home.social

#securitytesting — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #securitytesting, aggregated by home.social.

  1. 🚀 aghast v0.6.0 is out!

    Cost and budget controls, per-check repository exclusion, and enhanced security hardening. Run aghast stats to see your scan costs, set budgets, and scale with confidence.

    Get it: npm install -g @bouncesecurity/aghast

    #SecurityTesting #DevSecOps

  2. 🚀 aghast v0.6.0 is out!

    Cost and budget controls, per-check repository exclusion, and enhanced security hardening. Run aghast stats to see your scan costs, set budgets, and scale with confidence.

    Get it: npm install -g @bouncesecurity/aghast

    #SecurityTesting #DevSecOps

  3. 🚀 aghast v0.6.0 is out!

    Cost and budget controls, per-check repository exclusion, and enhanced security hardening. Run aghast stats to see your scan costs, set budgets, and scale with confidence.

    Get it: npm install -g @bouncesecurity/aghast

    #SecurityTesting #DevSecOps

  4. 🚀 aghast v0.6.0 is out!

    Cost and budget controls, per-check repository exclusion, and enhanced security hardening. Run aghast stats to see your scan costs, set budgets, and scale with confidence.

    Get it: npm install -g @bouncesecurity/aghast

    #SecurityTesting #DevSecOps

  5. 🚀 aghast v0.6.0 is out!

    Cost and budget controls, per-check repository exclusion, and enhanced security hardening. Run aghast stats to see your scan costs, set budgets, and scale with confidence.

    Get it: npm install -g @bouncesecurity/aghast

    #SecurityTesting #DevSecOps

  6. 🎧 New My Precious Data episode!
    I spoke with Andreas Clementi, co-founder of AV-Comparatives about independent security testing and why transparency is the backbone of trust in cybersecurity.

    #Cybersecurity #AVComparatives #SecurityTesting #Podcast

    Listen here:
    mypreciousdata.buzzsprout.com/

  7. 🎧 New My Precious Data episode!
    I spoke with Andreas Clementi, co-founder of AV-Comparatives about independent security testing and why transparency is the backbone of trust in cybersecurity.

    #Cybersecurity #AVComparatives #SecurityTesting #Podcast

    Listen here:
    mypreciousdata.buzzsprout.com/

  8. 🎧 New My Precious Data episode!
    I spoke with Andreas Clementi, co-founder of AV-Comparatives about independent security testing and why transparency is the backbone of trust in cybersecurity.

    #Cybersecurity #AVComparatives #SecurityTesting #Podcast

    Listen here:
    mypreciousdata.buzzsprout.com/

  9. How VAPT Solutions Help Organizations Prevent Cyber Attacks in 2026

    Learn how VAPT solutions in 2026 help organizations identify vulnerabilities, strengthen security posture, and proactively prevent advanced cyber attacks.

    Read the full blog here: ecsinfotech.com/how-vapt-solut

    #VAPTSolutions #CyberSecurity #VAPT #DataProtection #VAPTServices #VAPTTesting #VulnerabilityAssessment #PenetrationTesting #SecurityTesting #ThreatDetection #ECSInfotech #ECS

  10. 🔎 Một kỹ sư backend muốn thực hành phân tích bảo mật ứng dụng (web/mobile) miễn phí! 🎯 Cần 2‑3 dự án có môi trường test, không phải production. Ưu tiên phương pháp black‑box, cung cấp báo cáo rủi ro chi tiết, sau đó xoá mọi dữ liệu. DM nếu quan tâm! #cybersecurity #pentest #securitytesting #bảo_mật #kiểm_thử #ứng_dụng

    reddit.com/r/SaaS/comments/1qt

  11. 🔎 Một kỹ sư backend muốn thực hành phân tích bảo mật ứng dụng (web/mobile) miễn phí! 🎯 Cần 2‑3 dự án có môi trường test, không phải production. Ưu tiên phương pháp black‑box, cung cấp báo cáo rủi ro chi tiết, sau đó xoá mọi dữ liệu. DM nếu quan tâm! #cybersecurity #pentest #securitytesting #bảo_mật #kiểm_thử #ứng_dụng

    reddit.com/r/SaaS/comments/1qt

  12. www.ditig.com/lynis-cheat-... - Lynis cheat sheet This cheat sheet provides security teams and sysadmins with a quick-reference guide to Lynis commands, audit options, and configuration details. #securityaudit #systemsecurity #linux #macOS #unix #cheatsheet #securitytesting #cheat-sheet

