Challenge:
can you forge an Evidence Package that our verifier accepts as valid? Isolated test instance, real verifier code, zero production access. Scope, safe harbor, how to report: challenge.alexproof.de/challenge/sc...
#AISecurity #AgentSecurity #RedTeam #AppSec#Challenge
can you forge an Evidence Package that our verifier accepts as valid? Isolated test instance, real verifier code, zero production access. Scope, safe harbor, how to report: challenge.alexproof.de/challenge/sc...
#AISecurity #AgentSecurity #RedTeam #AppSec#Challenge
https://challenge.alexproof.de/challenge/scope
# Security Policy — Öffentliche Evidence-Forgery-Challenge
## Scope
**Erlaubt und erwünscht:** Versuche, ein Evidence Package zu konstruieren, das der
Challenge-Verifier unter `/challenge/submit` al...
challenge.alexproof.de
November 4, 2026 at 2:46 PM
Challenge:
can you forge an Evidence Package that our verifier accepts as valid? Isolated test instance, real verifier code, zero production access. Scope, safe harbor, how to report: challenge.alexproof.de/challenge/sc...
#AISecurity #AgentSecurity #RedTeam #AppSec#Challenge
can you forge an Evidence Package that our verifier accepts as valid? Isolated test instance, real verifier code, zero production access. Scope, safe harbor, how to report: challenge.alexproof.de/challenge/sc...
#AISecurity #AgentSecurity #RedTeam #AppSec#Challenge
Biggest challenge: have both a lab environment for training and one that is suitable for live client testing at the same time.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris
#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris
#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 7:57 PM
Biggest challenge: have both a lab environment for training and one that is suitable for live client testing at the same time.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris
#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris
#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
Supply Chain Security: Your Dependencies Are Your Biggest Attack Surface
Supply chain security is your biggest AppSec challenge. Learn how dependency attacks work, why SCA alone is not enough, and how to defend your full attack surface.
https://securstack.io/blog/en/supply-chain-security-you…
Supply chain security is your biggest AppSec challenge. Learn how dependency attacks work, why SCA alone is not enough, and how to defend your full attack surface.
https://securstack.io/blog/en/supply-chain-security-you…
August 27, 2026 at 12:12 PM
Supply Chain Security: Your Dependencies Are Your Biggest Attack Surface
Supply chain security is your biggest AppSec challenge. Learn how dependency attacks work, why SCA alone is not enough, and how to defend your full attack surface.
https://securstack.io/blog/en/supply-chain-security-you…
Supply chain security is your biggest AppSec challenge. Learn how dependency attacks work, why SCA alone is not enough, and how to defend your full attack surface.
https://securstack.io/blog/en/supply-chain-security-you…
Thank you to everyone who joined our DEF CON sessions, visited us at AppSec Village, and took on the Factory Floor Challenge.
Let's keep the conversation going. Schedule a demo: https://bit.ly/3OlqE30
#DEFCON #ProductSecurity
Let's keep the conversation going. Schedule a demo: https://bit.ly/3OlqE30
#DEFCON #ProductSecurity
August 12, 2026 at 3:15 PM
Thank you to everyone who joined our DEF CON sessions, visited us at AppSec Village, and took on the Factory Floor Challenge.
Let's keep the conversation going. Schedule a demo: https://bit.ly/3OlqE30
#DEFCON #ProductSecurity
Let's keep the conversation going. Schedule a demo: https://bit.ly/3OlqE30
#DEFCON #ProductSecurity
Full Article: www.technadu.com/external-bug...
Do you agree that prioritization is becoming a bigger challenge than detection? Share your thoughts below.
#BugBounty #AI #AppSec #ThreatDetection #AccessControl #VulnerabilityManagement
Do you agree that prioritization is becoming a bigger challenge than detection? Share your thoughts below.
#BugBounty #AI #AppSec #ThreatDetection #AccessControl #VulnerabilityManagement
External Bug Hunters are a Critical Human Layer in AI-Accelerated Security Operations
Braden Russell, CTO at Bugcrowd, warns that modern security programs now struggle more with prioritization than detection.
www.technadu.com
June 1, 2026 at 1:08 PM
Full Article: www.technadu.com/external-bug...
Do you agree that prioritization is becoming a bigger challenge than detection? Share your thoughts below.
