Get pumped for #OWASP Global #AppSec EU in May! Enhance your experience by becoming a Mentor and building lasting connections while assisting others on their journey! Don't miss out, sign up here: https://owasp.wufoo.com/forms/zk2cdkr1qla6o8/ #CyberSecurity #AI #threatmodeling #Barcelona #devsecops #infosec

Join Magnus Jungsbluth at OWASP Global AppSec EU 2025 in Barcelona for an inside look at scaling Policy as Code across thousands of applications!

Policy as Code for Applications at Scale
Thursday, May 29, 2025
3:30 PM – 4:15 PM CEST

Register: https://owasp.glueup.com/event/123983/register/

A must-attend for platform engineers, appsec leaders, and anyone scaling security across modern organizations.

What's cookin' in Anchore OSS? This week: 18 issues/PRs tackled! Syft got smarter with .NET & Chrome, Grype fixed a critical vuln bug, and community heroes dropped perf & regex wins!
Weekly digest is live: https://anchorecommunity.discourse.group/t/anchore-open-source-weekly-report-week-17-2025/416
#OpenSource #DevSecOps

The Evolution of Programming: AI's Role in Disrupting Developer Roles

As AI continues to advance, the landscape of programming is shifting dramatically. Developers are now integrating AI helpers into their workflows, fundamentally changing how software is built and main...

https://news.lavx.hu/article/the-evolution-of-programming-ai-s-role-in-disrupting-developer-roles

Anchore announces Grype v0.91.2. This release resolves several false positives identified in v0.91.1, enhancing scan accuracy. Users are advised to update.
#VulnerabilityScanning #Security #DevSecOps
https://github.com/anchore/grype/releases/tag/v0.91.2

Threat alert: AI-generated code is overwhelming software supply chains

Three vendors — Endor Labs, Lineaje, and Cycode — are responding with agentic AI tools that move AppSec from detection to autonomous action.

New capabilities include:
Reviewing and remediating pull requests with security context
Explaining vulnerabilities in plain English
Automatically fixing risks in containers and source code
Monitoring CI/CD memory for secrets theft
Mapping risk across entire dev pipelines

What leaders need to consider:
• AI agents must be trained, governed, and secured — like any supply chain actor
• Tools should integrate at the code level, not just report level
• Runtime guardrails, policy engines, and visibility are non-negotiable

We're past “SBOMs only” — software supply chain security is now a full-stack discipline, and agentic AI is driving that shift.

#CyberSecurity #SupplyChainSecurity #AI #DevSecOps #AgenticAI #AppSec #CICDSecurity

https://www.techtarget.com/searchitoperations/news/366623140/Software-supply-chain-security-AI-agents-take-action

Vibe coding with LLMs is fast—but is your code secure? Discover the hidden risks: SQL injection, leaked secrets, and prompt injection vulnerabilities. Stay ahead in AI-driven development! Learn more: https://zerodaily.me/blog/2025-04-25-vibe-coding-llms-security-flaws

Vibe coding with LLMs is fast—but is your code secure? Discover the hidden risks: SQL injection, leaked secrets, and prompt injection vulnerabilities. Stay ahead in AI-driven development! Learn more: https://zerodaily.me/blog/2025-04-25-vibe-coding-llms-security-flaws

New release: Grype v0.91.1 is out! Packed with important bug fixes for improved vulnerability scanning accuracy and stability.
Check the changelog and upgrade!
#grype #security #devsecops
https://github.com/anchore/grype/releases/tag/v0.91.1

Spending time plumbing Syft & Grype into custom dashboards & policy engines on AWS than actually securing things? Our sponsors at Anchore packaged it all up in the Enterprise Cloud Image. Might save ya some hassle!
https://anchore.com/blog/introducing-the-anchore-enterprise-cloud-image/
#DevSecOps #SecurityAutomation #AWS

Microsoft Boosts AI Bug Bounty to $30,000: A New Era of Cybersecurity Incentives

Microsoft is stepping up its game in the cybersecurity arena by increasing bug bounty payouts for AI vulnerabilities up to $30,000. This move not only incentivizes researchers to identify critical sec...

https://news.lavx.hu/article/microsoft-boosts-ai-bug-bounty-to-30000-a-new-era-of-cybersecurity-incentives

The Digital Terrain Is Shifting — Are Your Apps and APIs Ready?

As AI adoption accelerates, so do AI-driven attacks.
In their new research report, Akamai Technologies uncovers the evolving threats facing web applications and APIs — and how organizations can respond before attackers get ahead.

