secure.software @secure0software
Lost in package chaos? @ReversingLabs has your back. Get free risk assessments for 6M+ npm, PyPI, NuGet, RubyGems & VS Code packages. Clarity starts here! 🚀 secure.software U.S. Joined June 2021-
Tweets422
-
Followers140
-
Following483
-
Likes206
🚨RL researchers have detected a new batch of compromised #npm packages maintained by several developers. We suspect teselagen-admin & techsupportrxnt accounts were compromised. eslint-config-teselagen is one of the many affected packages: secure.software/npm/packages/e…
Who Will Maintain Open Source’s Future? x.com/i/broadcasts/1…
📆 Happening this Friday at @BSides_ABQ: @KadiGrigg will be taking the stage for her talk - Trail Blazing: Lessons from the Oregon Trail for a Secure Software Supply Chain. Learn more: bit.ly/410BILC #BSidesABQ #AppSec #OpenSourceSecurity
⚠️🧵 RL researches have detected a supply chain attack in an #npm package with a total download count of over 2 million: secure.software/npm/packages/i… #OSS #Dev
📣Our incredible cheerleader @KadiGrigg was on the ConversingLabs #Podcast today to discuss the Spectra Assure Community Badge. Learn more about it here: reversinglabs.com/blog/safe-and-…
ConversingLabs: Security Badging Open-Source Projects x.com/i/broadcasts/1…
Whenever RL threat researchers discover new malicious #OSS packages, they make sure to update secure.software so that the #dev community can have the most up-to-date info.👇Beware of colortoolsv2 on #npm.
⚠️🧵RL threat researchers detected a malicious #npm package abusing #blockchain for malicious command hosting: secure.software/npm/packages/c…
⚠️🧵RL threat researchers detected a malicious #npm package abusing #blockchain for malicious command hosting: secure.software/npm/packages/c…
Launching Support for VS Code in Spectra Assure Community x.com/i/broadcasts/1…
If you're proud of your #SoftwareSupplyChainSecurity standards, put the Spectra Assure Community Badge®️ front & center on your #OSS project. Show the world you're not messing around.👇 #Dev #GitHub #PyPI #npm bit.ly/4ljhpRo
🎉 Milestone Unlocked! We just dropped the official @ReversingLabs Community Docs — your guide to all things Spectra Assure! 🛡️ Build safer software ⚙️ Contribute like a pro 🤝 Join our OSS fam Dive in 👉 docs.secure.software/community/ #OpenSource #DevSecOps #SupplyChainSecurity
⚠️🧵 RL researchers detected a new malicious campaign targeting #PyPI users. Several packages are pretending to be "time" related utilities, but are actually used to steal sensitive data like cloud tokens.
⚠️🧵 RL researchers discovered a new malicious #PyPI package, in which attackers are once again trying to steal #crypto trading related secrets. Details: secure.software/pypi/packages/…
Balancing automation and human expertise is key to a successful #testing strategy. Listen to my interview with @pgrizzaffi to explore the realities of #testautomation and get valuable guidance. 👉testguild.com/podcasts/autom… #automationtesting #softwaretesting #testguildpodcast
Key #vscode hack takeaway from @ReversingLabs' Karlo Zanki: "Automatic updating of software dependencies has advantages, but it can also be abused by malicious actors" develop.secure.software/vs-code-ide-ha…
"Ground truth" is key .... #SBOMs are designed to help teams protect their #softwaresupplychainsecurity, by making the composition of applications more transparent. But a lack of standardization creates a challenge for using SBOMs to bolster security reversinglabs.com/blog/why-groun…
3/ Sounds terrifying. In this week’s #SSBlogwatch we remember Ronald Reagan. For @ReversingLabs’ @SecuredSoftware: reversinglabs.com/blog/c-scrm-we…
2/ It’s all about #cybersecurity #SupplyChain #RiskManagement, as the Washington wonks now insist on calling it. Beltway chatter is all #CSCRM this, guidance that and policy the other.