  13. www.ditig.com/lynis-cheat-... - Lynis cheat sheet This cheat sheet provides security teams and sysadmins with a quick-reference guide to Lynis commands, audit options, and configuration details. #securityaudit #systemsecurity #linux #macOS #unix #cheatsheet #securitytesting #cheat-sheet

  14. www.ditig.com/lynis-cheat-... - Lynis cheat sheet This cheat sheet provides security teams and sysadmins with a quick-reference guide to Lynis commands, audit options, and configuration details. #securityaudit #systemsecurity #linux #macOS #unix #cheatsheet #securitytesting #cheat-sheet

  15. www.ditig.com/lynis-cheat-... - Lynis cheat sheet This cheat sheet provides security teams and sysadmins with a quick-reference guide to Lynis commands, audit options, and configuration details. #securityaudit #systemsecurity #linux #macOS #unix #cheatsheet #securitytesting #cheat-sheet

  16. www.ditig.com/lynis-cheat-... - Lynis cheat sheet This cheat sheet provides security teams and sysadmins with a quick-reference guide to Lynis commands, audit options, and configuration details. #securityaudit #systemsecurity #linux #macOS #unix #cheatsheet #securitytesting #cheat-sheet

  17. Security Testing is one aspect of modern QA.
    There is no way around it, and you should never try to circumvent that fact in any case or with any "trick" you might come up with.

    And it is extremely simple and not even costly to integrate as I talked about so much in the past.

    Even if you might be tired of hearing it:

    Security Testing is crucial today, tomorrow and in the years to come !!!

    #QA #testing #security #SecurityTesting #QS

  18. Android app testers and security engineers spend a lot of time dealing with Activities. The attack surface may look small, but a poorly configured Activities can expose data or let other apps do things they shouldn't. In this blog post, David Lodge explains how exported and debug Activities, weak WebView settings, and missing window security flags can pose security concerns.

    📌 pentestpartners.com/security-b

    #androidsecurity #cybersecurity #appsec #mobile #pentesting #infosec #securitytesting

  19. Android app testers and security engineers spend a lot of time dealing with Activities. The attack surface may look small, but a poorly configured Activities can expose data or let other apps do things they shouldn't. In this blog post, David Lodge explains how exported and debug Activities, weak WebView settings, and missing window security flags can pose security concerns.

    📌 pentestpartners.com/security-b

    #androidsecurity #cybersecurity #appsec #mobile #pentesting #infosec #securitytesting

  20. Android app testers and security engineers spend a lot of time dealing with Activities. The attack surface may look small, but a poorly configured Activities can expose data or let other apps do things they shouldn't. In this blog post, David Lodge explains how exported and debug Activities, weak WebView settings, and missing window security flags can pose security concerns.

    📌 pentestpartners.com/security-b

    #androidsecurity #cybersecurity #appsec #mobile #pentesting #infosec #securitytesting

  21. Android app testers and security engineers spend a lot of time dealing with Activities. The attack surface may look small, but a poorly configured Activities can expose data or let other apps do things they shouldn't. In this blog post, David Lodge explains how exported and debug Activities, weak WebView settings, and missing window security flags can pose security concerns.

    📌 pentestpartners.com/security-b

    #androidsecurity #cybersecurity #appsec #mobile #pentesting #infosec #securitytesting

  22. Android app testers and security engineers spend a lot of time dealing with Activities. The attack surface may look small, but a poorly configured Activities can expose data or let other apps do things they shouldn't. In this blog post, David Lodge explains how exported and debug Activities, weak WebView settings, and missing window security flags can pose security concerns.

    📌 pentestpartners.com/security-b

    #androidsecurity #cybersecurity #appsec #mobile #pentesting #infosec #securitytesting

  23. Comprehensive Guide to VAPT Services in India: Why Expert Consulting and Auditing Matter

    Discover top VAPT Services in India with expert consulting and auditing. Ensure your business’s cybersecurity through comprehensive vulnerability testing.

