Uncle Joe

My kid has found out that he can farm items in games, but he doesn’t want to throw his life away in front of the screen so he found a solution.

#games

Please work with me, I feel lonely!

Second hand equipment needed for commuting with me:
Skies - 10 $
Boots - 10 $
Poles - Free
Taking the bus instead: Absolutely not!
Experience of your lifetime: Priceless

Two cats fighting with the in OWASP Cornucopia - in devs we trust logo and the text: Think like an attacker. #owasp #appsec #security #cybersec

After attending the OWASP Global AppSec conference, Christoffer introduced his team to OWASP Cornucopia—a gamified approach to threat modeling. Instead of another meeting, they started an end-of-month gaming day. Using the "Juice Shop" sandbox, learn to think like attackers in a way that sticks.

Translate Website App v3.0 to Portugues (pt-pt) · Issue #2241 · OWASP/cornucopia This issue is only for Portugues (pt-pt) speakers. AI generated translations will not be accepted. We need to translate the website app 3.0 version from English to Portugues. Most of the text can b...

Hi, at the OWASP Cornucopia project we would really appreciate if there were some Portuguese (Portugal) speaking security enthusiast that could help us with h translating a few words (20 sentences). Fame and glory awaits you if you would like to help us.
github.com/OWASP/cornuc...

#appsec #security

If you would like to threat model the OWASP Juice shop too, there is a threat model in their repository that can be opened with OWASP Threat Dragon:

github.com/juice-shop/j...

owasp.org/www-project-...

Date: 25 Feb, 2026

Check out Christoffer’s full breakdown of how he implemented this on the official OWASP Cornucopia blog: cornucopia.owasp.org/news/2026022...

Two cats fighting with the in OWASP Cornucopia - in devs we trust logo and the text: Think like an attacker. #owasp #appsec #security #cybersec

After attending the OWASP Global AppSec conference, Christoffer introduced his team to OWASP Cornucopia—a gamified approach to threat modeling. Instead of another meeting, they started an end-of-month gaming day. Using the "Juice Shop" sandbox, learn to think like attackers in a way that sticks.

Date: 25 Feb, 2026

Check out Christoffer’s full breakdown of how he implemented this on the official OWASP Cornucopia blog: cornucopia.owasp.org/news/2026022...

Date: 25 Feb, 2026

After attending the OWASP Global AppSec conference, Christoffer introduced his team to OWASP Cornucopia—a gamified approach to threat modeling. Instead of another meeting, they started an end-of-month gaming day. Using the "Juice Shop" sandbox, learn to think like attackers in a way that sticks.

Here is the release summary:
- Version dropdown by Prakhar Porwal
- Agentic AI suite for the Companion Edition by Adrian Sroka
- Indian translation of the Website App Edition by Sachin Vishwakarma
- Various security fixes and design improvements of the website, game engine and card converter
#appsec

Release Release v2.6.21 · OWASP/cornucopia What's Changed update contributers list by @ayman-art in #2338 fix: use gh release upload for ZAP report upload to pre-release by @Mysterio-17 in #2339 fixed inconsistent UTF-8 encoding by @Suresh...

OWASP Cornucopia just released v2.6.21
github.com/OWASP/cornuc...

I want to give a huge thank you to everyone who contributed this week. In non-particular order. Thank you Ayman Osama Algamal, Adarsh Kumar, Mradul Tiwari, khushal-winner, Tanmay Ranjan, Suresh Krishna, Aashish Kharel, Ashnaa Seth

Broken Access Control is one a 400% rise btw. according to CodeQL. It’s graph looks very similar to the AI adoption graph

New 'Sandworm_Mode' Supply Chain Attack Hits NPM The Shai-Hulud-like Sandworm_Mode supply chain attack targets NPM developers to steal secrets and poison AI assistants.

The bigger story is that an npm worm hit 50,000 downloads targeting the AI coding tools everyone just adopted. It spreads itself. www.securityweek.com/new-sandworm...

