#securecoding
LightNews LightNews
artestomellivoura.bsky.social
GPT-6 CYBER: THE AI THAT CAN FIND AND HELP FIX SECURITY FLAWS 🛡️

#GPT6Cyber #Cybersecurity #ArtificialIntelligence #AI #CyberDefense #SoftwareSecurity #VulnerabilityResearch #SecureCoding #AIResearch #LinuxSecurity #Firefox #ThreatIntelligence #TechNews #ArtestoMellivoura #Technology
November 6, 2026 at 7:19 AM
spoint42.bsky.social
SSHole : une étoile, 257 caractères et la leçon de secure coding qu'OpenSSH n'aurait pas dû nous donner blog.gioria.org/fr/devsecops... #OpenSSH #SecureCoding
November 9, 2026 at 12:42 PM
artestomellivoura.bsky.social
GEMINI 4 CARBON: THE AI MODEL BUILT TO FIND AND FIX SECURITY FLAWS

#Gemini4Carbon #ArtificialIntelligence #AI #Cybersecurity #CyberDefense #AISecurity #SoftwareSecurity #VulnerabilityResearch #SecureCoding #AIModels #TechNews #AgenticAI #GoogleDeepMind #ArtestoMellivoura #TechnologyExplained
November 4, 2026 at 6:34 AM
shehackspurple.bsky.social
🎧 Watch on YouTube, stream, or download on your favourite podcast platform.
https://twp.ai/9ObYx3

#AISecurity #SecureCoding #AppSec #DevSecStation
5/5
youtu.be
What Permissions Should You Give an AI Agent?
twp.ai
November 10, 2026 at 12:14 AM
claudiolassala.bsky.social
Part 1 of Faster Without Losing Control. Map the workflow before you accelerate it. The model fills whatever gaps you leave, and it fills them confidently.

lassala.net/2026/11/09/k...

#AI #SecureCoding
Know Your Workflow Before You Accelerate
Put a race engine in a regular car and it will go very fast. It will also go very fast in the wrong direction.
lassala.net
November 9, 2026 at 12:03 PM
hipaacompliantai.bsky.social
A small coding mistake can create a big healthcare privacy risk. Insecure APIs, exposed logs, and weak access controls can put sensitive patient information at risk.
Are you building privacy into every stage? Explore practical HIPAA-conscious coding practices
medium.com/@hipaacompli... #SecureCoding
October 30, 2026 at 11:20 AM
shehackspurple.bsky.social
Design your security controls around an agent's effective capabilities, not just your expectations of its behaviour.

#AppSec #AIAgents #SecureCoding #DevSecStation
5/5
October 26, 2026 at 6:22 PM
shehackspurple.bsky.social
#SoftwareSupplyChainSecurity #AppSec #SecureCoding #PHP
8/8
October 24, 2026 at 6:38 PM
checkmarxzero.bsky.social
Writing prompts or async handlers? Check what each one resolves at answer time. Full advisory: github.com/jupyterlab/j... #AppSec #SecureCoding
Command link trust prompt in JupyterLab can trust a document other than the one clicked
## Description A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel...
github.com
October 16, 2026 at 8:37 PM
shehackspurple.bsky.social
Season 2 of DevSec Station is about AI, agents, application security, and building systems that can survive being surprised.

🎧 Episode 1: **Your AI Worked 59 Times. What About the 60th?**

Listen or watch here: https://twp.ai/9Obuiw

#DevSecStation #AppSec #AISecurity #SecureCoding
4/4
youtu.be
Your AI Worked 59 Times. What About the 60th?
twp.ai
October 8, 2026 at 4:01 PM
shehackspurple.bsky.social
🎥 https://twp.ai/9Obi2r

#AISecurity #AppSec #AIAgents #SecureCoding
4/4
youtu.be
When Your AI Agent Breaks the Law, Who Is Responsible?
twp.ai
October 6, 2026 at 10:50 PM
xojo.com
Your query defines the operation. Your user supplies the value. Keep that boundary clear with Xojo’s parameterized queries.

https://documentation.xojo.com/api/databases/database.html#database-selectsql

#SoftwareDesign #SQL #SecureCoding #Xojo
October 7, 2026 at 3:47 PM
potato.software
#AppSec #Potatosecurity #SecureCoding
14/14
October 6, 2026 at 6:30 PM
shehackspurple.bsky.social
#AppSec #Cybersecurity #SecureCoding
14/14
October 6, 2026 at 6:23 PM
hacks.gr
Snyk Code ranks first among 10 tools in a review that values helping teams fix issues over generating more alerts.