    🔗 Check out our comprehensive guide! - ecsinfotech.com/comprehensive-

    #CyberSecurity #VAPT #VAPTServices #VulnerabilityAssessment #PenetrationTesting #CyberAudit #DataProtection #CyberAwareness #SecurityTesting #CyberExperts

  24. How Bug Bounty Programs are Improving Software Security
    This article demonstrates the tangible impact of bug bounty programs on enterprise security through a real-world case study. **Case Study**: A 19-year-old Brazilian computer science student discovered a critical payment system vulnerability allowing unlimited fund transfers between accounts, which had been missed by senior engineers for months. The student earned a $5,000 bounty and provided valuable security insights. **The Power of Diversity**: While the internal security team consisted of 6 engineers, the bug bounty program provided access to thousands of global researchers with diverse perspectives, unique testing methodologies, and persistent curiosity that no single internal team could match. **Cost-Effectiveness**: Traditional penetration testing costs $25,000 for one-time assessments, while their bug bounty program spent $48,000 over two years but prevented potential losses in the millions of dollars. **Global Army of Ethical Hackers**: Bug bounty programs create a distributed network of ethical hackers who continuously probe systems, providing ongoing security testing rather than one-time assessments. **Business Impact**: This approach allowed the company to prevent massive financial losses while building relationships with the security research community and improving their overall security posture. The article highlights how crowdsourced security testing can outperform traditional methods both in effectiveness and cost efficiency. #infosec #BugBounty #Cybersecurity #ResponsibleDisclosure #SecurityTesting
    osintteam.blog/how-bug-bounty-

  25. How Bug Bounty Programs are Improving Software Security
    This article demonstrates the tangible impact of bug bounty programs on enterprise security through a real-world case study. **Case Study**: A 19-year-old Brazilian computer science student discovered a critical payment system vulnerability allowing unlimited fund transfers between accounts, which had been missed by senior engineers for months. The student earned a $5,000 bounty and provided valuable security insights. **The Power of Diversity**: While the internal security team consisted of 6 engineers, the bug bounty program provided access to thousands of global researchers with diverse perspectives, unique testing methodologies, and persistent curiosity that no single internal team could match. **Cost-Effectiveness**: Traditional penetration testing costs $25,000 for one-time assessments, while their bug bounty program spent $48,000 over two years but prevented potential losses in the millions of dollars. **Global Army of Ethical Hackers**: Bug bounty programs create a distributed network of ethical hackers who continuously probe systems, providing ongoing security testing rather than one-time assessments. **Business Impact**: This approach allowed the company to prevent massive financial losses while building relationships with the security research community and improving their overall security posture. The article highlights how crowdsourced security testing can outperform traditional methods both in effectiveness and cost efficiency. #infosec #BugBounty #Cybersecurity #ResponsibleDisclosure #SecurityTesting
    osintteam.blog/how-bug-bounty-

  26. 🚀 Beginner’s Guide to Penetration Testing — Start Your Ethical Hacking Journey

    Learn the five core phases of a pentest (recon → scanning → gaining access → post-exploitation → reporting), the essential tools you’ll use, and the ethical mindset to practice safely and legally. Perfect for beginners who want a practical, hands-on path into cybersecurity. 🛡️🧭

    #penetrationtesting #ethicalhacking #cybersecurity #Infosec #pentest #BeginnerGuide #KaliLinux #Nmap #Metasploit #HackingTools #SecurityTesting #WhiteHat #AxximumInfoSolutions

  27. 24 Essential Penetration Testing Tools Every Ethical Hacker Should Know 🛠️🔍

    Whether you're just starting out or building a full red team toolkit, these tools cover all the key stages of a penetration test — from recon to reporting.

    📋 5 Infographics:

    🧭 Reconnaissance & Info Gathering
    💣 Exploitation & Post-Exploitation
    🔐 Credential Attacks & Wireless Testing
    🌐 Web App Testing & Shells
    🧪 Vulnerability Scanning & Enumeration
    🔍 Reverse Engineering & Analysis

    Disclaimer: This content is intended for educational and ethical use only. Always perform testing in lab environments or with explicit permission.

    #EthicalHacking #PenetrationTesting #CyberSecurity #InfoSec #RedTeamTools #EducationOnly #SecurityTesting #HackTheRightWay

  28. The #AgileTD program is out now! Super excited to have been invited to curate this year's #SecurityTesting track along with Kristof Van Kriekingen and Santhosh Tuppad. 🤩

    agiletestingdays.com/program/d

    Looking forward to learning with the track's amazing speakers, and Santhosh joining me on my workshop "Secure Development Lifecycle Applied - How to Make Things a Bit More Secure than Yesterday Every Day". 🛡

    See you in November to dive into all things #security together! 🤿

  29. Two great days at embedded world Exhibition & Conference are already in the books. Today is the last day before we pack up our tech demos this evening and head back to Berlin. ⌛ So take the opportunity to visit us today until 5 p.m. in Hall 4 at Stand 422. We look forward to a successful final sprint and to sharing our expertise with you!

