GEMINI 4 CARBON: THE AI MODEL BUILT TO FIND AND FIX SECURITY FLAWS
#Gemini4Carbon #ArtificialIntelligence #AI #Cybersecurity #CyberDefense #AISecurity #SoftwareSecurity #VulnerabilityResearch #SecureCoding #AIModels #TechNews #AgenticAI #GoogleDeepMind #ArtestoMellivoura #TechnologyExplained
#Gemini4Carbon #ArtificialIntelligence #AI #Cybersecurity #CyberDefense #AISecurity #SoftwareSecurity #VulnerabilityResearch #SecureCoding #AIModels #TechNews #AgenticAI #GoogleDeepMind #ArtestoMellivoura #TechnologyExplained
November 4, 2026 at 6:34 AM
GEMINI 4 CARBON: THE AI MODEL BUILT TO FIND AND FIX SECURITY FLAWS
#Gemini4Carbon #ArtificialIntelligence #AI #Cybersecurity #CyberDefense #AISecurity #SoftwareSecurity #VulnerabilityResearch #SecureCoding #AIModels #TechNews #AgenticAI #GoogleDeepMind #ArtestoMellivoura #TechnologyExplained
#Gemini4Carbon #ArtificialIntelligence #AI #Cybersecurity #CyberDefense #AISecurity #SoftwareSecurity #VulnerabilityResearch #SecureCoding #AIModels #TechNews #AgenticAI #GoogleDeepMind #ArtestoMellivoura #TechnologyExplained
A small coding mistake can create a big healthcare privacy risk. Insecure APIs, exposed logs, and weak access controls can put sensitive patient information at risk.
Are you building privacy into every stage? Explore practical HIPAA-conscious coding practices
medium.com/@hipaacompli... #SecureCoding
Are you building privacy into every stage? Explore practical HIPAA-conscious coding practices
medium.com/@hipaacompli... #SecureCoding
October 30, 2026 at 11:20 AM
A small coding mistake can create a big healthcare privacy risk. Insecure APIs, exposed logs, and weak access controls can put sensitive patient information at risk.
Are you building privacy into every stage? Explore practical HIPAA-conscious coding practices
medium.com/@hipaacompli... #SecureCoding
Are you building privacy into every stage? Explore practical HIPAA-conscious coding practices
medium.com/@hipaacompli... #SecureCoding
Design your security controls around an agent's effective capabilities, not just your expectations of its behaviour.
#AppSec #AIAgents #SecureCoding #DevSecStation
5/5
#AppSec #AIAgents #SecureCoding #DevSecStation
5/5
October 26, 2026 at 6:22 PM
Design your security controls around an agent's effective capabilities, not just your expectations of its behaviour.
#AppSec #AIAgents #SecureCoding #DevSecStation
5/5
#AppSec #AIAgents #SecureCoding #DevSecStation
5/5
October 24, 2026 at 6:38 PM
Writing prompts or async handlers? Check what each one resolves at answer time. Full advisory: github.com/jupyterlab/j... #AppSec #SecureCoding
Command link trust prompt in JupyterLab can trust a document other than the one clicked
## Description A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel...
github.com
October 16, 2026 at 8:37 PM
Writing prompts or async handlers? Check what each one resolves at answer time. Full advisory: github.com/jupyterlab/j... #AppSec #SecureCoding
Season 2 of DevSec Station is about AI, agents, application security, and building systems that can survive being surprised.
🎧 Episode 1: **Your AI Worked 59 Times. What About the 60th?**
Listen or watch here: https://twp.ai/9Obuiw
#DevSecStation #AppSec #AISecurity #SecureCoding
4/4
🎧 Episode 1: **Your AI Worked 59 Times. What About the 60th?**
Listen or watch here: https://twp.ai/9Obuiw
#DevSecStation #AppSec #AISecurity #SecureCoding
4/4
youtu.be
Your AI Worked 59 Times. What About the 60th?
twp.ai
October 8, 2026 at 4:01 PM
Season 2 of DevSec Station is about AI, agents, application security, and building systems that can survive being surprised.
