ChiefGyk3DWant to build more secure apps? 💻 Security engineers are shifting left and integrating checks into your CI/CD pipeline. Learn about tools like Trivy, SonarQube, and Dependabot in this quick #shorts! Check it out! #SecurityEngineer #CICD #DevSec
lobo 
AI's changing how we build apps, but are they safe? 😬 Developers, are you skipping security steps? This short dives into why expert oversight is key to avoiding vulnerabilities like hard-coded passwords. New video – check it out! #AIsecurity #SoftwareSecurity #DevSec
JamesLiteLLM supply chain attack: 97M monthly downloads, one malicious update, every secret stolen. The library helps AI apps connect to different models, so when hackers poisoned it, the damage spread to countless dependent projects. This is why we isolate our Python environments. #AISupplyChain #CyberSecurity #PythonSecurity #DevSec #AITools
Hackread.comNEW: Developers, crypto users, and job seekers beware - North Korea’s Lazarus Group is deploying a new #BeaverTail variant to steal credentials and crypto via fake job offers, dev tools and smart contracts.
Read: https://hackread.com/lazarus-embed-beavertail-variant-developer-tools/
shibayashi
EpiphytAufgrund einer fehlenden Prüfung auf den Dateityp war es in Form Block möglich, jede Art von Datei hochzuladen, indem man dem Server eine falsche Information über den Dateityp mitgab. Dieses Problem ist mit Form Block 1.5.6 behoben, ein Update wird empfohlen.
[…]
https://epiph.yt/blog/2025/beliebiger-datei-upload-in-form-block-1-5-6-behoben/
EpiphytDue to a missing file type check, it was possible to upload files of any type in Form Block, just by telling the server that it is a different type. This has been fixed in Form Block 1.5.6, updating is highly recommended.
[…]
https://epiph.yt/en/blog/2025/fixing-arbitrary-file-upload-in-form-block-1-5-6/
guisso 
Criei um labzinho de desenvolvimento seguro espefico para uma linguagem e vulnerabilidade que estava pegando aqui com os devs, tem td um passo a passo, quem quiser. #js #appsec #devsec #learn https://github.com/fguisso/backoffice-balm
Alex B🛡️ ¿Tu app está en internet? Ya puede estar en Shodan.
Antes de escanear, un atacante recolecta. Aprende cómo funciona el OSINT y qué info estás regalando sin saberlo.
Checklist + herramientas básicas para devs → https://greyhat.cl/posts/osint-para-desarrolladores-como-piensan-los-atacantes-antes-de-escanear-tu-app