State of Apps and API Security 2025: How #AI Is Shifting the Digital Terrain explores the sharp rise in automated, intelligent threats — and the new defenses emerging to meet them.

Download the full report here: https://itspm.ag/akamaixmwd
Research like this helps #security professionals, #leaders, and #developers stay ahead of the curve — and shape the future of #digital defense.

We’re also proud to feature Akamai in our RSAC 2025 coverage — with a Brand Story recorded pre-event and a follow-up conversation happening on location at the conference in San Francisco with Rupesh Chokshi, Sean Martin, CISSP, and Marco Ciappelli.

Watch the pre-event recording here: https://youtu.be/DMm6INJ_2Z8

A huge thank you to the Akamai team for sponsoring our coverage and sharing their insights with our global audience.

Check out the report and stay tuned for more from RSAC:

Download the Report: https://itspm.ag/akamaixmwd
Explore our RSAC 2025 Coverage: https://www.itspmagazine.com/events/rsac-2025

We have migrated our OpenTofu/Terraform module template from GitHub to @Codeberg.

https://codeberg.org/SkypLabs/terraform-module-template

It follows the standard module structure as described in the OpenTofu documentation, plus some non-standard but commonly used files and folders. The template also comprises a pre-commit configuration file.

Feel free to use it (public domain licensed), and if you do, don't hesitate to share your feedback with us if necessary!

Here is a reminder of where we are now: powerful #AI tools let anyone go from zero to proof-of-concept in hours, not weeks. It’s empowering and concerning. Responsible disclosure and collaboration matter more than ever. #CyberSecurity #Vulnerability #InfoSec #AIEthics #ResponsibleAI #DevSecOps

How I Used AI to Create a Work...

Here we go, with another pre-RSAC 2025 Conference Coverage Brand Story!

#QuantumSecurity, Real Problems, and the Unifying Layer Behind It All
A Brand Story with Marc Manzano, General Manager, Cybersecurity Group at SandboxAQ

As we get ready for RSAC 2025, we’re kicking things off with some Brand Story conversation that sets the tone for what’s coming.

In this pre-event episode, SandboxAQ shares how their flagship platform, Active Guard, is reshaping #cybersecurity at the intersection of #AI and #quantum. From cryptographic asset management to non-human identity oversight and automated compliance, it’s all about solving real challenges and building a more secure, interoperable future.

ITSPmagazine's Co-founders Marco Ciappelli and Sean Martin, CISSP sat down with Marc Manzano for a first look at the #technology and thinking behind it — and what you can expect from their presence at RSA Conference 2025.

We’ll reconnect and record with SandboxAQ on location at #RSAC2025 for a deeper dive into this critical conversation.

A special thank you to SandboxAQ for sponsoring our RSAC 2025 coverage and supporting this exploration into the future of cybersecurity.

Watch, listen, and learn more below:

Video Teaser: https://youtu.be/eCT8qNhp4nc

Full Video Episode: https://youtu.be/aD34MD5IRnc

Full Audio Podcast: https://brand-stories-podcast.simplecast.com/episodes/quantum-security-real-problems-and-the-unifying-layer-behind-it-all-a-brand-story-conversation-with-marc-manzano-general-manager-of-the-cybersecurity-group-at-sandboxaq-a-rsac-conference-2025-brand-story-pre-event-conversation

Explore our full RSAC 2025 Coverage: https://www.itspmagazine.com/events/rsac

Great blog from Square, on how they built a custom solution for #Kubernetes guardrails on top of Open Policy Agent. This is a perfect example of the flexibility OPA provides organizations to solve the most advanced use cases!

https://developer.squareup.com/blog/kube-policies-guardrails-for-apps-running-in-kubernetes/

Are you ready for #OWASP Global #AppSec EU? Be part of the action as a volunteer! Your contribution can make a real impact. Fill out the form today to join something incredible! Don't miss out, sign up here: https://owasp.wufoo.com/forms/z1jihpei0ws2e3v/ #devsecops #threatmodeling #infosec

Are you looking for a new remote job? Browse 400+ remote positions from open source companies including @acquia @grafana @mozilla @wikimediafoundation and more on #OSJH
https://opensourcejobhub.com/jobs/?q=remote&utm_source=mosjh
#career #OpenSource #engineer #sales #security #marketing #CloudNative #developer #DevSecOps #SRE #FOSS

A tiny flaw, a massive heist. CTO Paul Edward shares his harrowing experience with race conditions at #DevConf2025. Live demos, real code examples, and hard-earned lessons from a security expert who's seen the worst-case scenario firsthand. #AppSecurity #DevSecOps