🧵: A whole alphabet soup of agencies, offices and councils are springing up in D.C. and beyond. They’re trying to help us with the #SoftwareSupplyChain #security problem. reversinglabs.com/blog/c-scrm-we…
"Writing a good song is not mimicry, or replication, or pastiche, it is the opposite. It is an act of self-murder that destroys all one has strived to produce in the past. "-- @nickcave, on #ChatGPT "writing" song lyrics in a #NickCave-like style... theredhandfiles.com/chat-gpt-what-…
Here is the video link to my "Welcome to the Jungle: Pentesting AWS" talk at @CactusCon. Another great conference! It's always good to hang out with friends and meet new people. youtube.com/watch?v=H-htdz…
FF @franfrkovic
7 Followers 164 Following
Ciegark @Ciegark987
23 Followers 538 Following
Arsen Kinelak @ShlyapochnikSix
2 Followers 72 Following
Kadi (Grigg) McKean @KadiGrigg
493 Followers 1K Following Living life like every day is a parade | PSU | Podcaster | Empowering the Possible | DevOpsDaysDC
Сила в прод�... @LetsCodeNet
4 Followers 21 Following
Carmen @c_oakley10
199 Followers 3K Following
Brian Self @self473641
1 Followers 1 Following
runme @runmedev
352 Followers 2K Following DevOps Notebooks built with Markdown - https://t.co/a7CpKDKy4M
Dave Ferguson @_sc0rn
590 Followers 573 Following Product Manager in Software Supply Chain Security. 20-year AppSec pro. Constant & curious learner. Former engineer/developer/consultant/pen tester/SA.
Charlie Jones @charlie_jones3
5 Followers 24 Following
Disco.Lizard @DiscoLizard7
10 Followers 545 Following lizard. / (ˈlɪzəd) / noun. any reptile of the suborder Lacertilia (or Sauria), esp those of the family Lacertidae (Old World lizards), typically having an elong
Doctor Finesse @doctor_finesse
375 Followers 2K Following Gen Surg, ED/Trauma, Dermatology Fellowship. Founder - Doctor Finesse: Evidence Based Dermatology
Ashlee Benge @ashlee_benge
1K Followers 726 Following Astrophycist turned Director of Threat Intelligence @ReversingLabs. Formerly @cisco SecureX, @ZeroFOX, @TalosSecurity Opinions are my own.
💻 Sherrod @sherrod_im
38K Followers 7K Following Difficult mystery girl connected to the divine forces of the universe.
Ian Golding @GoldfishRex
110 Followers 595 Following
dffghgfhgj @engz2020
50 Followers 3K Following
Jonas Lejon @jonasl
27K Followers 13K Following Cyber Security since 1998 ✌️ Also known as @kryptera
Mac C. @senirahsia
0 Followers 1K Following
VectorSEC @Real__Vector
3K Followers 398 Following Cyber security enthusiast. #InfoSec, #OSINT, #OffSec, #Python. Sometimes I have a stroke of brilliance, but most of the time just the symptoms of a stroke.
OpenZiggy @OpenZiggy
147 Followers 158 Following Proudly espousing the benefits of zero trust - specifically application embedded zero trust using @openziti since 2021! #opensource is where it's at!
Ari @Ariesq
227 Followers 2K Following You got your Law in my Technology! You got your Technology in my Law!
Daniel Maslowski aka ... @OrangeCMS
2K Followers 4K Following cpuvangelist \o/ #app & #web #developer | #engineering #software, #firmware, #platforms, #systems & #interfaces
OneFishTwoFishRedFish... @OnePhish
140 Followers 463 Following I'm a dog and how did I get here. If I wasn't a dog my opinions are my own and not my employers.
Frane Crnjak @Vrane
183 Followers 2K Following
Marilyn Hull @Marilyn52798078
4 Followers 34 Following
B @Huw_Bamford
67 Followers 2K Following
Zephyr Project @ZephyrIoT
11K Followers 1K Following An #opensource project that builds a safe, secure & flexible RTOS for resource-constrained devices. #ZephyrRTOS #ZephyrDevSummit
Panda Monium @Th3PandaMonium
51 Followers 1K Following #THRUNTCON is Life. Threat Research. Views are my own. RECALCULATING....
Daniel Kefer @DKefer
100 Followers 203 Following Interested in information/application security and cloud application development. OWASP volunteer (SecurityRAT, SAMM).