#BugBounty #AI #AppSec #ThreatDetection #AccessControl #VulnerabilityManagement
Do you agree that prioritization is becoming a bigger challenge than detection? Share your thoughts below.
#BugBounty #AI #AppSec #ThreatDetection #AccessControl #VulnerabilityManagement
Are you an OWASP Member? Come by the OWASP Member Lounge at AppSec Lisbon (5B-CCL) on Thursday and Friday, and grab your challenge coin! They're hefty!
If not, join today! owasp.org/membership/
If not, join today! owasp.org/membership/
June 27, 2024 at 11:36 PM
Are you an OWASP Member? Come by the OWASP Member Lounge at AppSec Lisbon (5B-CCL) on Thursday and Friday, and grab your challenge coin! They're hefty!
If not, join today! owasp.org/membership/
If not, join today! owasp.org/membership/
Are you an OWASP Member? Come by the OWASP Member Lounge at AppSec Lisbon (5B-CCL) on Thursday and Friday, and grab your challenge coin! They're hefty!
If not, join today! owasp.org/membership/
If not, join today! owasp.org/membership/
June 26, 2024 at 11:35 PM
Are you an OWASP Member? Come by the OWASP Member Lounge at AppSec Lisbon (5B-CCL) on Thursday and Friday, and grab your challenge coin! They're hefty!
If not, join today! owasp.org/membership/
If not, join today! owasp.org/membership/
Are you an OWASP Member? Come by the OWASP Member Lounge at AppSec Lisbon (5B-CCL) on Thursday and Friday, and grab your challenge coin! They're hefty!
If not, join today! owasp.org/membership/
If not, join today! owasp.org/membership/
June 25, 2024 at 11:35 PM
Are you an OWASP Member? Come by the OWASP Member Lounge at AppSec Lisbon (5B-CCL) on Thursday and Friday, and grab your challenge coin! They're hefty!
If not, join today! owasp.org/membership/
If not, join today! owasp.org/membership/
The CVE dilemma in mobile app testing is real: Easier to share vulnerabilities, harder to test for them, especially on iOS. Mobile app testers know the struggle.
Our blog shows how virtual jailbroken devices solve this critical challenge ↓
buff.ly/xIgYpVM
#AppSec #MAST #MobileTesting #CVE
Our blog shows how virtual jailbroken devices solve this critical challenge ↓
buff.ly/xIgYpVM
#AppSec #MAST #MobileTesting #CVE
The iOS Security Dilemma | Unlock iOS Root Access for CVE Analysis
Mobile app security is more complex than ever with rising CVEs and limited public jailbreaks. Discover how Corellium's virtual hardware helps DevSecOps teams build, test, and secure mobile apps,…
www.corellium.com
July 1, 2025 at 4:02 PM
The CVE dilemma in mobile app testing is real: Easier to share vulnerabilities, harder to test for them, especially on iOS. Mobile app testers know the struggle.
Our blog shows how virtual jailbroken devices solve this critical challenge ↓
buff.ly/xIgYpVM
#AppSec #MAST #MobileTesting #CVE
Our blog shows how virtual jailbroken devices solve this critical challenge ↓
buff.ly/xIgYpVM
#AppSec #MAST #MobileTesting #CVE
#Healthcare M&A means new challenges for mobile app security 🏥
Acquired apps bring new challenges, especially around HIPAA compliance and PHI protection. Static analysis isn't enough when you're dealing with real-time patient data.
Learn more: buff.ly/iHVKEw2
#DataSecurity #Compliance #AppSec
Acquired apps bring new challenges, especially around HIPAA compliance and PHI protection. Static analysis isn't enough when you're dealing with real-time patient data.
Learn more: buff.ly/iHVKEw2
#DataSecurity #Compliance #AppSec
Healthcare Mergers and Acquisitions Increase Risks for Mobile Application Development
Hospitals are merging, but integrating mobile apps securely is a challenge. Discover how Corellium helps healthcare organizations accelerate secure mobile app development and achieve HIPAA compliance…
buff.ly
June 25, 2025 at 4:07 PM
#Healthcare M&A means new challenges for mobile app security 🏥
Acquired apps bring new challenges, especially around HIPAA compliance and PHI protection. Static analysis isn't enough when you're dealing with real-time patient data.
Learn more: buff.ly/iHVKEw2
#DataSecurity #Compliance #AppSec
Acquired apps bring new challenges, especially around HIPAA compliance and PHI protection. Static analysis isn't enough when you're dealing with real-time patient data.
