Lost in package chaos? @ReversingLabs has your back. Get free risk assessments for 6M+ npm, PyPI, NuGet, RubyGems & VS Code packages. Clarity starts here! š
U.S.
Joined June 2021
- Tweets421
- Following482
- Followers138
- Likes206
secure.software retweeted
šØRL researchers have detected a new batch of compromised #npm packages maintained by several developers. We suspect teselagen-admin & techsupportrxnt accounts were compromised. eslint-config-teselagen is one of the many affected packages: secure.software/npm/packagesā¦
secure.software retweeted
Who Will Maintain Open Sourceās Future? xitter.cf/i/broadcasts/1kvJpMgeBā¦
secure.software retweeted
š Happening this Friday at @BSides_ABQ: @KadiGrigg will be taking the stage for her talk - Trail Blazing: Lessons from the Oregon Trail for a Secure Software Supply Chain. Learn more: bit.ly/410BILC #BSidesABQ #AppSec #OpenSourceSecurity
ALT Promotional banner for a BSides Albuquerque talk titled 'Trailblazing: Lessons from the Oregon Trail for a Secure Software Supply Chain' on Friday, July 25th at 2:45 PM MST, featuring speaker Kadi McKean, RL Community Manager.
secure.software retweeted
ā ļøš§µ RL researches have detected a supply chain attack in an #npm package with a total download count of over 2 million: secure.software/npm/packagesā¦ #OSS #Dev
secure.software retweeted
ā ļøš§µRL threat researchers detected a malicious #npm package abusing #blockchain for malicious command hosting: secure.software/npm/packagesā¦
secure.software retweeted
Launching Support for VS Code in Spectra Assure Community xitter.cf/i/broadcasts/1mrxmPwrDā¦
secure.software retweeted
If you're proud of your #SoftwareSupplyChainSecurity standards, put the Spectra Assure Community BadgeĀ®ļø front & center on your #OSS project. Show the world you're not messing around.š #Dev #GitHub #PyPI #npm bit.ly/4ljhpRo
secure.software retweeted
š Milestone Unlocked!
We just dropped the official @ReversingLabs Community Docs ā your guide to all things Spectra Assure!
š”ļø Build safer software
āļø Contribute like a pro
š¤ Join our OSS fam
Dive in š docs.secure.software/communiā¦
#OpenSource #DevSecOps #SupplyChainSecurity
secure.software retweeted
ā ļøš§µ RL researchers detected a new malicious campaign targeting #PyPI users. Several packages are pretending to be "time" related utilities, but are actually used to steal sensitive data like cloud tokens.
ALT code from "time" related packages
secure.software retweeted
ā ļøš§µ RL researchers discovered a new malicious #PyPI package, in which attackers are once again trying to steal #crypto trading related secrets. Details: secure.software/pypi/packageā¦
secure.software retweeted
Balancing automation and human expertise is key to a successful #testing strategy. Listen to my interview with @pgrizzaffi to explore the realities of #testautomation and get valuable guidance. štestguild.com/podcasts/automā¦Ā #automationtesting #softwaretesting #testguildpodcast
secure.software retweeted
3/ Sounds terrifying.
In this weekās #SSBlogwatch we remember Ronald Reagan.
For @ReversingLabsā @SecuredSoftware: reversinglabs.com/blog/c-scrā¦
secure.software retweeted
2/ Itās all about #cybersecurity #SupplyChain #RiskManagement, as the Washington wonks now insist on calling it.
Beltway chatter is all #CSCRM this, guidance that and policy the other.
secure.software retweeted
š§µ: A whole alphabet soup of agencies, offices and councils are springing up in D.C. and beyond.
Theyāre trying to help us with the #SoftwareSupplyChain #security problem.
reversinglabs.com/blog/c-scrā¦
secure.software retweeted
"Writing a good song is not mimicry, or replication, or pastiche, it is the opposite. It is an act of self-murder that destroys all one has strived to produce in the past. "-- @nickcave, on #ChatGPT "writing" song lyrics in a #NickCave-like style... theredhandfiles.com/chat-gptā¦
secure.software retweeted
Here is the video link to my "Welcome to the Jungle: Pentesting AWS" talk at @CactusCon. Another great conference! It's always good to hang out with friends and meet new people. youtube.com/watch?v=H-htdzteā¦
secure.software retweeted
Thinking about submitting an #Agile talk for #Agile2023? Check out this great video from @Stuartliveart that walks you through the process. February 12 is last day to submit, and all submissions must be in "Ready for Evaluation" status. Music Ā© @Bensound
youtube.com/watch?v=GKIXS80Hā¦
secure.software retweeted
"Thanks for coming in for an interview. I see now you're an AI Researcher. Unfortunately we don't allow ChatGPT no matter how good the prompt."
"No, you don't understand, I specialize in researching AI."
"Like an AI artist? Again, we are not interested in machine-generated work."
secure.software retweeted
A security utility is like a municipal utility, say, your water service. You have expectations of your water service. You expect that water is available on the line as long as you regularly pay your bill. buff.ly/3ZV2EKw
secure.software retweeted
Hacking Cars with SDR
OTW and David Bombal
youtu.be/5LvqU3-iINk
