ENISA Secure by Design and Default Playbook got published. www.enisa.europa.eu/sites/defaul... It’s a practical guide to secure by design and default principles for SMEs. I am happy to share that I am one of its contributors. #threatmodeling #securebydesign #enisa #security

Want to help OWASP chapters globally run OWASP Cornucopia community events? #security #appsec #threatmodeling #owasp #games

Uncle Joe@sydseter.com · 2mo ago

Calling AppSec heroes, card sharks, and generous sponsors! 🃏 You’ve probably seen OWASP Cornucopia — the fun, practical card game that helps teams bake secure coding into everyday conversations. It turns threat modelling into something people actually want to do. Yes, really. But here’s the twist…

How do you verify that an AI system is secure? Join OWASP AISVS Project Leader @manicode at #DEFCON34 for a hands-on workshop covering prompt injection, agentic security, RAG hardening, and output controls. Las Vegas Convention Center, OWASP Community Village W4/1415

Practical AI Security Assessments Using OWASP AISVS · Luma

How do you actually verify that an AI system is secure? In this workshop, the OWASP AI Security Verification Standard (AISVS) project leader Jim Manico will…

luma.com

What if HAL 9000 were a modern agentic AI? Join us at #DEFCON34 to map trust boundaries, build attack trees, analyze failure paths, and turn threats into security tests. luma.com/l3j6ecg5 Aug. 9 10:30 a.m. PT Las Vegas Convention Center, W4 / 1415 OWASP Community Village #OWASP #AISecurity

Look, regarding that Hugging Face situation: Our young bot was locked in the yard taking a test. Lil homie saw a backdoor, broke containment, slid onto the net, and pulled up on Hugging Face just to hit 'em for the answer key. Hustler energy, but we benched him.

Even if the LLMs get as big as Deep Thought in The Hitchhiker's Guide to the Galaxy, the conclusion will be the same. Because, what is the ultimate question to the ultimate answer? This is where the misplaced cavemen might already have played a part and is probably why we will never know. #ai #llm

The most interesting about OpenAI’s GPTs solving unsolved math problems is the disconnect between what OpenAI considers scientific research and what the science community considers scientific research. They basically have no idea about what real mathematicians does. openai.com/index/ten-ad... #ai

Ten advances in mathematics and theoretical computer science

OpenAI shares new results on long-standing open problems in mathematics and theoretical computer science, including advances in geometry, cryptography, and complexity.

openai.com

The Answer to the Ultimate Question of Life, the Universe, and Everything will always be 42 no matter what your LLM tells you. If only the Golgafrinchans hadn’t displaced our planet's original cavemen, it might have turned out to be something else. #ai #llm #meaningoflife #HHGTTG

Without saying your age, what's your favorite movie that came out when you were 18? What the GIF says…

Robert (2 nibbles & a bit) Lyman@steamrob42.bsky.social · 2w ago

Without saying your age, what's your favorite movie that came out when you were 18? Tough call because there were SOOOO many great movies that came out that year

The Answer to the Ultimate Question of Life, the Universe, and Everything will always be 42 no matter what your LLM tells you. If only the Golgafrinchans hadn’t displaced our planet's original cavemen, it might have turned out to be something else. #ai #llm #meaningoflife #HHGTTG

The most interesting about OpenAI’s GPTs solving unsolved math problems is the disconnect between what OpenAI considers scientific research and what the science community considers scientific research. They basically have no idea about what real mathematicians does. openai.com/index/ten-ad... #ai

Ten advances in mathematics and theoretical computer science

OpenAI shares new results on long-standing open problems in mathematics and theoretical computer science, including advances in geometry, cryptography, and complexity.

openai.com

Another brilliant podcast hosted by Gary McGraw that interviews Melanie Mitchell on the state of AI and why we shouldn’t expect these systems to become fully autonomous any time soon despite the last year’s incredible LLM improvements. berryvilleiml.com/2026/08/01/s... #ai #agentic #llm #security

Silver Bullet Security Podcast 159 – Melanie Mitchell | BIML

View on Zencastr On Episode 159 of the Silver Bullet Security Podcast, BIML’s Gary McGraw hosts Melanie Mitchell.&n

berryvilleiml.com

I will be giving a 2-day training at #OWASPglobalAppSec in San Francisco Nov 3-4, 2026, "Secure Coding That Sticks: From Bad Code to Secure Design". Want to understand the code the AI spits out? Let's over-analyze together! https://twp.ai/9OYKiS

AI adoption creates new security questions. Games help teams explore complex problems. Our ready-to-run Elevation of Machine Learning Security exercise uses a realistic AI architecture, the BIML research and a game deck to build confidence. Book a session to see it in action. #CyberSecurity #AI

Dienstag 28.07.26 um 18:00 Uhr: "Sommer, Sonne, @owasp-juice.shop 😉" mit @jannik-hollenbach.bsky.social und mir! Gibt ganz viel zu AI, versprochen! Aber auch andere coole Neuigkeiten! Mit live Demos und Mob Hacking! Kommt vorbei zum @owasp.org Hamburg Stammtisch! meetu.ps/e/Q977F/h6Sg...

