David

Heads up, everyone, @absoluteappsec is shifting times this week! Join us Thursday at 2:30 EDT. @DarrenPMeyer from @EndorLabs is coming on the show to discuss Endor's brand new Dependency Management 2024 report. Set your calendars and join us here: youtube.com/watch?v=fAgVLX…

🚀 Today we're at Supply Chain Cyber Security Summit in Madrid! 🇪🇸 Join us at the Endor Labs booth for insights, networking, and maybe even some surprise swag! See you there! 👋 #SupplyChainSecurity #CyberSecurity hubs.ly/Q02tcR6k0

Are you interested in code traceability, admission control, and provenance? Then our next webinar might be for you! Learn more and register at hubs.ly/Q02nDhVM0

We're excited to announce our latest product: Endor Labs CI/CD 🔎 CI/CD Discovery 🕵️ Repository security posture management (RSPM) 📜 Build Integrity Verification Read more >>> hubs.ly/Q02m9F_Z0 #security

“SCA with 80% less noise? I’d love to see that!” Now you can, free for 30 days: hubs.ly/Q02mh4d-0 #appsec #cybersecurity #sca #sbom #compliance #devsecops

Evening everyone. On May 4th OWASP Brum returns for an in-person event to discuss going #devsecops in #gitlab and debunking myths around #IAST and #RASP Be great to see the local tech community at this event. Will share more deta…lnkd.in/eiu43J_N lnkd.in/e7egHeKX

Yes! @LMaccherone and I are hosting a #DevOps transformation workshop (the Sec is just doing it right) and we’ll be #ShiftSmart. It’s in London on Tuesday 21st of March. Limited spaces though so strike while the iron is hot. As @planetlevel mentioned I…lnkd.in/eE8K5iWn

@Outlook your exclusive inbox junk filters are broken 🎣🎣🎣

Recently, our Contrast Labs research team came across an article discussing a Web Application Firewall (WAF) bypass. Here’s our take on the situation and how you can use this as an opportunity to improve your security posture. bit.ly/3wYBxko

We're excited to announce our new Open Source Software Sponsorship Program today which will financially support the #developers of open source projects to help augment proprietary code developed in-house and to accelerate time-to-market. Learn more here: bit.ly/3ATIMNb

Runtime SCA matters.

CVE-2022-42889: Don’t panic, do patch | Contrast Security contrastsecurity.com/security-influ…

A Contrast Python Agent Developer used Contrast to discover a vulnerability in the wild, read more about it here! contrast.security/post/xss-vuln-…

Log4Shell Defenses: Java Agents in Conversation with Contrast Security’s Arshan Dabirsiaghi infoq.com/news/2022/02/l…

Contrast is releasing SafeLog4j, a free and open-source, general purpose tool that can detect/verify vulnerable log4j applications and protect them. Learn more: bit.ly/30wz9Vy #log4j #zeroday #cybersecurity

Using .NET 6 already? We got you! contrastsecurity.com/security-influ…

Why Less Is More for Static Application Scanning - Surag Patel youtu.be/v2mj1uLdKqQ #AppSec

This is really going to be a fun talk. Join @mattaustin and I as we talk about supply chains from soup to nuts. Plus we'll throw in a few real-life examples we've identified. Our webinar is on October 4th, sign up today! linuxfoundation.org/webinars/how-a…

A peep at how sensors allow us to constantly refine our #appsec rules for the highest "accuracy": contrastsecurity.com/security-influ… #appsec