    ▶️ fokus.fraunhofer.de/en/sqc/eve

    #ew22 #SecurityTesting #EmbeddedEdgeAI #ArtificialIntelligence #QualityEngineering

  30. Welcome to Day 1 at this year's embedded world ! Visit us at our booth in hall 4, stand 422.

    Our scientists will be on site to show you our two demos “Adaptive Manufacturing with Embedded Edge AI” and “Supply chain security in a connected and regulated world”. Don't hesitate and stop by, we look forward to seeing you!

    More information: ▶️ fokus.fraunhofer.de/en/sqc/eve

    #EmbeddedWorld #QualityEngineering #EdgeAI #ew25 #SecurityTesting

  31. Okay, recall those phishing tests I failed on purpose because I was exploring the links in my test env after noticing they were from terranova. Another email this morning that looks pretty much exactly like the tests that I hadn't checked on yet.

    But surprise! follow up email from corporate saying it is a real one and is okay :)

    Something about crying wolves. Or is that laughter.

    #phishing #securitytesting

  32. 🚀 +++ Jobs +++ #Jobs +++ 🚀

    Bei uns im Jobportal hat sich wieder einiges getan. Derzeit haben wir zehn offene #Job-Ausschreibungen online: 🔎 jobs.fraunhofer.de/search/?cre

    Wir suchen sowohl Studierende als auch Absolventinnen und Absolventen. Kommt zu uns ins Team! 🤗 Wir freuen uns auf neue Kolleginnen und Kollegen. Ein Blick in unser Jobportal lohnt sich!

    #Informatik
    #Mathematik
    #5G
    #6G
    #SecurityTesting
    #eGovernment
    #VerwaltungsDigitalisierung
    #Computerlinguistik
    #QuantumComputing
    #GuteLeutezuuns

  33. Learn How to Implement DAST (Dynamic Application Security Testing)in GitHub for Enhanced Application Security

    With DAST, you evaluate a web application by simulating an attack in real-time to identify vulnerabilities and potential security flaws.

    youtu.be/v_xo1kgNYsE

  34. 24 Essential Penetration Testing Tools Every Ethical Hacker Should Know 🛠️🔍

    Whether you're just starting out or building a full red team toolkit, these tools cover all the key stages of a penetration test — from recon to reporting.

    📋 5 Infographics:

    🧭 Reconnaissance & Info Gathering
    💣 Exploitation & Post-Exploitation
    🔐 Credential Attacks & Wireless Testing
    🌐 Web App Testing & Shells
    🧪 Vulnerability Scanning & Enumeration
    🔍 Reverse Engineering & Analysis

    Disclaimer: This content is intended for educational and ethical use only. Always perform testing in lab environments or with explicit permission.

    #EthicalHacking #PenetrationTesting #CyberSecurity #InfoSec #RedTeamTools #EducationOnly #SecurityTesting #HackTheRightWay

  35. 24 Essential Penetration Testing Tools Every Ethical Hacker Should Know 🛠️🔍

    Whether you're just starting out or building a full red team toolkit, these tools cover all the key stages of a penetration test — from recon to reporting.

    📋 5 Infographics:

    🧭 Reconnaissance & Info Gathering
    💣 Exploitation & Post-Exploitation
    🔐 Credential Attacks & Wireless Testing
    🌐 Web App Testing & Shells
    🧪 Vulnerability Scanning & Enumeration
    🔍 Reverse Engineering & Analysis

    Disclaimer: This content is intended for educational and ethical use only. Always perform testing in lab environments or with explicit permission.

    #EthicalHacking #PenetrationTesting #CyberSecurity #InfoSec #RedTeamTools #EducationOnly #SecurityTesting #HackTheRightWay

  36. 24 Essential Penetration Testing Tools Every Ethical Hacker Should Know 🛠️🔍

    Whether you're just starting out or building a full red team toolkit, these tools cover all the key stages of a penetration test — from recon to reporting.

    📋 5 Infographics:

    🧭 Reconnaissance & Info Gathering
    💣 Exploitation & Post-Exploitation
    🔐 Credential Attacks & Wireless Testing
    🌐 Web App Testing & Shells
    🧪 Vulnerability Scanning & Enumeration
    🔍 Reverse Engineering & Analysis

    Disclaimer: This content is intended for educational and ethical use only. Always perform testing in lab environments or with explicit permission.

    #EthicalHacking #PenetrationTesting #CyberSecurity #InfoSec #RedTeamTools #EducationOnly #SecurityTesting #HackTheRightWay