Recent searches

No recent searches

Search options

Only available when logged in.
med-mastodon.com is one of the many independent Mastodon servers you can use to participate in the fediverse.
Medical community on Mastodon

Administered by:

Server stats:

343
active users

med-mastodon.com: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.3

#devsecops

2 posts2 participants0 posts today
Tanya Janca | SheHacksPurple :verified: :verified:<p>🎥 Missed one of my past conference talks? Let’s fix that.</p><p>I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.</p><p>“DevSecOps with OWASP DevSlop”<br>📽️ <a href="https://twp.ai/4ipX6g" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">twp.ai/4ipX6g</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CyberSecurity</span></a> <a href="https://infosec.exchange/tags/SecurityAwareness" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityAwareness</span></a> <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>appsec</span></a> <a href="https://infosec.exchange/tags/OWASP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OWASP</span></a> <a href="https://infosec.exchange/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevOps</span></a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a></p>
Jason St-Cyr :mstdn:<p>I have a new tutorial up on the Puppet blog! This time, tackling vulnerability remediation in Puppet Enterprise Advanced. The steps in the tutorial will show you how to:<br>* Locate a CVE an the nodes affected by the CVE<br>* Create a job to remediate the vulnerability on those nodes.<br>* Review the progress and success of the patching.</p><p>I hope this helps!</p><p><a href="https://www.puppet.com/blog/vulnerability-remediation-puppet-advanced-patching" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">puppet.com/blog/vulnerability-</span><span class="invisible">remediation-puppet-advanced-patching</span></a></p><p><a href="https://mstdn.ca/tags/puppet" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>puppet</span></a> <a href="https://mstdn.ca/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>devops</span></a> <a href="https://mstdn.ca/tags/sre" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>sre</span></a> <a href="https://mstdn.ca/tags/compliance" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>compliance</span></a> <a href="https://mstdn.ca/tags/CVE" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CVE</span></a> <a href="https://mstdn.ca/tags/devsecops" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>devsecops</span></a></p>
Tanya Janca | SheHacksPurple :verified: :verified:<p>If you’re working in <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AppSec</span></a> or <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a> and want to streamline your operations, let’s talk — I’d love to introduce you!</p><p><a href="https://twp.ai/4iptNT" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">twp.ai/4iptNT</span><span class="invisible"></span></a></p><p>4/4</p>
Wu Evar 🇪🇺🇺🇦<p><a href="https://mastodon.green/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a> <a href="https://mastodon.green/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevOps</span></a> </p><p>Ahahaha 😆 Das Ding ist sooooo on-point.</p><p><a href="https://www.youtube.com/watch?v=rXPpkzdS-q4" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="">youtube.com/watch?v=rXPpkzdS-q4</span><span class="invisible"></span></a></p>
Tanya Janca | SheHacksPurple :verified: :verified:<p>🎥 Missed one of my past conference talks? Let’s fix that.</p><p>I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.</p><p>“Security is Everybody’s Job”<br>📽️ <a href="https://twp.ai/4ion6e" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">twp.ai/4ion6e</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CyberSecurity</span></a> <a href="https://infosec.exchange/tags/SecurityAwareness" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityAwareness</span></a> <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>appsec</span></a> <a href="https://infosec.exchange/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>devops</span></a> <a href="https://infosec.exchange/tags/devsecops" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>devsecops</span></a></p>
TechnoTenshi :verified_trans: :Fire_Lesbian:<p>SecretSpec offers a new declarative approach to secrets management, enabling one spec to work across local dev, CI/CD, and production with different providers, all without changing app code. Not a paid promotion or endorsement.</p><p><a href="https://devenv.sh/blog/2025/07/21/announcing-secretspec-declarative-secrets-management/#a-world-of-possibilities" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">devenv.sh/blog/2025/07/21/anno</span><span class="invisible">uncing-secretspec-declarative-secrets-management/#a-world-of-possibilities</span></a></p><p><a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a> <a href="https://infosec.exchange/tags/SecretsManagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecretsManagement</span></a> <a href="https://infosec.exchange/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenSource</span></a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Infosec</span></a></p>
Pyrzout :vm:<p>Making security and development co-owners of DevSecOps <a href="https://www.helpnetsecurity.com/2025/07/18/galal-ibrahim-maghola-devsecops-practices-tips/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">helpnetsecurity.com/2025/07/18</span><span class="invisible">/galal-ibrahim-maghola-devsecops-practices-tips/</span></a> <a href="https://social.skynetcloud.site/tags/Artificialintelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Artificialintelligence</span></a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cybersecurity</span></a> <a href="https://social.skynetcloud.site/tags/automation" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>automation</span></a> <a href="https://social.skynetcloud.site/tags/compliance" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>compliance</span></a> <a href="https://social.skynetcloud.site/tags/G42Company" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>G42Company</span></a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Don</span></a>'tmiss <a href="https://social.skynetcloud.site/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a> <a href="https://social.skynetcloud.site/tags/Features" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Features</span></a> <a href="https://social.skynetcloud.site/tags/Hotstuff" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Hotstuff</span></a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>News</span></a></p>
jpmellojr<p>Discover the true cost of CVEs &amp; why moving beyond vulnerabilities is a MUST for effective cybersecurity! <a href="https://jpmellojr.blogspot.com/2025/07/the-true-cost-of-cves-why-you-need-to.html" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="ellipsis">jpmellojr.blogspot.com/2025/07</span><span class="invisible">/the-true-cost-of-cves-why-you-need-to.html</span></a> <a href="https://noc.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Cybersecurity</span></a> <a href="https://noc.social/tags/CVEs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CVEs</span></a> <a href="https://noc.social/tags/SecurityPrioritization" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityPrioritization</span></a> <a href="https://noc.social/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a> <a href="https://noc.social/tags/Vulnerabilities" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Vulnerabilities</span></a></p>
Tanya Janca | SheHacksPurple :verified: :verified:<p>🎥 Missed one of my past conference talks? Let’s fix that.</p><p>I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.</p><p>“DevSecOps with OWASP DevSlop”<br>📽️ <a href="https://twp.ai/4iofNZ" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">twp.ai/4iofNZ</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CyberSecurity</span></a> <a href="https://infosec.exchange/tags/SecurityAwareness" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecurityAwareness</span></a> <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>appsec</span></a> <a href="https://infosec.exchange/tags/OWASP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OWASP</span></a> <a href="https://infosec.exchange/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevOps</span></a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a></p>
Lisi Hocke<p>Have you heard? I'm giving my workshop "Secure Development Lifecycle Applied - How to Make Things a Bit More Secure than Yesterday Every Day" at NDC Porto this year! Super excited to experience this conference, share and learn with folks. 🤩</p><p><a href="https://ndcporto.com/workshops/part-1-2-secure-development-lifecycle-applied-how-to-make-things-a-bit-more-secure-than-yesterday-every-day/4ebef8044659" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">ndcporto.com/workshops/part-1-</span><span class="invisible">2-secure-development-lifecycle-applied-how-to-make-things-a-bit-more-secure-than-yesterday-every-day/4ebef8044659</span></a></p><p><a href="https://mastodon.social/tags/NDCPorto" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NDCPorto</span></a> <a href="https://mastodon.social/tags/AppSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AppSec</span></a> <a href="https://mastodon.social/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a></p>
TechnoTenshi :verified_trans: :Fire_Lesbian:<p>FOKS launches as a federated, end-to-end post-quantum encrypted Git and KV hosting tool, with support for YubiKeys, team management, and privacy-preserving metadata. Fully open-source and bootstrapped.</p><p><a href="https://foks.pub/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">foks.pub/</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/Encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Encryption</span></a> <a href="https://infosec.exchange/tags/PostQuantum" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PostQuantum</span></a> <a href="https://infosec.exchange/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenSource</span></a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a></p>
TechnoTenshi :verified_trans: :Fire_Lesbian:<p>Helm v3.18.3 and earlier are vulnerable to local code execution via a crafted Chart.yaml and symlinked Chart.lock. Exploit occurs during dependency updates. Patched in v3.18.4.</p><p><a href="https://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">github.com/helm/helm/security/</span><span class="invisible">advisories/GHSA-557j-xg8c-q2mm</span></a></p><p><a href="https://infosec.exchange/tags/Helm" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Helm</span></a> <a href="https://infosec.exchange/tags/SupplyChainSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SupplyChainSecurity</span></a> <a href="https://infosec.exchange/tags/GoLang" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GoLang</span></a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DevSecOps</span></a></p>
*
knoppix

