XML parsing in Python can expose applications to severe security vulnerabilities, including denial of service #attacks, local file access, and firewall circumvention.
nocomplexity.github.io/pythonsecuri...
#python #code is not #securebydefault #pydata
nocomplexity.github.io/pythonsecuri...
#python #code is not #securebydefault #pydata
June 17, 2026 at 6:15 PM
XML parsing in Python can expose applications to severe security vulnerabilities, including denial of service #attacks, local file access, and firewall circumvention.
nocomplexity.github.io/pythonsecuri...
#python #code is not #securebydefault #pydata
nocomplexity.github.io/pythonsecuri...
#python #code is not #securebydefault #pydata
Too many teams sprint to launch, cross their fingers, and call it “shipping.” That’s not bold — it’s betting your future on luck.
#ShipSecurely #SecureByDefault
#ShipSecurely #SecureByDefault
August 14, 2025 at 3:37 PM
Too many teams sprint to launch, cross their fingers, and call it “shipping.” That’s not bold — it’s betting your future on luck.
#ShipSecurely #SecureByDefault
#ShipSecurely #SecureByDefault
Speaking at #CollabSummit today at 15:30!
Join me for “Embracing #SecureByDefault with #MicrosoftPurview” 🔐
✔️ Sensitivity labeling
✔️ Auto-labeling
✔️ SharePoint/Teams defaults
✔️ User adoption tips
Let’s make security seamless 💡
📍 buff.ly/x8329Zh
#Microsoft365
Join me for “Embracing #SecureByDefault with #MicrosoftPurview” 🔐
✔️ Sensitivity labeling
✔️ Auto-labeling
✔️ SharePoint/Teams defaults
✔️ User adoption tips
Let’s make security seamless 💡
📍 buff.ly/x8329Zh
#Microsoft365
May 27, 2025 at 11:04 AM
Speaking at #CollabSummit today at 15:30!
Join me for “Embracing #SecureByDefault with #MicrosoftPurview” 🔐
✔️ Sensitivity labeling
✔️ Auto-labeling
✔️ SharePoint/Teams defaults
✔️ User adoption tips
Let’s make security seamless 💡
📍 buff.ly/x8329Zh
#Microsoft365
Join me for “Embracing #SecureByDefault with #MicrosoftPurview” 🔐
✔️ Sensitivity labeling
✔️ Auto-labeling
✔️ SharePoint/Teams defaults
✔️ User adoption tips
Let’s make security seamless 💡
📍 buff.ly/x8329Zh
#Microsoft365
Around the country, Flock cameras have become a source of privacy concerns for parents and teachers alike. IST’s @michaelfklein.bsky.social joined the K-12 Tech Talk Podcast to weigh in on the recent controversy, impacts on schools, and how #securebydefault could be the solution.
🛡️ Listen now:
🛡️ Listen now:
Episode 251 - Inside the Flock Controversy with Mark Keierleber and Michael Klein
open.spotify.com
February 25, 2026 at 10:52 PM
Around the country, Flock cameras have become a source of privacy concerns for parents and teachers alike. IST’s @michaelfklein.bsky.social joined the K-12 Tech Talk Podcast to weigh in on the recent controversy, impacts on schools, and how #securebydefault could be the solution.
🛡️ Listen now:
🛡️ Listen now:
Privacy first, security always isn’t a slogan. It’s the design line between trust and extraction.
I've just dropped my latest blog post here: wp.me/p19z04-3SE
#PrivacyFirst #SecurityAlways #Cybersecurity #PrivacyByDesign #DataProtection #SecureByDefault
I've just dropped my latest blog post here: wp.me/p19z04-3SE
#PrivacyFirst #SecurityAlways #Cybersecurity #PrivacyByDesign #DataProtection #SecureByDefault
Privacy First Security Always: Building Trust with Users
Examine the challenges of privacy first security always and why companies must prioritize ethical data practices.
wp.me
December 30, 2025 at 1:42 AM
Privacy first, security always isn’t a slogan. It’s the design line between trust and extraction.
I've just dropped my latest blog post here: wp.me/p19z04-3SE
#PrivacyFirst #SecurityAlways #Cybersecurity #PrivacyByDesign #DataProtection #SecureByDefault
I've just dropped my latest blog post here: wp.me/p19z04-3SE
#PrivacyFirst #SecurityAlways #Cybersecurity #PrivacyByDesign #DataProtection #SecureByDefault
Discover why both Secure by Design and Secure by Default are essential for robust AppSec. jpmellojr.blogspot.com/2025/02/secu... #AppSec #SecureByDesign #SecureByDefault #SoftwareSecurity #CISA #ApplicationSecurity
Secure by Design and Secure by Default: You need both to boost AppSec
Discover why both Secure by Design and Secure by Default are essential for robust AppSec. more
jpmellojr.blogspot.com
February 5, 2025 at 5:04 PM
Discover why both Secure by Design and Secure by Default are essential for robust AppSec. jpmellojr.blogspot.com/2025/02/secu... #AppSec #SecureByDesign #SecureByDefault #SoftwareSecurity #CISA #ApplicationSecurity
On June 12th, Matt will be joining a panel at IMC's IoT Days Summer Conference to discuss how global manufacturers can operationalize security throughout the software supply chain.
