#productsecurity

1 month ago

Due to detailed #exploit guidance in the wild, the priority of patching this #Redis XACKDEL #vulnerability increased this week. CVE-2025-62507 buff.ly/NJvVjvS

‼️ if you haven't yet upgraded your Redis installs, you should increase the priority of that.

#CVE #ApplicationSecurity #ProductSecurity

0 0 1 0

Last Week in AppSec for 15. January 2026 - Checkmarx Potentially serious flaws, depending on your uses, in sigstore, n8n, and pnpm made last week in appsec all about tools in the software supply chain.

2 months ago

This #LastWeekInAppSec is a great reminder that automation and dev tooling is part of an organizations attack surface. #Sigstore, #pnpm, and #n8n all have vulns to pay attention to, but (mostly) not panic over.

👉 should you worry? read: buff.ly/ATRNVz3

#AppSec #ProductSecurity #DevSecOps #DevOps

1 0 0 0

Cybersecurity Growth

@cybersecgrowth.bsky.social

2 months ago

What’s more important, a degree or experience? #cyberworkforce #productsecurity #secops #podcast

0 0 0 0

Jordan Wilkerson

@lostintheloop.bsky.social

2 months ago

A 510(k) is a permission slip, not a security strategy.

Paper-whipping docs to pass a snapshot while ignoring the permanent reality of risk. If you aren't quantifying the cost of failure in a hospital mosh pit, you aren't doing GRC. You're just coloring.

#MedTech #ProductSecurity #Risk #LITL

0 0 0 0

Jordan Wilkerson

@lostintheloop.bsky.social

2 months ago

Trading the Roadmap for the Risk Register: A journey from SaaS PM to Medical Device GRC An Introduction

In SaaS, a bad release is an angry Slack channel. In MedTech, it's life or death. If you think 'move fast and break things' works in a clinic, you're a liability.

Trading roadmaps for risk registers. Launching Lost In The Loop (LITL):

tinyurl.com/TradingTheRo...

#MedTech #ProductSecurity #LITL

2 1 0 0

Nitor Infotech

@nitor1122.bsky.social

2 months ago

MVP gets you to market.
MVSP keeps you in the market.

Security can’t wait for version 2.0.
Here’s why MVSP is the future of product engineering 👇
🔗 Read more! bitl.to/5UYd

#MVSP #ProductSecurity #DevSecOps

0 0 0 0

2 months ago

Let's be mindful and considerate - and help each other to move the needle. Now and in 2026. 💜

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity #OTsecurity [lisi] 2/2

1 1 0 0

Prime Security raises $20M Series A to scale its agentic product security platform Enterprise security startup Prime Security today revealed that it had raised $20 million in new funding to fuel its go-to-market expansion and accelerate development of its Agentic Product Security...

3 months ago

🏰 Zitadel identity manager has 3 serious vulns to patch that could leave organizations at serious risk, including account takeovers and reading of sensitive data.

#SupplyChainSecrity #Vulnerability #ProductSecurity #InformationSecurity #CyberSecurity #Patch #Zitadel

1 0 0 0

Pure Tech

@puretech.news

3 months ago

Prime Security raises $20M Series A to scale its agentic product security platform #Technology #Business #Startups #SeriesA #ProductSecurity #StartupFunding

1 0 0 0

@blueasialabs.bsky.social

3 months ago

... (and finally:)

✅ Save the dates for #osco26 on November 5-8, 2026! 😉

#CyberSecurity #Security #InfoSec #AppSec #ProductSecurity #OTsecurity #OpenSpace [lisi]

2/2

2 1 0 0

King

3 months ago

The Cyber Resilience Act (CRA) is reshaping how manufacturers build connected products.
Security is now part of conformity assessment — not an add-on.

If your IoT device connects, CRA applies.
Now is the time to strengthen security processes.

#CyberResilienceAct #IoTSecurity #ProductSecurity

0 0 0 0

King

@blueasialabs.bsky.social

3 months ago

EN 18031 enables CE compliance.
EN 303 645 boosts IoT resilience.
Combine both for long-term product trust.
We can help outline your testing sequence.

#EN18031 #EN303645 #ProductSecurity

0 0 0 0

ISSA International

@issa.org

3 months ago

We’re about two weeks

The Cyber Resilience Act raises the bar for product + software security. But the roadmap doesn’t have to be overwhelming.
December 2
10AM ET / 2PM GMT
Grab your seat issa.org/event/prepar...