A critical Linux vulnerability (CVE-2025-32463) in Sudo lets any local unprivileged user gain root via the --chroot (-R) option

🔒 Affects default configs on Ubuntu, Fedora & others — no Sudo rules needed
🛠️ Fix: Update to Sudo 1.9.17p1+ (no workarounds)
👀 CVSS: 9.8 (Critical)

Highlights persistent risks in open-source privilege handling 🧩

cybersecuritynews.com/linux-su

#Linux #Sudo #FOSS #CyberSecurity #InfoSec #OpenSource #Vulnerability #Root #Exploit #SysAdmin #DevSecOps #Tech @TechNews

Anders Eknert

"regal-main test bundle ran 2.54 times faster than regal test bundle"

#OPA's new parallel test runner doing it's magic in Regal, where 800 unit tests now execute in half a second (down from 1.4). Shipping with the next OPA release, which if all goes well should be later today :)

Amazing work by OPA maintainer Sebastian Spaink 🚀

#CloudNative#DevOps#DevSecOps
RSOLV

👋 Hi y'all! New to infosec.exchange!

We're RSOLV - building automated security vulnerability detection + remediation (yes, a _fix_, not just a red flag)

While researching AI-generated code, we discovered something wild: 19.6% of AI package suggestions don't exist. Hackers are pre-registering them.

Traditional scanners miss this completely. We detect AND fix it.

Journey: indiehackers.com/post/built-th

Blog: rsolv.dev/blog/hidden-cost-ai-

Indie HackersBuilt the wrong thing at the wrong time - but discovered something worse (or "better")# Built the wrong thing at the wrong time - but discovered something worse (or better?) Hey IndieHackers! 👋 **TL;DR: Got my lunch eaten by Claude Code,...
#AutomatedRemediation#AISecurity#DevSecOps
TrendingLive feeds
About