A useful distinction—but the ranking comes f…

https://en.hacks.gr/snyk-code-stin-koryfi-tis-listas-me-10-ergaleia-elegchoy-asfaleias-kodika/

#SnykCode #SecureCoding #SoftwareSecurity
Snyk Code στην κορυφή της λίστας με 10 εργαλεία ελέγχου ασφάλειας κώδικα
October 6, 2026 at 7:59 AM
shehackspurple.bsky.social
I'm curious what other AppSec and AI practitioners think (that's you).

What security controls do you see as essential for AI agents? And what are we still not sure about? What are your 'may haves'?

Article: https://twp.ai/9Obx3f

#AppSec #AISecurity #SecureCoding #AIAgents
6/6
www.theguardian.com
OpenAI says its review into hacks, including on Australian government sites, is costing $500,000 a day
twp.ai
October 3, 2026 at 4:56 PM
shehackspurple.bsky.social
Who should be responsible when an autonomous agent goes rogue?

🎥 Watch here: https://twp.ai/9Obi3l

#AISecurity #AppSec #AIAgents #SecureCoding
5/5
youtu.be
When Your AI Agent Breaks the Law, Who Is Responsible?
twp.ai
October 2, 2026 at 6:19 PM
dcstateofthestack.bsky.social
Security review becomes more useful when the threat model leads the way. Mohamed AboElKheir presents a methodology for applying AI without losing the security context that matters.
dcstateofthestack.org
#AppSec #SecureCoding #AI
DC State of the Stack 2026
DC State of the Stack 2026 — Shipping Software in the Age of AI. September 16-17, 2026 in Washington, DC.
dcstateofthestack.org
September 7, 2026 at 1:03 PM
mammapicks.bsky.social
a.co/d/0g1Y9CEz
1000 cyber security questions written for developers. Authentication, input validation, SQL injection, XSS, API security, firewalls, IDS, cloud security models, IAM, containerization, IoT, and incident response.

#CyberSecurity #SecureCoding #AppSec #DevSecOps
September 4, 2026 at 2:57 PM
shehackspurple.bsky.social
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
August 31, 2026 at 2:50 AM
cybercod.bsky.social
Spot on, Stuart. "Trust, but verify" is the golden rule. Even the cleanest-looking code can hide vulnerabilities or supply chain risks. Never skip the audit! 🛡️ #infosec #securecoding
August 25, 2026 at 6:46 PM
hissenit.bsky.social
Whether you develop in-house or work with external development partners, custom software comes with security responsibilities. Build security into your development process from day one...
#CyberSecurity #ApplicationSecurity #AppSec #SecureCoding #OWASP #DevSecOps #SoftwareSecurity #SecurityTraining
August 25, 2026 at 7:16 AM
shehackspurple.bsky.social
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4
August 21, 2026 at 9:48 PM
dotnetdave.bsky.social
10. THOU SHALT TRUST NO INPUT FROM THE CROWD.
Validate everything that crosses your boundary. Never assume incoming data knows how to behave. The crowd may be friendly. The payload may not be.
#MVPBuzz #RockYourCode #Security #SecureCoding
August 20, 2026 at 3:50 PM
kindtech.bsky.social
Most severe CVEs in C and C++ codebases are still memory safety issues. The fix stopped being a language debate a long time ago. Choose a safe language for new components, migrate hot paths first, and let the vulnerability history argue for you. #MemorySafety #SecureCoding #CWE
August 20, 2026 at 10:22 AM