#CyberResilience #CRA #SBOM #ProductSecurity #ISSAINTL

0 0 0 0

3 months ago

🤖 Flowise, a visual designer for agentic AI workflows, allowed password changes without verifying the existing password. Combine that with past flaws that made session theft easier: persistent account-takeover path. Upgrade immediately.

#AppSec #AIsecurity #ProductSecurity #PasswordSecurity

🧵3/4

0 0 1 0

4 months ago

That could look like blocking the relevant endpoints in server configurations or edge devices like #WAF or reverse-proxy systems, setting files read-only, etc.

#ApplicationSecurity #VulnerabilityManagement #DevSecOps #DevOps #Cybersecurity #ProductSecurity 🧵3/3

1 0 0 0

4 months ago

👥 Lower-severity but still notable GitLab issues:
• CVE-2025-6601 (3.8) — Group membership business logic flaw
• CVE-2025-11989 (3.7) — Missing authorization in quick actions
#ApplicationSecurity #ProductSecurity #GitLab 🧵5/7

0 0 1 0

Home Welcome to the Open Security Conference (osco), the people-centred international gathering for everyone interested in cybersecurity. Join us 2-5 October 2025 in Rückersbach, Germany.

5 months ago

Yes. Yes, you've seen correctly. There's going to be an Open Security Conference 2026! 😍

🗓 Save the dates: November 5-8, 2026. ✅

opensecurityconference.org

#osco #osco26 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity #OTsecurity #OpenSpace [lisi]

3 2 1 1

Home Welcome to the Open Security Conference (osco), the people-centred international gathering for everyone interested in cybersecurity. Join us 2-5 October 2025 in Rückersbach, Germany.

5 months ago

We're so glad to have you all. See you at #osco26! 🤩

opensecurityconference.org

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity #OTsecurity #OpenSpace [lisi]

3/3

2 1 0 0

Home Welcome to the Open Security Conference (osco), the people-centred international gathering for everyone interested in cybersecurity. Join us 2-5 October 2025 in Rückersbach, Germany.

5 months ago

We're very much looking forward to seeing lots of these folks again in 2026. 😊

opensecurityconference.org

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity #OTsecurity #OpenSpace [lisi]

2/2

2 1 0 0

Home Welcome to the Open Security Conference (osco), the people-centred international gathering for everyone interested in cybersecurity. Join us 2-5 October 2025 in Rückersbach, Germany.

5 months ago

Oh wow, look at this program packed full of awesomeness! And it's just the first open space day. More goodness to come! 😍

opensecurityconference.org

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity #OTsecurity #OpenSpace [lisi]

1 1 0 0

5 months ago

Give visibility to champions and encourage volunteers. Bring security closer to teams and foster a culture of shared knowledge.
———
🏗 Building an AppSec Program from Scratch - Mireia Cano

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity [lisi]

4 1 0 0

5 months ago

Clear expectations and structured onboarding for security champions really helped, including sharing security baseline knowledge.
———
🏗 Building an AppSec Program from Scratch - Mireia Cano

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity [lisi]

3 1 0 0

5 months ago

Security champions know the context of their team, invaluable. Monthly meetings, 1 to 1 sessions, security seminars. Share knowledge and build relationships.
———
🏗 Building an AppSec Program from Scratch - Mireia Cano

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity [lisi]

3 1 0 0

5 months ago

Lots of questions for Mireia! People are curious to hear more & share their experiences as well - especially on security champions & how to have them succeed.
———
🏗 Building an AppSec Program from Scratch - Mireia Cano

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity [lisi]

2 1 0 0

5 months ago

Do you know this situation where you feel like every tool has improved besides the one that you chose?

———
🏗 Building an AppSec Program from Scratch - Mireia Cano

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity [lisi]

1 1 0 0

5 months ago

Security champions embedded in each domain to bridge gaps. This transformation didn't happen overnight, and it's a never-ending journey.
———
🏗 Building an AppSec Program from Scratch - Mireia Cano

#osco #osco25 #CyberSecurity #Security #InfoSec #AppSec #ProductSecurity [lisi]

2 1 0 0