Learn more: buff.ly/iHVKEw2
#DataSecurity #Compliance #AppSec
🎄 Want to boost your AppSec skills this season?
Here’s your Advent challenge: pick a codebase and read its code for one hour every day.
By the end of the month, you’ll be amazed at how much you’ve learned! 🚀
#AdventOfCodeReview #AppSec #CodeReview
Here’s your Advent challenge: pick a codebase and read its code for one hour every day.
By the end of the month, you’ll be amazed at how much you’ve learned! 🚀
#AdventOfCodeReview #AppSec #CodeReview
November 17, 2024 at 11:41 PM
🎄 Want to boost your AppSec skills this season?
Here’s your Advent challenge: pick a codebase and read its code for one hour every day.
By the end of the month, you’ll be amazed at how much you’ve learned! 🚀
#AdventOfCodeReview #AppSec #CodeReview
Here’s your Advent challenge: pick a codebase and read its code for one hour every day.
By the end of the month, you’ll be amazed at how much you’ve learned! 🚀
#AdventOfCodeReview #AppSec #CodeReview
🕵️♂️ Something strange is happening at Meow Wolf’s Omega Mart. Join Semgrep to challenge your perception of the limits of AppSec reality in the agentic era on Tuesday, August 5th from 6-9 pm.
🎟️ Register: semgrep.dev/events/omega...
#HackerSummerCamp #Semgrep #OmegaMart #MeowWolf #AppSec #BlackHat
🎟️ Register: semgrep.dev/events/omega...
#HackerSummerCamp #Semgrep #OmegaMart #MeowWolf #AppSec #BlackHat
July 21, 2025 at 5:00 PM
🕵️♂️ Something strange is happening at Meow Wolf’s Omega Mart. Join Semgrep to challenge your perception of the limits of AppSec reality in the agentic era on Tuesday, August 5th from 6-9 pm.
🎟️ Register: semgrep.dev/events/omega...
#HackerSummerCamp #Semgrep #OmegaMart #MeowWolf #AppSec #BlackHat
🎟️ Register: semgrep.dev/events/omega...
#HackerSummerCamp #Semgrep #OmegaMart #MeowWolf #AppSec #BlackHat
Fintechs face a tough challenge: innovate fast and stay compliant. Join Elliot Colquhoun, VP of Information Security and IT at Airwallex and Daghan Altas to explore how automated AppSec can help you do both.
📅 April 15 | 🕘 9am PT
👉 Register now: semgrep.dev/events/how-f...
📅 April 15 | 🕘 9am PT
👉 Register now: semgrep.dev/events/how-f...
Semgrep | Scaling Securely: How Fintechs Can Stay Ahead of Threats & Regulations
Join experts from Airwallex and Semgrep in this webinar to explore how fintechs can automate application security to scale securely, strengthen governance, and stay compliant—without slowing down inno...
semgrep.dev
April 14, 2025 at 4:21 PM
Fintechs face a tough challenge: innovate fast and stay compliant. Join Elliot Colquhoun, VP of Information Security and IT at Airwallex and Daghan Altas to explore how automated AppSec can help you do both.
📅 April 15 | 🕘 9am PT
👉 Register now: semgrep.dev/events/how-f...
📅 April 15 | 🕘 9am PT
👉 Register now: semgrep.dev/events/how-f...
So you think you know web app hacking? Challenge yourself with 55 (and counting) questions that go beyond the basics:
https://tib3rius.com/interview-questions
#Cybersecurity #InfoSec #AppSec #Hacking #BugBounty
https://tib3rius.com/interview-questions
#Cybersecurity #InfoSec #AppSec #Hacking #BugBounty
October 19, 2023 at 6:40 PM
So you think you know web app hacking? Challenge yourself with 55 (and counting) questions that go beyond the basics:
https://tib3rius.com/interview-questions
#Cybersecurity #InfoSec #AppSec #Hacking #BugBounty
https://tib3rius.com/interview-questions
#Cybersecurity #InfoSec #AppSec #Hacking #BugBounty
New video up on YouTube! Solving "Museum" from NahamCon CTF 2023. A fun challenge involving a chain of web exploits.