Reserve your spot www.bigmarker.com/horizon-hous...
#IoTSecurity #SecureByDefault #SoftwareSupplyChain
Reserve your spot www.bigmarker.com/horizon-hous...
#IoTSecurity #SecureByDefault #SoftwareSupplyChain
Track 3: Security by Design/Default: Breach Defense as Embedded Concept
IoT design principles that embrace security are absolutely critical in today’s attack environments, with choices to be considered from concept through the product life cycle. Moving security from…
www.bigmarker.com
June 3, 2025 at 5:26 PM
On June 12th, Matt will be joining a panel at IMC's IoT Days Summer Conference to discuss how global manufacturers can operationalize security throughout the software supply chain.
Reserve your spot www.bigmarker.com/horizon-hous...
#IoTSecurity #SecureByDefault #SoftwareSupplyChain
Reserve your spot www.bigmarker.com/horizon-hous...
#IoTSecurity #SecureByDefault #SoftwareSupplyChain
I'm building a new Bun Security course
- SecureByDesign and SecureByDefault are a CISA and OpenSSF priority
- Command Injection and Path Traversal are also highly exploited
- Supply Chain Security has had significant impact on opensource
Sounds interesting?
- SecureByDesign and SecureByDefault are a CISA and OpenSSF priority
- Command Injection and Path Traversal are also highly exploited
- Supply Chain Security has had significant impact on opensource
Sounds interesting?
February 18, 2025 at 4:01 PM
I'm building a new Bun Security course
- SecureByDesign and SecureByDefault are a CISA and OpenSSF priority
- Command Injection and Path Traversal are also highly exploited
- Supply Chain Security has had significant impact on opensource
Sounds interesting?
- SecureByDesign and SecureByDefault are a CISA and OpenSSF priority
- Command Injection and Path Traversal are also highly exploited
- Supply Chain Security has had significant impact on opensource
Sounds interesting?
AI Security #9
Security shouldn't be an opt-in feature.
The safest defaults are the ones that protect developers before they realize they need protection.
#AISecurity #SecureByDefault #Gavio
Security shouldn't be an opt-in feature.
The safest defaults are the ones that protect developers before they realize they need protection.
#AISecurity #SecureByDefault #Gavio
July 4, 2026 at 7:03 PM
AI Security #9
Security shouldn't be an opt-in feature.
The safest defaults are the ones that protect developers before they realize they need protection.
#AISecurity #SecureByDefault #Gavio
Security shouldn't be an opt-in feature.
The safest defaults are the ones that protect developers before they realize they need protection.
#AISecurity #SecureByDefault #Gavio
🚨 New Blog: "25 Mistakes You May Be Making with Sensitivity Labels"
Purview is powerful but complex. Drawing from my experience, I’m sharing the most common pitfalls & how to avoid them.
👉 wix.to/i0eZsJg
#MicrosoftPurview #SensitivityLabels #SecureByDefault
Purview is powerful but complex. Drawing from my experience, I’m sharing the most common pitfalls & how to avoid them.
👉 wix.to/i0eZsJg
#MicrosoftPurview #SensitivityLabels #SecureByDefault
25 mistakes you may be making with your sensitivity labels
With Microsoft Purview’s "Secure by Default" initiative from the engineering team at Microsoft, creating and publishing sensitivity labels has become simpler and more efficient. Now, you can cover all...
wix.to
November 25, 2024 at 10:36 AM
🚨 New Blog: "25 Mistakes You May Be Making with Sensitivity Labels"
Purview is powerful but complex. Drawing from my experience, I’m sharing the most common pitfalls & how to avoid them.
👉 wix.to/i0eZsJg
#MicrosoftPurview #SensitivityLabels #SecureByDefault
Purview is powerful but complex. Drawing from my experience, I’m sharing the most common pitfalls & how to avoid them.
👉 wix.to/i0eZsJg
#MicrosoftPurview #SensitivityLabels #SecureByDefault
How to make Infrastructure as Code secure by default
www.helpnetsecurity.com/2024/09/13/i...
#Infosec #Security #Cybersecurity #CeptBiro #InfrastructureAsCode #SecureByDefault
www.helpnetsecurity.com/2024/09/13/i...
