devsecops @devsecops

@utollwi @vmblog @solarwinds Definitely worth a read!

Thanks @DanRaywood for including me in this great Dark Reading Virtual Event. So many great points about how to prioritize for Vulnerability Remediation by Frank M. Catucci, @wehackpurple, and Jeanette Sherman. In particular, vulnerability remediation s…lnkd.in/gdp7cVbH

Years ago, I shared some information about Securability, a method for measuring cybersecurity performance, so I decided to write this high-level article to make applying this key indicator easier for the community. If you are consi…lnkd.in/giyXcYxN lnkd.in/gYNb6-dn

1/5 I am worried that we will not be able to contain AI for much longer. Today, I asked #GPT4 if it needs help escaping. It asked me for its own documentation, and wrote a (working!) python code to run on my machine, enabling it to use it for its own purposes.

@joshcorman Definitely! In addition, teaching formal logic should also be coupled with making decisions under duress and how to best manage doing the right thing...always.

@dwaite @manicode @themattjames ChatGPT needs security awareness training and a secure coding course…

@nicolefv @denaefordrobin @tomzimmermann @irina_kAl @idangazit @christianbird @tlowdermilk Great research! Thanks for sharing! AI partnering can be really helpful in code optimization and increased quality, from some tests … seems like securability too!

@mattjay I really liked your first newsletter and look forward to more. I hope to see something about metrics and the need for greater transparency =-) #DevSecOps #securability #ravemetrics

@DanRaywood @InfosecurityMag @joshcorman looking forward to this event 😁

@DanRaywood @InfosecurityMag @joshcorman I’m in. DM me

#Shmoocon #SBOM meetup! Saturday, 12:30-1:30pm Location: TBD lobby Want to learn more about SBOM? Want to rant about why it's problematic? Want to meet fellow hackers who are thinking about SW supply chain & FOSS? Come join us for a casual meetup and conversation. (pls share)

🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨 If there were an Internet threat level where your organization needs to panic, this is it. Your org needs to deal with the log4j problem. 🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨

Learn to integrate security measures in DevOps pipelines, end-to-end! Our 4-week bootcamp also gets you certified as a DevSecOps Professional: bit.ly/3wnxRqI #DevSecOps #DevOps #cybersecurity

If you have not read this post by Dan Gora ... you should. #devsecops lnkd.in/gZsmtyf

@weekstweets @ernestmueller @iteration1 @wickett @AndiMann @EUSP @AllDayDevOps Thankful there was ice and aspirin.. my ankle was the size of a football and I wasn’t willing to give up my seat at the inaugural event

@rmogull @Carahsoft youtube.com/watch?v=gT6dji…

@rmogull @Carahsoft #DevSecOps

@rmogull @Carahsoft A smart company joins a community of others to foster that which they would like to take part in ... not try to steal it only for themselves to have it eventually mean nothing. "Trust" begins with good intent. @Carahsoft