@JoeSpikey & @LoneTreePress #CISO | #security | #AppSec | #PenTesting | #Cybersecurity | #Leadership
Seattle, WA & Bozeman, MT
Joined April 2020
- Tweets80
- Following207
- Followers54
- Likes17
#AppSec teams should think in three phases: Awareness, Enablement, and Enforcement to work efficiently with development teams.
Click through for more info.
#security #prodsec #ciso #infosec #cybersecurity
rethinksecurity.io/posts/the…
#iOS14 adds a warning if an app inspects your clipboard. You can see a demo of this in this video. youtube.com/watch?v=pRSWdtoU…
That was a trick question, those are all trackers. What’s worse those are all used on a single page on a single site.
Don’t fall victim to somebody else’s poor #AppSec leading to a #databreach
minted.com/data-incident-not…
Use unique credentials for each site with a #password manager like @1Password, @LastPass or @dashlane
Check yourself at haveibeenpwned.com/
ALT Minted data breach loses credentials and PII
WOW! @zoom_us acquires @KeybaseIO! This shows imporessive commitment to #security and #Encryption.
This will be a huge boon for e2e encryption if they get it working.
blog.zoom.us/wordpress/2020/…
How do you learn a new topic? For me it’s like exploring a new city, neighborhood by neighborhood. Do you explore area by area, or have some other way of getting what’s important into your brain? #learning #improvement
rethinksecurity.io/posts/a-t…
Great list of can’t miss web hacking techniques from @PortSwigger
portswigger.net/research/top…
How @generalelectric was able to integrate #security into their #agile dev process. Great insight into how to pull this off for hundreds of applications!
youtube.com/watch?v=dkDQ-sfv…
@Guardicore published a great writeup on #CVE-2020-3952
From the TL;DR "A bug in a function named VmDirLegacyAccessCheck which causes it to return “access granted” when permissions checks fail."
guardicore.com/2020/04/pwnin…
It has been a long year for Zoom this month, they’ve released dozens of patches recently. Learn what they have learned in this new ReThink article.
rethinksecurity.io/posts/eve…
ALT Every Application Fails: A Study in Zoom
Not surprising, anybody remember "unbreakable" Oracle?
Remember the "unbreakable" smart padlock that was found riddled with #security flaws?
The @FTC has now slapped Tapplock with an official complaint for deceptive security claims, which could lead to fines down the road.
threatpost.com/unbreakable-s…