#Infosec #Security #Cybersecurity #CeptBiro #InfrastructureAsCode #SecureByDefault
How to make Infrastructure as Code secure by default - Help Net Security
IaC is now widely used in DevOps to automate infrastructure management and provisioning with machine-readable files.
www.helpnetsecurity.com
September 13, 2024 at 1:36 PM
How to make Infrastructure as Code secure by default
www.helpnetsecurity.com/2024/09/13/i...
#Infosec #Security #Cybersecurity #CeptBiro #InfrastructureAsCode #SecureByDefault
www.helpnetsecurity.com/2024/09/13/i...
#Infosec #Security #Cybersecurity #CeptBiro #InfrastructureAsCode #SecureByDefault
Secure by Default: What It Means for the Modern Enterprise
www.securityweek.com/secure-by-de...
#Infosec #Security #Cybersecurity #CeptBiro #SecureByDefault
www.securityweek.com/secure-by-de...
#Infosec #Security #Cybersecurity #CeptBiro #SecureByDefault
Secure by Default: What It Means for the Modern Enterprise
What does “secure by default” mean for the average company as you implement security systems and protocols?
www.securityweek.com
August 7, 2024 at 2:19 PM
Secure by Default: What It Means for the Modern Enterprise
www.securityweek.com/secure-by-de...
#Infosec #Security #Cybersecurity #CeptBiro #SecureByDefault
www.securityweek.com/secure-by-de...
#Infosec #Security #Cybersecurity #CeptBiro #SecureByDefault
September 6, 2025 at 9:18 PM
So, are LLM firewalls worth it?
Yes — if you know what you’re buying: bumpers for the obvious stuff.
No — if you expect them to “solve” AI security.
Security is everyone’s job. Firewalls don’t change that.
#SecureByDefault #AISecurity
Yes — if you know what you’re buying: bumpers for the obvious stuff.
No — if you expect them to “solve” AI security.
Security is everyone’s job. Firewalls don’t change that.
#SecureByDefault #AISecurity
August 27, 2025 at 3:31 PM
So, are LLM firewalls worth it?
Yes — if you know what you’re buying: bumpers for the obvious stuff.
No — if you expect them to “solve” AI security.
Security is everyone’s job. Firewalls don’t change that.
#SecureByDefault #AISecurity
Yes — if you know what you’re buying: bumpers for the obvious stuff.
No — if you expect them to “solve” AI security.
Security is everyone’s job. Firewalls don’t change that.
#SecureByDefault #AISecurity
We’re building a community of founders, security leaders, and builders who believe secure by default should be the norm.
If that’s you, pull up a chair. Let’s raise the bar together.
#ShipSecurely #SecureByDefault
If that’s you, pull up a chair. Let’s raise the bar together.
#ShipSecurely #SecureByDefault
August 14, 2025 at 3:40 PM
We’re building a community of founders, security leaders, and builders who believe secure by default should be the norm.
If that’s you, pull up a chair. Let’s raise the bar together.
#ShipSecurely #SecureByDefault
If that’s you, pull up a chair. Let’s raise the bar together.
#ShipSecurely #SecureByDefault
Lock down your #criticalInfrastructure, #CISA begs admins
www.theregister.com/2025/08/14/c...
Urging companies with #operationalTechnology environments to set a better #cybersecurity posture
#InfoSec #VulnerabilityManagement #SecureByDefault #SecureByDesign
www.theregister.com/2025/08/14/c...
Urging companies with #operationalTechnology environments to set a better #cybersecurity posture
#InfoSec #VulnerabilityManagement #SecureByDefault #SecureByDesign
CISA begs operational technology admins to lock down
: The agency offered some tips for operational technology environments, where attacks are rising
www.theregister.com
August 15, 2025 at 10:49 AM
Lock down your #criticalInfrastructure, #CISA begs admins
www.theregister.com/2025/08/14/c...
Urging companies with #operationalTechnology environments to set a better #cybersecurity posture
#InfoSec #VulnerabilityManagement #SecureByDefault #SecureByDesign
www.theregister.com/2025/08/14/c...
Urging companies with #operationalTechnology environments to set a better #cybersecurity posture
#InfoSec #VulnerabilityManagement #SecureByDefault #SecureByDesign
Exciting news from @GoogleChrome as they announce the replacement of the lock icon with a new "tune" icon, emphasizing that security should be the default state. #SecureByDefault 🔒 https://blog.chromium.org/2023/05/an-update-on-lock-icon.html
Chromium Blog: An Update on the Lock Icon
blog.chromium.org
May 3, 2023 at 4:24 AM
Exciting news from @GoogleChrome as they announce the replacement of the lock icon with a new "tune" icon, emphasizing that security should be the default state. #SecureByDefault 🔒 https://blog.chromium.org/2023/05/an-update-on-lock-icon.html
🤯 A few lines of insecure code.