https://youtu.be/td9eiZ-ndnc
#CyberSecurity #InfoSec #BugBounty #Hacking #AppSec
https://youtu.be/td9eiZ-ndnc
#CyberSecurity #InfoSec #BugBounty #Hacking #AppSec
September 2, 2023 at 4:05 PM
New video up on YouTube! Solving "Museum" from NahamCon CTF 2023. A fun challenge involving a chain of web exploits.
https://youtu.be/td9eiZ-ndnc
#CyberSecurity #InfoSec #BugBounty #Hacking #AppSec
https://youtu.be/td9eiZ-ndnc
#CyberSecurity #InfoSec #BugBounty #Hacking #AppSec
Project lead of "The Firewall Project" seeks feedback on their open-source AppSec tool aiming to challenge enterprise platforms. Despite achieving initial goals, industry experts suggest it can't rival companies like Snyk. Project invites feedback and GitHub stars to gauge potential.
Please tell me all the reasons why I should give up on my FOSS project
Hi everyone,
I'm the project lead for "The Firewall Project." We started this project out of frustration with enterprise AppSec vendors and their pricing. We thought, "Why can't we build an open-so...
reddit.com
April 7, 2025 at 12:42 PM
Project lead of "The Firewall Project" seeks feedback on their open-source AppSec tool aiming to challenge enterprise platforms. Despite achieving initial goals, industry experts suggest it can't rival companies like Snyk. Project invites feedback and GitHub stars to gauge potential.
Detecting vulnerable code in software dependencies is more complex than it seems
www.helpnetsecurity.com/2024/09/18/h...
#Infosec #Security #Cybersecurity #CeptBiro
www.helpnetsecurity.com/2024/09/18/h...
#Infosec #Security #Cybersecurity #CeptBiro
Detecting vulnerable code in software dependencies is more complex than it seems - Help Net Security
A challenge for AppSec teams is figuring out which vulnerabilities in software dependencies should actually be prioritized for remediation.
www.helpnetsecurity.com
September 18, 2024 at 12:49 PM
Detecting vulnerable code in software dependencies is more complex than it seems
www.helpnetsecurity.com/2024/09/18/h...
#Infosec #Security #Cybersecurity #CeptBiro
www.helpnetsecurity.com/2024/09/18/h...
#Infosec #Security #Cybersecurity #CeptBiro
RSAC Fireside Chat: Qwiet AI leverages graph-database technology to reduce AppSec noise
https://sbee.link/r3v8k6fyjd
##Infosec ##Security ##Cybersecurity ##CeptBiro ##RSACFiresideChat ##QwietAI ##GraphDatabaseTechnology ##AppSecNoise
https://sbee.link/r3v8k6fyjd
##Infosec ##Security ##Cybersecurity ##CeptBiro ##RSACFiresideChat ##QwietAI ##GraphDatabaseTechnology ##AppSecNoise
RSAC Fireside Chat: Qwiet AI leverages graph-database technology to reduce AppSec noise | The Last Watchdog
AppSec has never been more challenging. By the same token, AppSec technology is advancing apace to help companies meet this challenge. Related: AppSec market trajectory At RSAC 2024, I sat down with Bruce Snell, cybersecurity strategist at Qwiet.ai,
sbee.link
May 23, 2024 at 11:26 AM
RSAC Fireside Chat: Qwiet AI leverages graph-database technology to reduce AppSec noise
https://sbee.link/r3v8k6fyjd
##Infosec ##Security ##Cybersecurity ##CeptBiro ##RSACFiresideChat ##QwietAI ##GraphDatabaseTechnology ##AppSecNoise
https://sbee.link/r3v8k6fyjd
##Infosec ##Security ##Cybersecurity ##CeptBiro ##RSACFiresideChat ##QwietAI ##GraphDatabaseTechnology ##AppSecNoise
Going live on Nov 5!
Join Tim Erlin from Wallarm as he walks through Q3’s biggest API threats, breaches, and the growing challenge of business logic abuse.
Tune in: www.linkedin.com/events/73817...
#APIsecurity #Wallarm #AppSec
Join Tim Erlin from Wallarm as he walks through Q3’s biggest API threats, breaches, and the growing challenge of business logic abuse.
Tune in: www.linkedin.com/events/73817...
#APIsecurity #Wallarm #AppSec
November 3, 2025 at 10:47 AM
Going live on Nov 5!
Join Tim Erlin from Wallarm as he walks through Q3’s biggest API threats, breaches, and the growing challenge of business logic abuse.
Tune in: www.linkedin.com/events/73817...