🎧 Episode 1: **Your AI Worked 59 Times. What About the 60th?**
Listen or watch here: https://twp.ai/9Obuiw
#DevSecStation #AppSec #AISecurity #SecureCoding
4/4
🎧 Episode 1: **Your AI Worked 59 Times. What About the 60th?**
Listen or watch here: https://twp.ai/9Obuiw
#DevSecStation #AppSec #AISecurity #SecureCoding
4/4
Your query defines the operation. Your user supplies the value. Keep that boundary clear with Xojo’s parameterized queries.
https://documentation.xojo.com/api/databases/database.html#database-selectsql
#SoftwareDesign #SQL #SecureCoding #Xojo
https://documentation.xojo.com/api/databases/database.html#database-selectsql
#SoftwareDesign #SQL #SecureCoding #Xojo
October 7, 2026 at 3:47 PM
Your query defines the operation. Your user supplies the value. Keep that boundary clear with Xojo’s parameterized queries.
https://documentation.xojo.com/api/databases/database.html#database-selectsql
#SoftwareDesign #SQL #SecureCoding #Xojo
https://documentation.xojo.com/api/databases/database.html#database-selectsql
#SoftwareDesign #SQL #SecureCoding #Xojo
October 6, 2026 at 6:30 PM
October 6, 2026 at 6:23 PM
Snyk Code ranks first among 10 tools in a review that values helping teams fix issues over generating more alerts.
A useful distinction—but the ranking comes f…
https://en.hacks.gr/snyk-code-stin-koryfi-tis-listas-me-10-ergaleia-elegchoy-asfaleias-kodika/
#SnykCode #SecureCoding #SoftwareSecurity
A useful distinction—but the ranking comes f…
https://en.hacks.gr/snyk-code-stin-koryfi-tis-listas-me-10-ergaleia-elegchoy-asfaleias-kodika/
#SnykCode #SecureCoding #SoftwareSecurity
October 6, 2026 at 7:59 AM
Snyk Code ranks first among 10 tools in a review that values helping teams fix issues over generating more alerts.
A useful distinction—but the ranking comes f…
https://en.hacks.gr/snyk-code-stin-koryfi-tis-listas-me-10-ergaleia-elegchoy-asfaleias-kodika/
#SnykCode #SecureCoding #SoftwareSecurity
A useful distinction—but the ranking comes f…
https://en.hacks.gr/snyk-code-stin-koryfi-tis-listas-me-10-ergaleia-elegchoy-asfaleias-kodika/
#SnykCode #SecureCoding #SoftwareSecurity
I'm curious what other AppSec and AI practitioners think (that's you).
What security controls do you see as essential for AI agents? And what are we still not sure about? What are your 'may haves'?
Article: https://twp.ai/9Obx3f
#AppSec #AISecurity #SecureCoding #AIAgents
6/6
What security controls do you see as essential for AI agents? And what are we still not sure about? What are your 'may haves'?
Article: https://twp.ai/9Obx3f
#AppSec #AISecurity #SecureCoding #AIAgents
6/6
www.theguardian.com
OpenAI says its review into hacks, including on Australian government sites, is costing $500,000 a day
twp.ai
October 3, 2026 at 4:56 PM
I'm curious what other AppSec and AI practitioners think (that's you).
What security controls do you see as essential for AI agents? And what are we still not sure about? What are your 'may haves'?
Article: https://twp.ai/9Obx3f
#AppSec #AISecurity #SecureCoding #AIAgents
6/6
What security controls do you see as essential for AI agents? And what are we still not sure about? What are your 'may haves'?
Article: https://twp.ai/9Obx3f
#AppSec #AISecurity #SecureCoding #AIAgents
6/6
Who should be responsible when an autonomous agent goes rogue?
🎥 Watch here: https://twp.ai/9Obi3l
#AISecurity #AppSec #AIAgents #SecureCoding
5/5
🎥 Watch here: https://twp.ai/9Obi3l
#AISecurity #AppSec #AIAgents #SecureCoding
5/5
youtu.be
When Your AI Agent Breaks the Law, Who Is Responsible?
twp.ai
October 2, 2026 at 6:19 PM
Who should be responsible when an autonomous agent goes rogue?
