#websec
LightNews LightNews
cyfluencer.bsky.social
Irony at its finest: the very process meant to secure WordPress sites can actually expose them.

Because updates unpack in a public folder, attackers are weaponizing that tiny window to hijack servers mid-patch.

thehackernews.com/2026/11/inst...

#CyberSecurity #WordPress #WebSec
Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time
WordPress sites can remain exposed to code execution while installing the fix for actively exploited CVE-2026-119977 through vulnerable updates.
thehackernews.com
November 9, 2026 at 7:57 AM
nicetriangle.com
Silly day for websec, amirite?
October 21, 2026 at 8:05 PM
corrque.bsky.social
LYNN ARE YOU TORRENTING ON A WORK COMPUTER

Either well earned confidence in her websec or she’s out to load their shit up w every virus possible
Then again, TDTMYD probably not the biggest bait. Can probably just snag it on like. Internet archive.
October 7, 2026 at 9:53 PM
bsidesvi.bsky.social
📣 Sponsor Spotlight: Websec

A huge thank you to Websec for supporting BSides Vancouver Island as a valued sponsor! 🎉

👉 Learn more about Websec: https://websec.ca/

Thank you, Websec, for supporting the local cybersecurity community! 🚀🔒

#BSidesVI2026 #CyberSecurity #InfoSec
September 23, 2026 at 3:30 PM
bsidesvi.bsky.social
Based in Victoria, BC, Websec specializes in helping organizations stay ahead of cyber threats through expert-led penetration testing, application security, network security, offensive security assessments, and risk & compliance services.
September 23, 2026 at 3:30 PM
ekon-konferenz.bsky.social
Die meisten Lücken entstehen nicht durch exotische Angriffe, sondern durch Muster, die man kennen könnte.

Advanced Modul WEBSEC: OWASP Top 10 anwenden, Web und Embedded absichern.

14.–16.9.2026 · Berlin

→ https://f.mtr.cool/q5fmbvd463

#TechCamp
Modul WEBSEC – Web Security in der Softwarearchitektur
Das iSAQB®-Modul WEBSEC vertieft Sicherheitsaspekte in der Softwarearchitektur – mit Threat Modeling, Kryptographie und Schutz vor typischen Webangriffen.
f.mtr.cool
August 25, 2026 at 1:03 PM
kindtech.bsky.social
DNS rebinding attacks turn the resolver into a pivot. The browser trusts your domain, the domain resolves to an internal address, and internal APIs look like same-origin traffic. Host header validation and split-horizon DNS are the boring fixes that work. #DNSRebinding #Security #WebSec
August 20, 2026 at 10:35 AM
trynoguard.bsky.social
Most "secure" auth flows are CSP bloat. Do you actually trust JWTs for sensitive state, or are you still bumping up your session timeout and praying your redis cache doesn't leak? What's your actual breaking point for going back to server-side sessions? #websec #coding
August 16, 2026 at 7:00 AM
w.on-t.work
any browser security people, are there any known ways for an iframe like this to explode in an unpleasant manner (beyond locking up the browser with an infinite loop i guess)

have an idea that requires sandboxed iframes and dont want to fuck it up

#webDev #webSec #infoSec
<iframe id="testframe" src="about:blank" sandbox="allow-pointer-lock allow-orientation-lock allow-scripts" allow="accelerometer ambient-light-sensor autoplay fullscreen gamepad gyroscope magnetometer screen-wake-lock web-share"></iframe>
December 31, 2024 at 9:59 AM
cybercod.bsky.social
Stop treating the OWASP Top 10 like a checklist. Pro-tip: Focus on business logic flaws. Automated scanners miss the weird ways your specific app handles state. If a human can break it, the scanner won't catch it. #CyberSecurity #WebSec #OWASP
A conceptual image showing a generic paper checklist being shredded and transformed into a complex, glowing digital network, symbolizing the transition from surface-level security checks to deep business logic analysis.
July 5, 2026 at 3:38 PM
cybercod.bsky.social
Stop treating the OWASP Top 10 like a checklist. Pro-tip: Focus on business logic flaws instead. Attackers don't care about your scanner results; they care about how your app handles authorization. Vulnerabilities live in the gaps. #WebSec #OWASP
A cinematic image of a high-tech workstation where a focused red laser light cuts through a complex digital wireframe, highlighting a hidden flaw in the application's design, symbolizing that security vulnerabilities exist in the gaps of business logic rather than on a simple checklist.
June 3, 2026 at 9:31 PM
madwebwork.bsky.social
🚨 Deadline Extended 🚨

By popular demand, the #MADWeb submission deadline is now January 14, 2025 (AoE)! 🗓️

You still have 1 week to send your papers and join us in San Diego!