Slava Portnov @SlavaPortnov
7 Followers 165 Following
cmeinco @cmeinco
75 Followers 941 Following
Maki Iaiw @MakiIaiw
16 Followers 770 Following
Tomislav Klisanic @tklisanic
96 Followers 510 Following Plain old software developer. DevOpsing and breaking stuff
Mike Udasin @MikeUdasin
93 Followers 360 Following
ReverseGrizzly🐻 @McBenda
86 Followers 515 Following
Nemanja Kojic @nemanjakojic
36 Followers 205 Following PhD in software engineering, avid tennis player
Alex Nevermind @nevermind_alex
229 Followers 3K Following
klaxon @klaxon_1
313 Followers 644 Following
Cogn1tron, PhD @Cogn1tron
187 Followers 3K Following
Kadi (Grigg) McKean @KadiGrigg
493 Followers 1K Following Living life like every day is a parade | PSU | Podcaster | Empowering the Possible | DevOpsDaysDC
Edward Amoroso @hashtag_cyber
4K Followers 377 Following CEO TAG Cyber - Cyber Security, Infrastructure Protection, Telecom, Software, Teaching
ELISA Project @ProjectElisa
973 Followers 324 Following ELISA Project aims to make it easier to build & certify safety-critical apps. Follow on LinkedIn for updates: https://t.co/qKWv0tgl70
REdeploy @REdeployConf
868 Followers 281 Following The Resilient Socio-Technical Systems Conference: resilient technology, organizations, and people. Organized by @jpaulreed.
chompie @chompie1337
89K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
CW @Skydevr
3K Followers 2K Following CEO/CTO/CSO, cyber warfare, and related technology. Forbes contributor & Author
Beau Woods @beauwoods
7K Followers 2K Following Connecting hackers & cyber policymakers w/ @cyberstatecraft @iamthecavalry @bsideslv @hillhackers @columbiadefrag ++ || https://t.co/F3l76CupUo
Mark Nunnikhoven @marknca
10K Followers 4K Following Security @Amazon. Focusing help helping everyone better understand security & privacy 🐘: @[email protected] 🧑💻: Tweets my own
CyberKnow @Cyberknow20
37K Followers 3K Following Situational Awareness | Threat Intelligence | cybertracker | Hacktivism | Meme Farmer Digital Owl of the Cyber Realm Posts and Opinions are my own
Zephyr Project @ZephyrIoT
11K Followers 1K Following An #opensource project that builds a safe, secure & flexible RTOS for resource-constrained devices. #ZephyrRTOS #ZephyrDevSummit
Christian Reilly @reillyusa
18K Followers 4K Following Field CTO EMEA @cloudflare. Former VP, Tech Strategy & CTO @Citrix & @Bechtel and @hashicorp. Imagineer. Golf. Tech Advisor. Bourbon. Man City. Lancs CCC.
Emily Riederer @EmilyRiederer
7K Followers 4K Following Three R's in my last name, but it's not enough #rstats for me! Sr Analytics Manager at Capital One Math/Stats at UNC CH https://t.co/4stm3KVbBX
James Strong @strongjz
3K Followers 5K Following SA @isovalent, @Networkandk8s Author, ingress-nginx maintainer, weightlifter, ACG instructor,adjectives, yay, Opinions my own? he/him.
Cogn1tron, PhD @Cogn1tron
187 Followers 3K Following
Product Security Grou... @prodsecgrp
52 Followers 13 Following Application Security & Privacy Consultancy
Marc French @AppSecDude
327 Followers 149 Following Security dude, Firearms geek, Scuba Guy. Lousy Golfer. Aspiring Blacksmith
John Viega @viega
2K Followers 300 Following CEO of Crash Override. GCM-AES. Gnu Mailman. Building Secure Software, OpenSSL book, ...