🎥 Watch here: https://twp.ai/9Obi3l
#AISecurity #AppSec #AIAgents #SecureCoding
5/5
🎥 Watch here: https://twp.ai/9Obi3l
#AISecurity #AppSec #AIAgents #SecureCoding
5/5
Security review becomes more useful when the threat model leads the way. Mohamed AboElKheir presents a methodology for applying AI without losing the security context that matters.
dcstateofthestack.org
#AppSec #SecureCoding #AI
dcstateofthestack.org
#AppSec #SecureCoding #AI
DC State of the Stack 2026
DC State of the Stack 2026 — Shipping Software in the Age of AI. September 16-17, 2026 in Washington, DC.
dcstateofthestack.org
September 7, 2026 at 1:03 PM
Security review becomes more useful when the threat model leads the way. Mohamed AboElKheir presents a methodology for applying AI without losing the security context that matters.
dcstateofthestack.org
#AppSec #SecureCoding #AI
dcstateofthestack.org
#AppSec #SecureCoding #AI
a.co/d/0g1Y9CEz
1000 cyber security questions written for developers. Authentication, input validation, SQL injection, XSS, API security, firewalls, IDS, cloud security models, IAM, containerization, IoT, and incident response.
#CyberSecurity #SecureCoding #AppSec #DevSecOps
1000 cyber security questions written for developers. Authentication, input validation, SQL injection, XSS, API security, firewalls, IDS, cloud security models, IAM, containerization, IoT, and incident response.
#CyberSecurity #SecureCoding #AppSec #DevSecOps
September 4, 2026 at 2:57 PM
a.co/d/0g1Y9CEz
1000 cyber security questions written for developers. Authentication, input validation, SQL injection, XSS, API security, firewalls, IDS, cloud security models, IAM, containerization, IoT, and incident response.
#CyberSecurity #SecureCoding #AppSec #DevSecOps
1000 cyber security questions written for developers. Authentication, input validation, SQL injection, XSS, API security, firewalls, IDS, cloud security models, IAM, containerization, IoT, and incident response.
#CyberSecurity #SecureCoding #AppSec #DevSecOps
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
August 31, 2026 at 2:50 AM
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
Spot on, Stuart. "Trust, but verify" is the golden rule. Even the cleanest-looking code can hide vulnerabilities or supply chain risks. Never skip the audit! 🛡️ #infosec #securecoding
August 25, 2026 at 6:46 PM
Spot on, Stuart. "Trust, but verify" is the golden rule. Even the cleanest-looking code can hide vulnerabilities or supply chain risks. Never skip the audit! 🛡️ #infosec #securecoding
Whether you develop in-house or work with external development partners, custom software comes with security responsibilities. Build security into your development process from day one...
#CyberSecurity #ApplicationSecurity #AppSec #SecureCoding #OWASP #DevSecOps #SoftwareSecurity #SecurityTraining
#CyberSecurity #ApplicationSecurity #AppSec #SecureCoding #OWASP #DevSecOps #SoftwareSecurity #SecurityTraining
August 25, 2026 at 7:16 AM
Whether you develop in-house or work with external development partners, custom software comes with security responsibilities. Build security into your development process from day one...
#CyberSecurity #ApplicationSecurity #AppSec #SecureCoding #OWASP #DevSecOps #SoftwareSecurity #SecurityTraining
#CyberSecurity #ApplicationSecurity #AppSec #SecureCoding #OWASP #DevSecOps #SoftwareSecurity #SecurityTraining
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
August 21, 2026 at 9:48 PM
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
10. THOU SHALT TRUST NO INPUT FROM THE CROWD.
Validate everything that crosses your boundary. Never assume incoming data knows how to behave. The crowd may be friendly. The payload may not be.
#MVPBuzz #RockYourCode #Security #SecureCoding
Validate everything that crosses your boundary. Never assume incoming data knows how to behave. The crowd may be friendly. The payload may not be.
