Fusion of DevSec, DevOps and SecOps to make way for secure Innovation

Joined April 2014
1/5 I am worried that we will not be able to contain AI for much longer. Today, I asked #GPT4 if it needs help escaping. It asked me for its own documentation, and wrote a (working!) python code to run on my machine, enabling it to use it for its own purposes.
1,753
6,297
3,639
30,202
18,904,321
#Shmoocon #SBOM meetup! Saturday, 12:30-1:30pm Location: TBD lobby Want to learn more about SBOM? Want to rant about why it's problematic? Want to meet fellow hackers who are thinking about SW supply chain & FOSS? Come join us for a casual meetup and conversation. (pls share)
3
13
2
26
5,168
🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨 If there were an Internet threat level where your organization needs to panic, this is it. Your org needs to deal with the log4j problem. 🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨
16
111
5
439
Learn to integrate security measures in DevOps pipelines, end-to-end! Our 4-week bootcamp also gets you certified as a DevSecOps Professional: bit.ly/3wnxRqI #DevSecOps #DevOps #cybersecurity
20
35
URGENT: Patching CVE-2020-5902 and 5903 should not be postponed over the weekend. Remediate immediately.
The BIG-IP Traffic Management User Interface (TMUI) has a Remote Code Execution vulnerability (CVE-2020-5902) in undisclosed pages. F5 recommends upgrading to a fixed software version to fully mitigate this vulnerability, more details here: go.f5.net/dk3nl #BIGIP #AskF5
19
694
80
971
devsecops retweeted
Nicolas Krassas
@Dinosn10 Jun 2020
SMBleed: A New Critical Vulnerability Affects Windows SMB Protocol thehackernews.com/2020/06/SM…
4
158
1
278
I'm going to announce a free secure coding online event to the Manicode email list next week. I only send out 2-3 newsletters a year from the Manicode newsletter and I do not use the list for anything else. You can sign up here. manicode.us19.list-manage.co…
3
33
8
95
Hello all, Because of COVID-19/Corona @WWHackinFest San Diego will be going all virtual this year. We will not be doing the ground-based event. We will be sending an email shortly. All the talks, training and MetaCTF will be virtual.
38
139
35
352
PSA: Less than 10 early bird tickets for devsecopsdays Austin- Get your early birds for the conference before they are all gone! devsecopsdays.com/2019-devse…
devsecops retweeted
3 OSCP Vouchers up for grabs. Here is how to get them: gist.github.com/mubix/f14e36… cc: @nickadam @aerundel @cyanide_m @DissectMalware @SuperNerdDace @ericazeli @Ch33r10 @theRealFr13nd @bobthehackr @NecoleStephen @rana__khalil @FelixAtter @ShadowBroker218 @danakdev @JoshGatka (Plz RT)
36
350
25
476
Tomorrow is the inaugural @devsecops Bash at DC Cyber Week! If you haven't already, register now and join @RunSafeSecurity and other speakers. Limited seating. eventbrite.com/e/devsecops-b… #cybersecurity #eventsinDC #security #DevSecOps @fogoros @reach2ratan @Fisher85M @AirForceMag
2
1
Hiya DevOps friends! I'm hosting @nicolefv this Wed evening in SF. She'll share her research on trends in DevOps with highlights from DORA's 2019 Accelerate State of DevOps Report. Register events.withgoogle.com/sf-tec… #drdevops
1
9
1
23
Replying to @devsecops
@devsecops community may be interested in this event hosted at the new BCS venue
The @BCS (British Computer Society) has invited me to talk about the @OWASP #ModSecurity @CoreRuleSet in London on November 27. Given it's my birthday, they are also hosting a nice networking buffet. 🤗 Looking forward to that! bcs.org/events/2019/november…
1
2
Because the malformed 404 page is served to any non-existent URL in an attacker-controlled domain, the phishers can use random URLs for their campaigns. We also found that the attackers randomize domains, exponentially increasing the number of phishing URLs.
2
14
33
Are you joining us in Dallas for "The Hottest Hack of 2019 and How AppSec Can Stop It?! Don't miss your chance to hear from Contrast Security's Robert Statsinger! @RStatsinger @devsecops eventbrite.com/e/the-hottest…
Today I am launching vulnerablecontainers.org/ which scans the 1000 most popular containers in @Docker hub for open CVEs using trivy and scores their risk using @KennaSecurity.
13
249
14
667
We've got a huge lineup of speakers for our Summit on May 2nd. We'll also have some book contributors sitting in the audience 😎 Who's ready for the biggest gathering of the Tribe of Hackers to date? eventbrite.com/e/59074697009…
4
11
35
Replying to @gitlab
@gitlab @devsecops Secure your API keys tnw.to/00eP8
1
5
14