Phoenix Security - Appsec Phoenix - Cloud Security

A new @appsecphx video intro...we never thought that making a video would have taken so many people! it was a journey! 😎😁 buff.ly/2Xq5Xy6 #cyber #cybersecurity #app #appsec #cloud #vulnerabilities #priorities #assessment #automation #orchestration #applicaitonsecurity

Overcoming LLM limitations in vulnerability research. This approach integrates with Brave for efficient web searches, unlocking new levels of security analysis. #Cybersecurity #AI #LLMs

Francesco Cipollone reveals a tool for quick vulnerability understanding. Get automatic summaries and snippets from this free, open-source project. #OpenSource #Cybersecurity #DevTools

Full analysis + IOCs: phoenix.security/sandworm-mode-…

⚠️ SANDWORM_MODE is an active npm supply chain worm targeting DevSecOps and AI toolchains. 19 malicious packages. CI poisoning. AI MCP injection. Credential exfiltration on import. If installed, assume breach. #DevSecOps #AppSec #SupplyChainSecurity #npm

#AppSec #CyberSecurity #ASPM #DevSecOps Read more and download the full report here: 👉 phoenix.security/application-se…

Phoenix Security recognized as a Management Leader in the 2026 Latio AppSec Report. Enterprise vuln programs break when ownership, reachability, and remediation aren’t aligned. Attribution. Tool-agnostic reachability. AI-driven remediation. From ownership → executable fix.

Dashboards don’t reduce risk. Shipping does. phoenix.security/remediation-fi… #AppSec #DevSecOps #CyberSecurity

Security teams don’t have a visibility problem. They have a remediation throughput problem. 40,000 vulnerabilities → 12 fixes that matter. Latest breakdown: • Reachable + exploitable prioritization • Container lineage tracing • Minimum-impact upgrades • Dual SLA clocks

Together, we raised £556,414 for NSPCC. Proof that when the security community comes together, real impact happens. Proud to be part of this. See you next year. 🖤🔥

White Hat Ball 2026 was something special. This year, Phoenix Security joined not just as guests — but as sponsors, hosting a table and celebrating an incredible community. #WhiteHatBall #PhoenixSecurity #CyberSecurity #Community #GivingBack

Proud to sponsor White Hat Ball 2026 🎩 📍 London 📅 Jan 30, 2026 🖤 Black Tie 💙 Supporting Childline (NSPCC) Cybersecurity is about protecting people — and community matters. See you there. #WhiteHatBall #PhoenixSecurity #InfoSec #CyberSecurityCommunity #NSPCC

We’ll be at these events showing how Phoenix Security | ASPM helps security teams focus on what actually matters in production — not just dashboards. 👉 Book a live demo here: phoenix.security/request-a-demo/ hashtag#CTEM hashtag#AppSec hashtag#VulnManagement hashtag#SecurityTeams

Join Phoenix in 2026 🚀 We’ll be at VulnCon, OWASP EU & Global, LASCON, Black Hat USA and more. Let’s talk real vulnerability exposure, remediation, and security that works in practice. See you there 👋 #AppSec #CyberSecurity #InfoSec #SecurityCommunity

Full technical breakdown 👇 phoenix.security/sha1-hulud-v3-… #Sha1Hulud #SupplyChainSecurity #AppSec #DevSecOps #npm

🚨 Sha1-Hulud 3.0 isn’t a CVE — it’s install-time execution on trust. Runs inside dev machines & CI Steals npm/GitHub tokens Spreads using your own pipelines One package is enough. #Sha1Hulud #SupplyChainSecurity #AppSec #DevSecOps #npm

87k+ exposed instances. Public PoC. Silent exploitation. 👉 Read the full analysis here: phoenix.security/mongobleed-vul… #PhoenixSecurity #MongoBleed #SecurityResearch #ExposureManagement

MongoDB vulnerability that leaks memory before auth — and behaves like RCE without executing code. MongoBleed (CVE-2025-14847) is a trust-boundary failure in zlib compression that turns memory disclosure into full compromise via stolen credentials. #MongoBleed #PhoenixSecurity

Curious what we’ve been building this year? From AI security agents to new platform features focused on context, prioritization, and real remediation outcomes — we’ve been busy. 👉 See the platform in action: phoenix.security/request-a-demo/ #VulnerabilityManagement #SecurityTeams

Wrapping up 2025 with momentum 🎉 ‣ 2→3× ARR ‣ 200% growth ‣ New teams, new locations ‣ Trusted by top global security teams Onward to 2026 🚀 #CyberSecurity #SaaS #PhoenixSecurity #CTEM

87,000+ MongoDB instances are exposed. Public PoC exists. This isn’t RCE — but it’s how attackers get there. Full technical breakdown 👇 phoenix.security/mongobleed-vul…

Your MongoDB might be leaking memory — silently. MongoBleed (CVE-2025-14847) allows unauthenticated attackers to extract heap memory over the network. No crash. No logs. Just data exposure. #MongoBleed #CVE202514847 #MongoDB #AppSec #DevSecOps