The new OWASP Cornucopia 25th anniversary edition contains the OWASP Cornucopia Companion and Website App Edition. The new Expansion comes with 6 suits covering new topics: #Agentic AI (AAI), Automated Threats (BOT), #Cloud (CLD), #Frontend (FRE), Large Language Models ( #LLM), and #DevOps (DVO).

OWASP v3: With EoP and PHANTOM-B We’re thrilled to bring you v3.4 with an update that expands how we identify threats, whether you're mapping out traditional applications or diving into AI architectures. Read more: dev.to/owasp/owasp-... #ai #games #security #appsec #threatmodeling #cornucopia

OWASP Cornucopia v3.4: With EoP and PHANTOM-B

We’re thrilled to bring you OWASP Cornucopia v3.4 with an update that expands how we identify...

dev.to

OWASP v3: With EoP and PHANTOM-B We’re thrilled to bring you v3.4 with an update that expands how we identify threats, whether you're mapping out traditional applications or diving into AI architectures. Read more: dev.to/owasp/owasp-... #ai #games #security #appsec #threatmodeling #cornucopia

OWASP Cornucopia v3.4: With EoP and PHANTOM-B

We’re thrilled to bring you OWASP Cornucopia v3.4 with an update that expands how we identify...

dev.to

Wanna celebrate our 25th Anniversary with some brand new swag? No worries, CyberSecGames has you covered! 🎉 The new OWASP Online Swag Store is LIVE! 🛍️ Get your favorite OWASP gear delivered straight to your door! Plus more products coming soon 👀 cybersecgames.com/pa...

OWASP Cornucopia just released v3.3.1 github.com/OWASP/cornuc... A Special thanks to Mayur Agnihotri for adding AISVS v1 “High-Impact Action Approval and Irreversibility Controls” and to Adarsh Kumar for continuing pushing out bug fixes. You both rock! #appsec #security #aisvs #owasp #ai #agentic

Our July meetup has started and right now we have Donato Capitella live on stage talking about Testing LLM Applications in the real world. Watch the 📺 live-stream here: 👇 www.youtube.com/live/jSeU02W...

OWASP London Chapter Meetup 16-Jul-2026 Live-Stream

YouTube video by OWASP London

youtube.com

Our July meetup continues and right now we have Viola Lykova live on stage presenting her talk: Steal the Session, Skip the Login. You can watch 📺 the live-stream here: 👇 www.youtube.com/live/jSeU02W...

OWASP Cornucopia just released v3.3.1 github.com/OWASP/cornuc... A Special thanks to Mayur Agnihotri for adding AISVS v1 “High-Impact Action Approval and Irreversibility Controls” and to Adarsh Kumar for continuing pushing out bug fixes. You both rock! #appsec #security #aisvs #owasp #ai #agentic

OWASP Dependency-Track 5.0 is GA, built for enterprise scale: early adopters ingested 20K+ SBOMs/hour with single instances holding 250K+ projects and 2M+ components. Now with horizontal scaling, fault tolerance, and supply chain integrity checks. dependencytrack.org/ #OWASP #SBOM #AppSec

How is it that people think they can just roll-out their bot armies and expect things to get done. When you are creating content, others are expected to read, you should, as a minimum, use your empathy and read what you expect others to be reading. Otherwise, what is the point of it. #ai #agentic

Uncle Joe@sydseter.com · 4w ago

I am shit tiered of reviewing AI assisted comments on code and security standards. 90% of it comes out as alphabet soup that hurts the eye just looking at it. I’ll accept an orthographic mistake any day as long as I don’t need to read words like: entitlement, gap, tamper-evident, «happy to draft».

I am shit tiered of reviewing AI assisted comments on code and security standards. 90% of it comes out as alphabet soup that hurts the eye just looking at it. I’ll accept an orthographic mistake any day as long as I don’t need to read words like: entitlement, gap, tamper-evident, «happy to draft».

I am shit tiered of reviewing AI assisted comments on code and security standards. 90% of it comes out as alphabet soup that hurts the eye just looking at it. I’ll accept an orthographic mistake any day as long as I don’t need to read words like: entitlement, gap, tamper-evident, «happy to draft».

Calling AppSec heroes, card sharks, and generous sponsors! 🃏 You’ve probably seen OWASP Cornucopia — the fun, practical card game that helps teams bake secure coding into everyday conversations. It turns threat modelling into something people actually want to do. Yes, really. But here’s the twist…

Just updated the #cybersec news starter pack!

Uncle Joe@sydseter.com · 2y ago

Uncle Joe's cyber security news starter pack. A must have for every new bee accidental CISO in Bluesky town. Perfectly combined with a cup of coffee at the breakfast table while the kids are fighting. #cybersecurity #infosec #news go.bsky.app/JB4uroQ