#MVPBuzz #RockYourCode #Security #SecureCoding
August 20, 2026 at 3:50 PM
10. THOU SHALT TRUST NO INPUT FROM THE CROWD.
Validate everything that crosses your boundary. Never assume incoming data knows how to behave. The crowd may be friendly. The payload may not be.
#MVPBuzz #RockYourCode #Security #SecureCoding
Validate everything that crosses your boundary. Never assume incoming data knows how to behave. The crowd may be friendly. The payload may not be.
#MVPBuzz #RockYourCode #Security #SecureCoding
Most severe CVEs in C and C++ codebases are still memory safety issues. The fix stopped being a language debate a long time ago. Choose a safe language for new components, migrate hot paths first, and let the vulnerability history argue for you. #MemorySafety #SecureCoding #CWE
August 20, 2026 at 10:22 AM
Most severe CVEs in C and C++ codebases are still memory safety issues. The fix stopped being a language debate a long time ago. Choose a safe language for new components, migrate hot paths first, and let the vulnerability history argue for you. #MemorySafety #SecureCoding #CWE
CodeSecCon gathers 1,500+ attendees for a virtual event on secure coding, reducing vulnerabilities, DevSecOps collaboration, and safe AI integration to protect sensitive data. #CodeSecCon #DevSecOps #SecureCoding
Virtual Event Today: CodeSecCon - Secure Your Code and Applications
CodeSecCon brings together more than 1,500 attendees to explore how developers and security professionals can build, secure, and maintain applications more effectively. The event focuses on secure coding, reducing software vulnerabilities, DevSecOps collaboration, and safely integrating AI into applications while minimizing sensitive data exposure. #CodeSecCon #DevSecOps #Auth0 #Wiz #Datadog #WordPress #Schlumberger...
www.hendryadrian.com
August 19, 2026 at 5:15 PM
CodeSecCon gathers 1,500+ attendees for a virtual event on secure coding, reducing vulnerabilities, DevSecOps collaboration, and safe AI integration to protect sensitive data. #CodeSecCon #DevSecOps #SecureCoding
AI can help with code review—but meaningful security outcomes start with the threat model. Mohamed AboElKheir shares a threat-model-first methodology.
dcstateofthestack.org
#AppSec #AI #SecureCoding
dcstateofthestack.org
#AppSec #AI #SecureCoding
DC State of the Stack 2026
DC State of the Stack 2026 — Shipping Software in the Age of AI. September 16-17, 2026 in Washington, DC.
dcstateofthestack.org
August 17, 2026 at 1:02 PM
AI can help with code review—but meaningful security outcomes start with the threat model. Mohamed AboElKheir shares a threat-model-first methodology.
dcstateofthestack.org
#AppSec #AI #SecureCoding
dcstateofthestack.org
#AppSec #AI #SecureCoding
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
August 13, 2026 at 1:57 AM
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
Having received a lot from communities, Lisi is paying it forward by sharing her stories and learning in public.
Her tags: #ProdSec, #AppSec, #DevSecOps, #SecureCoding, #SecurityTesting
She posts on Mastodon as @lisihocke@mastodon.social and blogs at www.lisihocke.com.
Her tags: #ProdSec, #AppSec, #DevSecOps, #SecureCoding, #SecurityTesting
She posts on Mastodon as @lisihocke@mastodon.social and blogs at www.lisihocke.com.
A Tester's Journey
A blog about learning, agile product development and software testing.
www.lisihocke.com
August 11, 2026 at 6:44 AM
Having received a lot from communities, Lisi is paying it forward by sharing her stories and learning in public.
Her tags: #ProdSec, #AppSec, #DevSecOps, #SecureCoding, #SecurityTesting
She posts on Mastodon as @lisihocke@mastodon.social and blogs at www.lisihocke.com.
Her tags: #ProdSec, #AppSec, #DevSecOps, #SecureCoding, #SecurityTesting
She posts on Mastodon as @lisihocke@mastodon.social and blogs at www.lisihocke.com.