LightNews — News, ranked by scholars

Dominique Righetto

@righettod.eu

📡 OWASP Secure Headers Project: Section about Content-Security-Policy bypasses prevention updated with information related to the "base-uri" directive.

#appsec #appsecurity #owasp_shp #csp

📖 owasp.org/www-project-...

January 14, 2025 at 3:09 PM

Dominique Righetto

@righettod.eu

📡If you use TestSSL to check the TLS configuration of several services, you may find this set of scripts useful:

github.com/righettod/to...
github.com/righettod/to...

#appsec #appsecurity #tls #testssl

January 18, 2025 at 7:59 PM

Dominique Righetto

@righettod.eu

📡 OWASP Secure Headers Project: The "Response Headers" section has been updated with a series of very interesting blog posts about the "Cross-Origin-Embedder-Policy", "Cross-Origin-Opener-Policy" and "Cross-Origin-Resource-Policy" headers.

#appsec #appsecurity #oshp

📖 owasp.org/www-project-...

December 6, 2024 at 7:52 AM

Dominique Righetto

@righettod.eu

📡 OWASP Secure Headers Project: We've redesigned the way statistics are generated and presented. They are now integrated into the main site.

#appsec #appsecurity #owasp_shp

📊 owasp.org/www-project-...

February 22, 2025 at 9:11 AM

Dominique Righetto

@righettod.eu

📡 OWASP Secure Headers Project: For information, we provide a Venom test suite to check the security headers of HTTP responses defined in your web application.

#appsec #appsecurity #oshp

📖 github.com/oshp/oshp-va...

November 16, 2024 at 4:54 PM

Dominique Righetto

@righettod.eu

🧑‍🎓 Learning of the day for me: I discovered that it is possible to leverage the instruction "include" in a XSD schema to perform a SSRF when the schema is parsed by the schema factory.

#appsec #appsecurity #java

June 26, 2025 at 5:08 PM

Talsec

@talsecofficial.bsky.social

Emulators can open games to cheating & piracy. Learn how to detect & protect your Android app. Stay ahead of threats! #GameDev #AppSecurity #Cybersecurity #MobileDev

docs.talsec.app/appsec-artic...

February 28, 2025 at 1:09 PM

usamainnovaes.bsky.social

@usamainnovaes.bsky.social

Comment "AI" I'll send
This AI tool scans it like a real hacker would, finds the weak spots, and gives you a clear report on what to fix. It also includes ready-to-use improvement prompts, so you can patch issues fast.

#WebSecurity #AppSecurity #Developers #WebDevelopment #VibeCoding #Usama

September 20, 2026 at 10:06 AM

Nebraska.Code

@nebraskacode.bsky.social

Eldert Grootenboer, Brian Gorman, and Bob Walker have Sessions on Cloud Computing this July at Nebraska.Code().

nebraskacode.amegala.com

#CloudComputing #Azure #canary #AppSecurity #softwaredeployment #messagingpatterns #LincolnNE #Developer #TechnologyConference

March 26, 2025 at 6:42 PM

harryvuitl.bsky.social

@harryvuitl.bsky.social

Kiểm Tra Quyền Ứng Dụng: Chỉ cấp quyền thật sự cần thiết và rà soát định kỳ.
Nội dung chia sẻ kiến thức, không phải lời khuyên tài chính.
#InterLink #ITLG #ITL #AppSecurity

September 25, 2026 at 5:45 AM

Tanya Janca | SheHacksPurple

@shehackspurple.bsky.social

I received my much anticipated @owasp.org Distinguished Life Time Member Award in the mail. Thank you. ☺️
youtu.be/16j5g4MnZeQ?...

I just received OWASP Distinguished Life Time Member Award in the mail. Thank you. ☺️ #appsecurity

YouTube video by SheHacksPurple

youtu.be

March 26, 2025 at 4:12 PM

Andy

@amonimous.bsky.social

A recent discussion around AI, open source and security. The challenge, how to keep up when AI find vulnerabilities continuously.

#buildinpublic #ai #softwareengineering #cybersecurity #appsecurity #devsecops #cicd #opensource #softwarearchitecture #llm #aidevelopment #continuousdelivery #devops

August 18, 2026 at 3:11 PM

Dominique Righetto

@righettod.eu

📡 OWASP Secure Headers Project: Addition of a new section on modern browsers' support for a large Content-Security-Policy policy.

#appsec #appsecurity #oshp

📖 owasp.org/www-project-...

November 25, 2024 at 5:25 AM

proper-t.bsky.social

@proper-t.bsky.social

Big thanks to @supabase for proactive security checks! Lowered default one-time-password length for forgot-email flows to boost security and align with current standards. #AppSecurity #BuildInPublic #PropTech

September 1, 2025 at 10:55 PM

Dominique Righetto

@righettod.eu

🧑‍🎓 Learning of the day for me: I discovered that browsers (at least Chromium) display an SVG image even if the specified content type is set to XML. The contained JS script is also executed.

#appsec #appsecurity

January 21, 2026 at 7:25 AM

Talsec

@talsecofficial.bsky.social

🛡 Full story: docs.talsec.app/appsec-artic...
#AppSecurity #AndroidDev #CyberSecurity #RASP #AccessibilityTech

May 13, 2025 at 11:58 AM

Nebraska.Code

@nebraskacode.bsky.social

Eldert Grootenboer, Brian Gorman, and Bob Walker have Sessions on Cloud Computing at Nebraska.Code() next week.

nebraskacode.amegala.com

#Microsoft #Nebraska #CloudComputing #Azure #AppSecurity #TechConference #ApplicationDevelopment #TechSecurity #Programming #NetworkingEvent #Canary #software

July 15, 2025 at 5:35 PM

Dominique Righetto

@righettod.eu

💡Discovery of the day for me: Mozilla's new tool for checking a website's configuration in terms of HTTP headers and other aspects of its security.

💻GitHub Repository: github.com/mdn/mdn-http...

🔬Site: developer.mozilla.org/en-US/observ...

#appsec #appsecurity #web

April 13, 2025 at 7:11 AM

Talsec

@talsecofficial.bsky.social

Flutter Security 101: Restricting Installs to Protect Your App from Unofficial Sources | AppSec Articles

docs.talsec.app

January 6, 2025 at 9:45 AM

Dominique Righetto

@righettod.eu

📡 OWASP Secure Headers Project:

- We added information about the HTTP response header "X-DNS-Prefetch-Control".
- We added the tool "shcheck" to the list of analysis tools.

#appsec #appsecurity #owasp_shp

November 5, 2025 at 5:28 AM