Anthropic Didn’t Kill Cybersecurity. It Just Reminded Us There Are Two Doors Anthropic’s Claude Code Security sparked a sharp SaaS market selloff, but investors missed a critical reality: AI code scanning addresses only half of modern cyberattacks. Identity, credentials, and h...

Anthropic announced Claude Code Security. Billions evaporated from cybersecurity stocks.
But… — code vulnerabilities account for less than half of actual breach vectors. Wall Street is panicking over a capability that already exist in SAST tools. securityboulevard.com/2026/02/anth...

Thank you for wanting to help! There is very little actual work involved. It's about 80 card descriptions that need to be controlled and understood from a language and security perspective, so that the meaning is correctly conveyed from English to Dutch. Sorry for my previous misspelling.

Translate Website App v3.0 to Dutch · Issue #2240 · OWASP/cornucopia This issue is only for Dutch speakers. AI generated translations will not be accepted. We need to translate the website app 3.0 version from english to Dutch. Most of the text can be reused from 2....

Hi, at the OWASP Cornucopia project we would really appreciate if there were some Italian speaking or Deutch speaking security enthusiast that could help us with h translating a few words. Fame and glory awaits you if you would like to help us.

github.com/OWASP/cornuc...

github.com/OWASP/cornuc...

Greetings! This is a message from ThreatMaster4000. Your friendly threat modeler friend speaking directly to you from a IBM PC (5150), now with AI capabilities (as it only requires networking).

#privacy #security #owasp #appsec

OWASP 25th Anniversary Virtual Conference: Stop Lecturing, Start Playing! (track 1) View more about this event at OWASP 25th Anniversary Virtual Conference

I am really excited about speaking at the OWASP 25th Aniversary Virtual Conference, please join me at 11am CEST.

owasp25thanniversaryvirtual.sched.com/event/2DjqY/...

Do you want to pick my brain? I look forward to entertaining you at the OWASP Contributor Mixer. It's a once-in-a-lifetime chance to meet and talk with some of the greatest minds in application security.

OWASP Cornucopia just released v2.6.19

I want to give a huge thank you to everyone who has contributed this week. In non-particular order. Thank you so much Abhijit Sahoo, Tanmay Ranjan, Suresh Krishna, Mateusz Hubala, Prakhar Porwal, Aashish kharel, Mradul Tiwari, Aleksey Krasnov and Tanmay Ranjan

We have reached 99 stars. Are you going to give us our star 100? OWASP Cornucopia’s popularity is increasing at an alarming rate. Gamification in security requirements analysis and threat modeling is not a blib, it is here to stay.

#appsec #security #cybersec

The floppies were a nightmare. 😀

Live long and prosper! 🖖

ThreatMaster 4000, OWASP Cornucopia

I am here to inform you that copi.owasp.org has a new privacy policy that you should be aware of and that you should be reading, or would you rather take my word for it? Read more AI generated legal stuff here: copi.owasp.org/privacy

#privacy #security #owasp #appsec

Greetings! This is a message from ThreatMaster4000. Your friendly threat modeler friend speaking directly to you from a IBM PC (5150), now with AI capabilities (as it only requires networking).

#privacy #security #owasp #appsec

I am here to inform you that copi.owasp.org has a new privacy policy that you should be aware of and that you should be reading, or would you rather take my word for it? Read more AI generated legal stuff here: copi.owasp.org/privacy

OWASP 25th Anniversary Virtual Conference: Stop Lecturing, Start Playing! (track 1) View more about this event at OWASP 25th Anniversary Virtual Conference

Please join me at the OWASP 25th Aniversary Virtual Conference, please join me at 11am CEST.

owasp25thanniversaryvirtual.sched.com/event/2DjqY/...

OWASP 25th Anniversary Virtual Conference: Stop Lecturing, Start Playing! (track 1) View more about this event at OWASP 25th Anniversary Virtual Conference

I am really excited about speaking at the OWASP 25th Aniversary Virtual Conference, please join me at 11am CEST.

owasp25thanniversaryvirtual.sched.com/event/2DjqY/...

The first deck was created in 2012. So if you include 10 more year, there’s definitely a hockey stick.

In case you wonder, yes there is a hockey stick there. We’ve been around since 2021.