request external resources based on user input can sometimes open the door to dangerous attacks.
Take a closer look at how the URL is validated and how the request is made.
⚠️ Is the validation strong enough?
Question: What security vulnerability exists in this code?
A) SQL Injection
B) Server-Side Request Forgery (SSRF)
C) External XML Entity (XXE)
D) URL Redirection💬 Comment your answer and tell us which line reveals the vulnerability!
In the next post, I’ll reveal the correct answer and explain how attackers could exploit it in real-world environments.
#cybersecurity #infosec #ethicalhacking #websecurity #bugbounty #securecoding #CyberKid #securitychallenge #SSRF
-
🔎 Cybersecurity Challenge #6 – Spot the Vulnerability
This application fetches an image from a URL provided by the user. Sounds harmless, right? 👨💻
But allowing servers to request external resources based on user input can sometimes open the door to dangerous attacks.
Take a closer look at how the URL is validated and how the request is made.
⚠️ Is the validation strong enough?
Question: What security vulnerability exists in this code?
A) SQL Injection
B) Server-Side Request Forgery (SSRF)
C) External XML Entity (XXE)
D) URL Redirection💬 Comment your answer and tell us which line reveals the vulnerability!
In the next post, I’ll reveal the correct answer and explain how attackers could exploit it in real-world environments.
#cybersecurity #infosec #ethicalhacking #websecurity #bugbounty #securecoding #CyberKid #securitychallenge #SSRF
-
Nice new #infosec zine focused on #securecoding with an interesting formula where each article only takes one page
-
Nice new #infosec zine focused on #securecoding with an interesting formula where each article only takes one page
-
So amazing to see incredible friends at Wild West Hackin' Fest! Thank you Chad!!!
And thank you Black Hills for having me in to teach! #securecoding
-
Why secure coding is ignored in hiring, how interview practices fail to detect risk, and what organizations must change to build safer software from day one. https://hackernoon.com/why-secure-coding-ability-remains-an-afterthought-in-modern-hiring-pipelines #securecoding
-
age.rb – Ruby bindings for age!
If you're working with Ruby and looking for a simple, secure, and modern solution for file encryption, age.rb bridges the gap, bringing the elegance of Ruby to the robust age encryption tool.
Give it a try, explore the repo on GitHub, and let me know what you think. Contributions and feedback are always welcome!
Repository: https://github.com/tschaefer/age.rb
#Ruby #Cryptography #OpenSource #AgeEncryption #SecureCoding
-
AI Tools Make Coders More Important, Not Less https://hbr.org/2025/12/ai-tools-make-coders-more-important-not-less #AI #AICoding #coders #AITools #cybersecurity #securecoding