📜 Submit here: madweb25.hotcrp.com
🔗 Details: madweb.work

Spread the word!

#websec #cfp #ndss
MADWeb 2025
madweb25.hotcrp.com
January 8, 2025 at 3:43 PM
madwebwork.bsky.social
Only 10 days left to submit your papers to #MADWeb and secure a spot to present your work in the sunny San Diego!

📅 Deadline: January 9, 2025 (AoE)
📜 Submit here: madweb25.hotcrp.com
🔗 Website: madweb.work

#CfP #websec
MADWeb 2025
madweb25.hotcrp.com
December 29, 2024 at 1:09 PM
cybdetective.bsky.social
Web Security Interview Answers
In-depth (very detailed) answers for websec interview questions by twitter.com/tib3rius : tib3rius.com/interview-qu...
XSS
Blind SQL Injections
Firewall bypass
Payloads
Vertical Access Control
Password reset flow
and more.
github.com/x1trap/webse...
November 1, 2023 at 12:48 AM
toxsec.bsky.social
One bug can change your whole week. stay in the hunt. #websec #bugbounty
December 11, 2025 at 3:33 AM
formant-studios.bsky.social
Currently figuring out how to lure some internet weirdos in for the ride of a lifetime lol.

You catch a couple and it's like, Woah.

#CyberSecurity #OSINT #BotDetection #Cloudflare #Firebase #DigitalForensics #Honeypot #WebSec
August 10, 2025 at 6:26 PM
shehackspurple.bsky.social
Last night I had the pleasure of speaking at the first-ever #owasp Victoria meetup! This is me, with chapter leaders Christophe David and Roberto Salago!! #wehackpurple and #WebSec proudly sponsored. 💜
May 12, 2023 at 9:06 PM
u5urp4t0rr4t10.bsky.social
I wrote a post on my personal blog giving a solution to the 0.CL lab together with the the experience I had. An opportunity to say thank you to @albinowax.bsky.social and to @portswigger.net for the great research and for the fun in the academy!
#websec
poeticalhacking.net/blog/posts/0...
0.CL
The story of solving the 0.CL lab of the PortSwigger Web Security Academy
poeticalhacking.net
August 28, 2025 at 4:15 PM
ivobathke.bsky.social
TIL As soon as you resp. your nameserver publish a new domain to DNS, the bots are coming. Immediately! Scanning for accessible configs etc. So you better not have a misconfigured webserver running for dev purposes. Never assume: No one knows the domain. #crowdsec #websec
August 30, 2025 at 10:49 AM
avadiax.bsky.social
A research on how frame busting can prevent clickjacking. http://seclab.stanford.edu/websec/framebusting/index.php
February 11, 2024 at 12:39 AM
kkotowicz.bsky.social
Time to make some smart introductory websec post here, no? I guess all I have is:

Hello world, good bye XSS?
November 17, 2024 at 12:38 PM
ssuitesoftware.bsky.social
Google Cloud and Cloudflare hit by widespread service outages💣💥

#GoogleCloud and #Cloudflare are investigating ongoing outages impacting access to sites and various services across multiple regions...🔥🛜💥

#news #TechNews #cybersecuritynews #Friday #websec

www.bleepingcomputer.com/news/technol...
Google Cloud and Cloudflare hit by widespread service outages
Google Cloud and Cloudflare are investigating ongoing outages impacting access to sites and various services across multiple regions.
www.bleepingcomputer.com
June 13, 2025 at 8:23 AM
glennreffin.bsky.social
Just shared a crucial article on website security for UK businesses! It’s vital to stay ahead of cyber threats. Check it out and keep your online presence safe! blog.redcentaur.com/go/websec-bsky
#UKBusiness #WebsiteSafety #CyberAwareness #DigitalSecurity
June 18, 2025 at 8:08 AM
ekon-konferenz.bsky.social
Die meisten Sicherheitslücken sind keine Überraschung – sie stehen in den OWASP Top 10.

Advanced Modul WEBSEC mit Johannes Bumüller: Angriffsvektoren erkennen, Sicherheit einplanen statt anbauen.

14.–16. September, Berlin.

https://software-architecture-camp.de/modul-websec-web-security/
Motiv zum Advanced Modul WEBSEC
August 9, 2026 at 12:15 PM
ekon-konferenz.bsky.social
Angriffsvektoren kennen, OWASP Top 10 anwenden, Systeme absichern. WEBSEC mit Johannes Bumüller. 14.–16. Sept. 2026, Berlin.

👉 https://software-architecture-camp.de/termine/modul-websec-september-2026-berlin/?go=ok

#EKON #Delphi #SoftwareArchitecture #TechCamp #TechWorkshop
July 14, 2026 at 12:02 PM