#Appsec
LightNews LightNews
kingthorin.bsky.social
@owasp.org #AppSec
November 5, 2026 at 5:15 PM
shehackspurple.bsky.social
Which talk or conference video made you see AppSec differently?

#AppSecThursday #talkAppSectome
November 5, 2026 at 5:22 PM
netbird.bsky.social
CrowdSec AppSec is a web app firewall that inspects every HTTP request for anything malicious.

If you self-host NetBird with NetBird Proxy and CrowdSec, you can put AppSec in front of the NetBird dashboard to further protect it!

netbird.io/knowledge-hu...
November 5, 2026 at 3:49 PM
abbilabs.bsky.social
Northflank's advice after its breach: revoke at the issuing provider, don't just swap the value.

An old key works until OpenAI, Stripe or Supabase kills it. Then check usage.

#infosec #devops #vibecoding #AppSec #indiehackers #buildinpublic #AI #webdev #security #SaaS #cybersecurity #startups
November 2, 2026 at 6:30 AM
opensecurityconf.bsky.social
Ahhhhh, only one more day to go until we see all of you at the Open Security Conference 2026! We are excited. 🤩

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity [lisi]
November 4, 2026 at 8:43 AM
abbilabs.bsky.social
Most RLS reviews only look at select. Check insert and update too: with check (true) means a user can write a row with any user_id, including another user's.

with check ((select auth.uid()) = user_id) on both.

#Supabase #Postgres #vibecoding #AppSec #buildinpublic #Bolt
November 4, 2026 at 12:50 PM
shehackspurple.bsky.social
#DevSecStation #AISecurity #AppSec #DevSecOps
6/6
November 5, 2026 at 9:49 PM
anoubiz.bsky.social
We were about to start coding the Anoubiz platform. But recent security incidents across the industry reminded us that security can't be an afterthought.

So, one more iteration of security engineering before writing the first lines of code. 🔐

#Anoubiz #BuildInPublic #AppSec
November 4, 2026 at 8:29 PM
opensecurityconf.bsky.social
Look into home labs, lots of information shared by the community.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 8:03 PM
opensecurityconf.bsky.social
What changed? Virtualization, containers, networking, hardware and code. Also: hardware prices...
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 7:51 PM
opensecurityconf.bsky.social
The #osco26 opening keynote is about to start! We can't wait to hear about "The Day Everything Stops: Preparing for the Cyber Crisis You Hope Never Comes" by Stephanie Carstensen.

#osco #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 6:25 PM
securestep9.bsky.social
Attending OWASP Global AppSec USA 2026 Conference in San Francisco?

Join me and Arkadii Yakovets (@arkid15r) for a session on automated security testing with OWASP #Nettacker!
👇
owaspglobalappsecusa...
November 4, 2026 at 4:14 PM
opensecurityconf.bsky.social
The more something breaks, the more Jahmel learns how to fix things.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 7:58 PM
opensecurityconf.bsky.social
Everything has their own VLAN, each of them having their own purpose.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 8:34 PM
opensecurityconf.bsky.social
Jahmel learned a lot due to the constraints he faced in the early days.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 7:49 PM
opensecurityconf.bsky.social
If we're in a safe space, we can raise uncomfortable questions, our own uncertainty, not having the right answer.
———
⚠️ The Day Everything Stops: Preparing for the Cyber Crisis You Hope Never Comes - Stephanie Carstensen

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 7:18 PM
abbilabs.bsky.social
Crissy Field checked 159,041 Lovable projects and found tables with email addresses readable without login on 7,403 sites.

No exploit needed: the public Supabase key plus missing or loose RLS.

Test yours logged out with only that key.

#Lovable #Supabase #vibecoding #AppSec #infosec #webdev
November 5, 2026 at 1:35 AM
opensecurityconf.bsky.social
We're about to start the official opening for the Open Security Conference 2026. Our third #osco! Thanks to everyone who supported us on our way so we can all be here together, again. Co-creating this open space for all folks interested in #CyberSecurity. 💜

#osco26 #Security #InfoSec #AppSec [lisi]
November 5, 2026 at 5:57 PM
opensecurityconf.bsky.social
There's no real answer for how to design your own setup. It will depend on your needs.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 8:38 PM
opensecurityconf.bsky.social
Remote access? VPN, Tailscale, Headscale, you have options. Monitoring is hard to do well but crucial.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 8:42 PM
opensecurityconf.bsky.social
The difference is not better people. It is prepared people.
———
⚠️ The Day Everything Stops: Preparing for the Cyber Crisis You Hope Never Comes - Stephanie Carstensen

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 7:22 PM
owasp.org
Looking for your AppSec match?

Meet The Mentor is coming to Global AppSec San Francisco! Think speed dating, but for mentors & mentees. Meet face-to-face, start a conversation, see if you click… and maybe find your perfect mentorship match!
owasp.glueup.com/eve...

#OWASPSanFran26 #GlobalAppSec26
November 1, 2026 at 2:08 PM
opensecurityconf.bsky.social
Have just enough hardware, but helpful stuff. Like a managed switch, giving you a lot more control.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 8:33 PM
opensecurityconf.bsky.social
Running your lab in the cloud or local? Both. Yet it also depends on what you are doing.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 8:04 PM
opensecurityconf.bsky.social
Virtualization allows us to take snapshots, have golden images. Containers are really good for packaging and running applications.
———
🏗️ Building a Penetration Testing Lab in 2026 - Jahmel Harris

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #OTsecurity [lisi]
November 5, 2026 at 8:23 PM