Microsoft Warns Windows Users Not to Fall for False 'Defender Antivirus Is Turned Off' Notifications tech.yahoo.com/cybersecurity… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

📍 San Jose next week. Our Founder & CEO Farshad Abasi is on Stage 7 at @WeAreDevs, Thursday 4:10 PM, with a talk on why your threat model has quietly stopped keeping up in 2026. If you're there, come find us. #threatmodeling #wearedevelopers #aisecurity

X says attackers are targeting user accounts after the launch of X Money tech.yahoo.com/cybersecurity… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face thehackernews.com/2026/08/op… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

Hackers abuse Faronics Deploy admin tool to install ScreenConnect bleepingcomputer.com/news/se… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

AI agents can now find and exploit vulnerabilities on their own — chaining them together with minimal human intervention. In Ep. 21 of The AppSec Insiders we break down the Hugging Face attack, AI sandbox escapes, and what this means for AppSec. 🎧 youtu.be/_RQjV4ClEUQ?si=FyPX…

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers thehackernews.com/2026/07/at… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

A RAG system is only as secure as its retrieval layer. LLMs inherit risks from the data they access: poisoned documents, weak tenant isolation, and sensitive data exposure. Testing the model isn't enough. Are you testing what it can retrieve? #AISecurity #RAG #OWASP #AppSec

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents thehackernews.com/2026/07/mi… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

Audits are easier when security is built in. SOC 2, PCI, and HIPAA all require evidence that you identify and fix risk. Security assessments help you find gaps before auditors do. #Compliance #SOC2 #AppSec

Your system prompt isn't a vault. OWASP's 2025 LLM risks now include prompt leakage because attackers can trick models into revealing instructions and hidden data. Don't store secrets in prompts. Keep controls outside the model. #AISecurity #OWASP #LLM

South Korea fines telco giant KT $39 million for customer data breach bleepingcomputer.com/news/se… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

Not all identities are human. API keys, service accounts, tokens, and AI agents can become attack paths when over-privileged. Know what exists. Limit access. Rotate often. #IdentitySecurity #AppSec

AI feature? Start here. 🤖 OWASP's 2025 Top LLM risks include: 1️⃣ Prompt injection 2️⃣ Data leaks 3️⃣ Supply chain 4️⃣ Model poisoning 5️⃣ Output handling 6️⃣ Excessive agency 7️⃣ Prompt leakage 8️⃣ Vector DB flaws 9️⃣ Misinformation 🔟 Resource abuse. #AISecurity #OWASP #LLM

Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests bleepingcomputer.com/news/se… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

🚨 Active npm supply chain attack: 868+ packages compromised, 2B+ monthly installs affected and the list is still growing. If you auto-pull dependencies, pin versions, audit recent updates, and rotate exposed credentials. SCA helps identify your exposure. #AppSec #npm #DevSecOps

The biggest security risk in AI apps isn't code. It's a sentence. Prompt injection tops OWASP's LLM risks. Treat every input as untrusted, limit what your model can do, and validate outputs before they act. Does your AI read outside data? #AISecurity #OWASP #AppSec

New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries thehackernews.com/2026/06/ne… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

Cybersecurity firms targeted by fraudulent OpenAI organization invites bleepingcomputer.com/news/se… #DevSecOps #SecDevOps #ApplicationSecurity #AppSec #CloudSecurity #CloudSec #SoftwareSecurity

Hugging Face's latest AI security incident proves a hard truth: prompt guardrails aren't security boundaries. Test your AI integrations against the OWASP LLM Top 10 before attackers do. #AISecurity #LLMSecurity