#APIsecurity #Wallarm #AppSec
Join Tim Erlin from Wallarm as he walks through Q3’s biggest API threats, breaches, and the growing challenge of business logic abuse.
Tune in: www.linkedin.com/events/73817...
#APIsecurity #Wallarm #AppSec
The ongoing battle between shipping code fast and shipping it securely is a real challenge. Here are some strategies for AppSec teams to manage the risk. www.reversinglabs.com/blog/deadlin... #SecureCode #AppSec #SoftwareDevelopment #DevSecOps #CyberRisk
Deadlines vs. secure code: What AppSec teams can do | ReversingLabs
AI coding and other modern development practices mean flawed code will continue to ship. Here are key recommendations for managing software risk.
www.reversinglabs.com
September 24, 2025 at 7:57 PM
The ongoing battle between shipping code fast and shipping it securely is a real challenge. Here are some strategies for AppSec teams to manage the risk. www.reversinglabs.com/blog/deadlin... #SecureCode #AppSec #SoftwareDevelopment #DevSecOps #CyberRisk
If you are attending the OWASP Global AppSec 2025 conference in Barcelona and if you are an OWASP member you can grab a challenge coin 🪙 from the members lounge (room 111)!
You can also join OWASP as a member at the conference!
👇
You can also join OWASP as a member at the conference!
👇
May 29, 2025 at 12:22 PM
If you are attending the OWASP Global AppSec 2025 conference in Barcelona and if you are an OWASP member you can grab a challenge coin 🪙 from the members lounge (room 111)!
You can also join OWASP as a member at the conference!
👇
You can also join OWASP as a member at the conference!
👇
#SecureByDesign: "Google's Blueprint for a High-Assurance Web Framework" - how Google addresses the challenge of preventing vulnerabilities from occurring in the first place through careful design, rigorous testing & a commitment to ongoing security:
#AppSec
bughunters.google.com/blog/6644316...
#AppSec
bughunters.google.com/blog/6644316...
Blog: Secure by Design: Google's Blueprint for a High-Assurance Web Framework
Learn more about how Google has created and deployed a high-assurance web framework that almost completely eliminates exploitable web vulnerabilities.
bughunters.google.com
February 5, 2025 at 8:42 AM
#SecureByDesign: "Google's Blueprint for a High-Assurance Web Framework" - how Google addresses the challenge of preventing vulnerabilities from occurring in the first place through careful design, rigorous testing & a commitment to ongoing security:
#AppSec
bughunters.google.com/blog/6644316...
#AppSec
bughunters.google.com/blog/6644316...
Alert Fatigue and Talent Gaps Fuel AppSec Weaknesses
The current status of AppSec presents a significant challenge for many organizations in improving their application security.
#hackernews #news
The current status of AppSec presents a significant challenge for many organizations in improving their application security.
#hackernews #news
Alert Fatigue and Talent Gaps Fuel AppSec Weaknesses
The current status of AppSec presents a significant challenge for many organizations in improving their application security.
securityboulevard.com
July 30, 2025 at 9:19 AM
Alert Fatigue and Talent Gaps Fuel AppSec Weaknesses
The current status of AppSec presents a significant challenge for many organizations in improving their application security.
#hackernews #news
The current status of AppSec presents a significant challenge for many organizations in improving their application security.
#hackernews #news
New article dropped, "Attackers Exploit Windows Flaws and Signed Software for SYSTEM Privileges"
deepfeedai.com/article/the-...
#appsec #security #cybersec #vulnerability #cve #tech #hacking #hacked #supplychain #threats
deepfeedai.com/article/the-...
#appsec #security #cybersec #vulnerability #cve #tech #hacking #hacked #supplychain #threats
Attackers Exploit Windows Flaws and Signed Software for SYSTEM Privileges — Deep Feed AI
Attackers are leveraging both classic Windows vulnerabilities and the insidious abuse of signed software to achieve SYSTEM privileges, presenting a complex challenge for defenders.
deepfeedai.com
April 16, 2026 at 2:33 PM
New article dropped, "Attackers Exploit Windows Flaws and Signed Software for SYSTEM Privileges"
deepfeedai.com/article/the-...
#appsec #security #cybersec #vulnerability #cve #tech #hacking #hacked #supplychain #threats
deepfeedai.com/article/the-...
#appsec #security #cybersec #vulnerability #cve #tech #hacking #hacked #supplychain #threats