#Machine...   #Artific...   #MLOps  

@faun shared a link, 1 week, 2 days ago

Read AI/M Weekly

AI Weekly Newsletter, Kala. Curated AI news, tutorials, tools and more - Join thousands of other readers, 100% free, unsubscribe anytime.

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

#informa...   #andriod   #DevSecO...   #cyberse...   #Infosec  

@tutorialboy24 shared a post, 5 months, 1 week ago

tut

Spring Actuator - Stealing Secrets Using Spring Actuators - Part 1:

Spring is a set of frameworks for developing Applications in Java. It is widely used, and so it is not unusual to encounter it during a security audit or penetration test. One of its features that I recently encountered during a Whitebox audit is actuators. In this series of articles, I will use the..

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

554 views  

#informa...   #Infosec   #cyberse...   #Securit...   #DevSecO...  

@tutorialboy24 shared a post, 5 months, 1 week ago

tut

Turning cookie based XSS into account takeover

EpilogueI reported the exploitation scenario and was rewarded €500, as the impact was high. Be patient, don’t give up, and think out of the box. In this case, I used the company’s service to exploit the bug.Source :- https://tutorialboy24.blogspot.com/2022/09/turning-cookie-based-xss-into-account.ht..

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

544 views  

#cyberse...   #aws   #DevSecO...   #Securit...  

@tutorialboy24 shared a post, 5 months, 1 week ago

tut

Exploiting Amazon Simple Notification Service Improper Validation of SigningCertUrl

IntroductionCountless applications rely on Amazon Web Services’ Simple Notification Service for application-to-application communication such as webhooks and callbacks. To verify the authenticity of these messages, these projects use certificate-based signature validation based on the SigningCertURL..

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

537 views  

#aws   #DAST   #DevSecO...   #CloudCo...   #CloudNa...  

@boldlink shared a post, 7 months, 3 weeks ago

AWS DevOps Consultancy, Boldlink

Adopting DevSecOps

What is DevSecOps?DevSecOps refers to integrating security objectives as early as possible in a DevOps software delivery model. In DevsecOps, security is introduced as a shared responsibility from the beginning to the end of the software development lifecycle.DevSecOps also includes automating some ..

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

760 views  

#aws   #enginee...   #DevSecO...   ##data   ##securi...  

@boldlink shared a post, 9 months, 2 weeks ago

AWS DevOps Consultancy, Boldlink

AWS Security Intro – 4. Data

When it comes to Data, we understand that misconfigurations can expose your data to be exposed or exploited against our customers. But if guided in the correct way to use the best solutions on AWS, they can avoid the misconfigurations and pitfalls of having an abundance of choices on AWS.AWS Shared ..

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

762 views  

#github   #gitlab   #DevSecO...   #NIST   #DevOps  

@muhammadali642 shared a post, 1 year ago

Marketing

NIST’s DevSecOps guidance: This is what you should know

The NIST DevSecOps guide publication critically highlights technical security rudiments for industry-level DevSecOps integrating with cloud-native applications based on micro-services.

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

1k views  

#DevSecO...   #DevOps  

@bridgecrewio shared a post, 1 year, 1 month ago

2022 Prediction: DevSecOps will cross the chasm

We’ve been talking about DevSecOps and shift-left security for years. Although this approach probably didn’t “cross the chasm” in 2021, we did see some very telling milestones.

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

787 views  

#DevSecO...  

@bridgecrewio shared a post, 1 year, 1 month ago

The key to DevSecOps success: Cross-team knowledge sharing

A good DevSecOps strategy goes beyond having the right tools and processes in place: it requires consistent and crucially, bi-directional feedback and learning. Both security and engineering teams have such different priorities and strengths, but that doesn’t mean they don’t have anything to learn from each other. This year, make it a resolution to create a culture of bi-directional learning between these two teams and reap the benefit of improved collaboration. Here are the top things one can learn from the other to break down silos in the name of DevSecOps.

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

781 views  

#DevSecO...   #cicd   #DevOps  

@dijodaiju shared a post, 1 year, 1 month ago

DevOps & DecSecOps Roadmap [From beginner to an expert]

In this blog, I will be explaining the path that I’m following in my DevOps journey.

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

892 views  

#DevSecO...  

@bridgecrewio shared a post, 1 year, 2 months ago

5 Ways to Configure a Monorepo for DevSecOps Efficiency

Monorepos—or the use of a single repository for every part of an application—have been around since before git was invented in 2005.

×

Hey, sign up or sign in to add a reaction to my post.

Join thousands of other developers, 100% free, unsubscribe anytime.

Join using Twitter Join using Github

We hate spam and we will never spam you. Already have an account? Then please sign in.

865 views