René Milzarek @renemilzarek
26 Followers 100 Following
Luca Hammer @luca
13K Followers 1 Following Twitter was my special interest. New home: https://t.co/ZL6Aji4Oqs Scientific Programmer @sfb1472 | https://t.co/sx0VFzylX9 [email protected] https://t.co/q9hSg1uvlb
Tomislav Klisanic @tklisanic
96 Followers 510 Following Plain old software developer. DevOpsing and breaking stuff
insecurity princess @... @saraislet
3K Followers 557 Following Mathematician, Insecurity Princess. Netflix Cloud Security Manager. Queer femme. Dismantling systemic barriers in tech, one fencepost problem at a time
Charlie Jones @charlie_jones3
5 Followers 24 Following
Nicole Perlroth @nicoleperlroth
85K Followers 6K Following told the story of cyber, now doing everything i can to change the story of cyber
https://bsky.app/prof... @tmcw
14K Followers 1 Following not using twitter anymore. https://t.co/PtubFCpGBJ https://t.co/ZckGEmD0Ob https://t.co/Bq05CWsrnj
Brandon Hoe @HoeBeWanKenobi
533 Followers 507 Following VP Marketing @ JupiterOne. Making new things from old things.
Honeycomb.io System S... @honeycombio
15K Followers 354 Following The unified, fast, and collaborative observability platform for teams who build and manage software that matters. Follow us on Bluesky @ https://t.co/97usEEIp1h
Charity Majors @mipsytipsy
81K Followers 591 Following honeycomb, observability, the second edition of "Observability Engineering" is coming out soon. find me on substack, bsky, LI, and occasionally here. 🐝🏳️🌈🦄
julia ferraioli @juliaferraioli
19K Followers 2K Following AI/ML Open Source Magician Doing #OpenSource-y stuff, probably full of bees. @StoriesOfOSS co-founder. #DiversityIncludesDisability.
Rust Language @rustlang
153K Followers 2 Following A programming language empowering everyone to build reliable and efficient software. ** This account is no longer active. Follow us on other platforms! **
Mike Udasin @MikeUdasin
93 Followers 360 Following
Tom McCheese @Wookiee__
787 Followers 840 Following Dad, Security Cloud engineer, Quality Advocate, Coffee Drinker. Python enthusiast, Application Security Tester, Vulnerability Management. My tweets are my own.
Jeli.io @jeli_io
1K Followers 124 Following We've moved! Follow us at @pagerduty. Respond Faster. See Patterns. Learn From Your Incidents. Helping engineering teams at @indeed, @xero, and more.
Luca @luca_cloud
29K Followers 182 Following I speak to 800+ enterprise leaders a year on platforms & AI 👾 Community Leader at https://t.co/tMqrxd2B0b 100k+ weekly readers @ Platform WeeklyGuido van Rossum @gvanrossum
308K Followers 481 Following Python's BDFL-emeritus, Computer History Museum Fellow. Opinions are my own. He/him.
Jordan Tennenbaum @JETennenbaum
65 Followers 347 Following - Social Media + Content Manager at https://t.co/cITu9WUESV - Cactus collector + Corvette connoisseur - #OpenSource meme advocate - Champion of container hardening
Malware Unicorn @malwareunicorn
166K Followers 6 Following Mostly on @malwareunicorn.bsky.social @Straikerai. Ex-Microsoft. Ex-Meta.
Mudge @dotMudge
63K Followers 334 Following Make a dent in the universe. Find something that needs improvement: go there and fix things. If not you, then who? {he/they}
David A. Wheeler @drdavidawheeler
728 Followers 28 Following Director of Open Source Supply Chain Security at the Linux Foundation. #opensource #security . PhD in IT, MS CS, BS EE, CISSP. Views I post here are my own.
Laurie @laurieontech
33K Followers 1K Following Developing software one mistake at a time. LEGO obsessed.
Jennifer Bly @jennbly
263 Followers 442 Following Synthesizer. Storyteller. Optimist. Tech Marketing & Comms Pro. Open Source Advocate @LinuxFoundation Find me on LI
Netflix Engineering @NetflixEng
55K Followers 44 Following
sec4dev @sec4dev
646 Followers 196 Following Security CONFERENCE & BOOTCAMP for software developers. By @SBA_Research
MalwareTech @MalwareTechBlog
272K Followers 1 Following Not here anymore. Profiles: https://t.co/sFoOuGmYK2




















