Mastodawn

If you havent already grab your ticket to the only application security conference in New England. Keynote by Canada's first lady of security, talks by world's experts, upskill with intense workshops and grab some raffle prizes. Buy your ticket at www.basconf.org — ticket refunded at check-in! 2 days left!

#appsec #basconf #owasp #basc2026

Bill 16h ago

Kine of a neat vulnerability discovered in the OWASP Common Rule Set. Test your stuff on Windows folks!

https://seclists.org/fulldisclosure/2026/Apr/0

#owasp #cve

Full Disclosure: [CVE-2026-33691] OWASP CRS whitespace padding bypass vulnerability

OWASP Boston 22h ago

Dive into the world of SBOMs at OWASP BASC

Kelli Schwalm will speak on how to tell if your SBOM is wrong.

Check out more at www.basconf.org

#owasp #appsec #basconf #basc2026

jpmellojr 23h ago

AI risks are evolving fast and OWASP's GenAI Security Project is keeping pace—new red-teaming taxonomy, 200+ mapped solutions, and updated guidance for AppSec teams. https://jpmellojr.blogspot.com/2026/04/genai-security-project-ramps-up.html. #AppSec #GenAI #OWASP #AISecurity

OWASP Boston 1d ago

Only 3 days left to secure your ticket to the application security conference. Spend a day learning from 18 talks, 4 expert‑led workshops, and enjoy raffle prizes. Buy at www.basconf.org — ticket refunded at check-in!

#appsec #basconf #owasp #basc2026

NowSecure 1d ago

The 2026 Security 360 Mobile report is here!

As part of this year’s research, #Jamf partnered with NowSecure to analyze 135 widely used mobile apps used in enterprises today.

The analysis, grounded in #OWASP standards, highlights how pervasive app vulnerabilities are.

See the report findings: https://loom.ly/P761XRY

@jamfsoftware #Jamf #MobileSecurity#Cybersecurity #MobileApps

Jamf Security 360: 2026 Mac Security Threats

Jamf 2026 Security 360 annual trends report for Mac reveals key threats like trojans, malware and how IT secures Apple endpoints.

OWASP Boston 1d ago

Big thank you to our Platinum sponsor NowSecure !

NowSecure provides a full suite of security and privacy testing solutions purpose-built for mobile apps. From fully integrating automated security testing within your SDLC to fully outsourcing mobile app security testing needs, NowSecure offers a range of options to best fit your needs.

Want to sponsor OWASP BASC 2026? Check out our website www.basconf.org

#owasp #basc #basc2026 #appsec

OWASP Boston 1d ago

Learn about traditional and non traditional methods of AppSec

Gaurav Kulkarni will talk about how variant hunting redefines vulnerability management

Check out more at www.basconf.org

#appsec #owasp #basconf #basc2026

OWASP Boston 2d ago

Only 4 days left to buy your ticket to the application security conference. Spend a day learning with 18 talks, 4 workshops led by experts, plus raffle prizes. Purchase at www.basconf.org — ticket refunded at check-in! #appsec #basconf #owasp #basc2026

ZAP 2d ago

This is huge!
https://www.zaproxy.org/blog/2026-04-01-owasp-ptk-findings-to-zap-alerts/
OWASP PTK massively increases ZAP’s browser side testing capabilities .. and automation is up next!
Many thanks to Denis Podgurskii for this great integration.
#zaproxy #owasp #appsec

OWASP PTK Findings as ZAP Alerts (Juice Shop Walkthrough)

OWASP PTK 9.8.0 and the ZAP OWASP PTK add-on 0.3.0 now let ZAP display OWASP PTK findings directly as ZAP Alerts. This post shows how to install the add-on, choose which PTK rules to run (SAST / IAST / DAST), optionally auto-start scans on browser launch, and then scan OWASP Juice Shop with all results visible in ZAP.

ZAP