A misplaced permission.
A centralized vault.
That’s all it takes.
IronWeave decentralizes by design—no vaults to break, no single key to steal. 🔑 #SecureByDefault #Web3
A misplaced permission.
A centralized vault.
That’s all it takes.
IronWeave decentralizes by design—no vaults to break, no single key to steal. 🔑 #SecureByDefault #Web3
#Hacktivity Report May 30, 2025
Read high-profile stories on cyber attacks, ransomware, identity theft & other cyber crimes. IronWeave offers a path to data privacy and security
blog.ironweave.io
June 6, 2025 at 7:26 PM
🤯 A few lines of insecure code.
A misplaced permission.
A centralized vault.
That’s all it takes.
IronWeave decentralizes by design—no vaults to break, no single key to steal. 🔑 #SecureByDefault #Web3
A misplaced permission.
A centralized vault.
That’s all it takes.
IronWeave decentralizes by design—no vaults to break, no single key to steal. 🔑 #SecureByDefault #Web3
Some changes to the ingress-nginx defaults to improve security for all! 👏
If you still require any of these features you are able to override these default and turn them back on.
#SecureByDefault
If you still require any of these features you are able to override these default and turn them back on.
#SecureByDefault
November 15, 2024 at 12:30 AM
Some changes to the ingress-nginx defaults to improve security for all! 👏
If you still require any of these features you are able to override these default and turn them back on.
#SecureByDefault
If you still require any of these features you are able to override these default and turn them back on.
#SecureByDefault
Don’t miss your chance to hear Matt Wyckhouse join leading voices in the IoT security ecosystem to explore how secure-by-default principles are shaping the future of connected products.
Register here: www.bigmarker.com/horizon-hous...
#IoT #SupplyChainSecurity #SecureByDefault #IMC2025
Register here: www.bigmarker.com/horizon-hous...
#IoT #SupplyChainSecurity #SecureByDefault #IMC2025
Track 3: Security by Design/Default: Breach Defense as Embedded Concept
IoT design principles that embrace security are absolutely critical in today’s attack environments, with choices to be considered from concept through the product life cycle. Moving security from…
www.bigmarker.com
June 11, 2025 at 4:27 PM
Don’t miss your chance to hear Matt Wyckhouse join leading voices in the IoT security ecosystem to explore how secure-by-default principles are shaping the future of connected products.
Register here: www.bigmarker.com/horizon-hous...
#IoT #SupplyChainSecurity #SecureByDefault #IMC2025
Register here: www.bigmarker.com/horizon-hous...
#IoT #SupplyChainSecurity #SecureByDefault #IMC2025
🚀 NEW #CriticalEffectDC talk!
🛠️ Track III: Tactical Mastery
Secure by Default - Closing the Loop
Schneider Electric Cybersecurity VP Andrew Kling returns to the #SecurebyDefault approach after gov programs as CISA’s Secure campaigns.
➡️ Register today: securityandtechnology.org/critical-eff...
🛠️ Track III: Tactical Mastery
Secure by Default - Closing the Loop
Schneider Electric Cybersecurity VP Andrew Kling returns to the #SecurebyDefault approach after gov programs as CISA’s Secure campaigns.
➡️ Register today: securityandtechnology.org/critical-eff...
May 28, 2025 at 8:58 PM
🚀 NEW #CriticalEffectDC talk!
🛠️ Track III: Tactical Mastery
Secure by Default - Closing the Loop
Schneider Electric Cybersecurity VP Andrew Kling returns to the #SecurebyDefault approach after gov programs as CISA’s Secure campaigns.
➡️ Register today: securityandtechnology.org/critical-eff...
🛠️ Track III: Tactical Mastery
Secure by Default - Closing the Loop
Schneider Electric Cybersecurity VP Andrew Kling returns to the #SecurebyDefault approach after gov programs as CISA’s Secure campaigns.
➡️ Register today: securityandtechnology.org/critical-eff...
2026 - Day 30 #MicrosoftLearn achievement of the day: "Resilient foundations with #Windows11 Pro" badge! I hope this inspires you to start your own @microsoftlearn.bsky.social journey! #AlwaysLearning #MVP #365DaysofLearn #SecureByDefault learn.microsoft.com/api/achievem... #MSLearnBadge
Resilient foundations with Windows 11 Pro
learn.microsoft.com
January 30, 2026 at 5:30 PM
2026 - Day 30 #MicrosoftLearn achievement of the day: "Resilient foundations with #Windows11 Pro" badge! I hope this inspires you to start your own @microsoftlearn.bsky.social journey! #AlwaysLearning #MVP #365DaysofLearn #SecureByDefault learn.microsoft.com/api/achievem... #MSLearnBadge