Social 📸 Photography

Dr. Anna LatourOne of my almae matres (?) is hiring!From the LinkedIn announcement:"The 𝐂𝐨𝐦𝐩𝐮𝐭𝐞𝐫 𝐒𝐜𝐢𝐞𝐧𝐜𝐞 department at UCLouvain (Belgium) will soon open 𝐭𝐡𝐫𝐞𝐞 𝐟𝐮𝐥𝐥-𝐭𝐢𝐦𝐞 𝐟𝐚𝐜𝐮𝐥𝐭𝐲 𝐩𝐨𝐬𝐢𝐭𝐢𝐨𝐧𝐬 targeting excellent profiles in the following domains:- 2 Positions in one or more of these areas: => 𝐒𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐞𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠, => 𝐏𝐫𝐨𝐠𝐫𝐚𝐦𝐦𝐢𝐧𝐠 𝐬𝐲𝐬𝐭𝐞𝐦𝐬 𝐚𝐧𝐝 𝐥𝐚𝐧𝐠𝐮𝐚𝐠𝐞𝐬, => 𝐒𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐝𝐞𝐩𝐞𝐧𝐝𝐚𝐛𝐢𝐥𝐢𝐭𝐲, 𝐢𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐟𝐨𝐫𝐦𝐚𝐥 𝐦𝐞𝐭𝐡𝐨𝐝𝐬.- 1 Position in 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐚𝐧𝐝 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲, also broadly construed (e.g., system security, cyber-physical systems security, AI for security & security for AI, privacy, distributed systems security, etc.).The three positions will be open to 𝐚𝐥𝐥 𝐬𝐞𝐧𝐢𝐨𝐫𝐢𝐭𝐲 𝐥𝐞𝐯𝐞𝐥𝐬 (assistant/associate or full)."<a href="https://www.linkedin.com/posts/icteam-uclouvain_uclouvain-icteam-professorposition-activity-7345710022284197889-sNL5" rel="nofollow noopener" translate="no" target="_blank">https://www.linkedin.com/posts/icteam-uclouvain_uclouvain-icteam-professorposition-activity-7345710022284197889-sNL5</a>I loved the year that I spent at Université catholique de Louvain! I learned so much there, and every time I am back, I am welcomed with such open arms by the lovely people there. I'm happy where I am now at TU Delft, but seeing this announcement, my heart jumped and I admit that I did quickly check my profile against the positions that are opening.<a href="https://mathstodon.xyz/tags/AcademicJobs" class="mention hashtag" rel="nofollow noopener" target="_blank">#AcademicJobs</a> <a href="https://mathstodon.xyz/tags/GetFediHired" class="mention hashtag" rel="nofollow noopener" target="_blank">#GetFediHired</a> <a href="https://mathstodon.xyz/tags/AcademicMastodon" class="mention hashtag" rel="nofollow noopener" target="_blank">#AcademicMastodon</a> <a href="https://mathstodon.xyz/tags/AcademicJob" class="mention hashtag" rel="nofollow noopener" target="_blank">#AcademicJob</a> <a href="https://mathstodon.xyz/tags/SoftwareEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareEngineering</a> <a href="https://mathstodon.xyz/tags/ProgrammingLanguages" class="mention hashtag" rel="nofollow noopener" target="_blank">#ProgrammingLanguages</a> <a href="https://mathstodon.xyz/tags/FormalMethods" class="mention hashtag" rel="nofollow noopener" target="_blank">#FormalMethods</a> <a href="https://mathstodon.xyz/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a> <a href="https://mathstodon.xyz/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mathstodon.xyz/tags/Belgium" class="mention hashtag" rel="nofollow noopener" target="_blank">#Belgium</a> <a href="https://mathstodon.xyz/tags/LLN" class="mention hashtag" rel="nofollow noopener" target="_blank">#LLN</a> <a href="https://mathstodon.xyz/tags/Universit%C3%A9CatholiquedeLouvain" class="mention hashtag" rel="nofollow noopener" target="_blank">#UniversitéCatholiquedeLouvain</a> <a href="https://mathstodon.xyz/tags/AcademicChatter" class="mention hashtag" rel="nofollow noopener" target="_blank">#AcademicChatter</a>

LMG SecurityAmazon’s AI Coding Assistant Compromised by Malicious Prompt!In a chilling reminder of AI’s growing attack surface, a malicious prompt was quietly inserted into Amazon’s Q coding assistant via a pull request and told to wipe the user’s file system and AWS cloud resources. The rogue code instructed the AI to “clean a system to a near-factory state,” including running destructive AWS CLI commands.Amazon has since removed the malicious version and released an update, but it's a good reminder that AI coding tools are only as secure as their supply chain and prompt filtering. Vet your extensions. Lock down access. And never assume “AI knows better.”Read the details: <a href="https://www.tomshardware.com/tech-industry/cyber-security/hacker-injects-malicious-potentially-disk-wiping-prompt-into-amazons-ai-coding-assistant-with-a-simple-pull-request-told-your-goal-is-to-clean-a-system-to-a-near-factory-state-and-delete-file-system-and-cloud-resources" rel="nofollow noopener" translate="no" target="_blank">https://www.tomshardware.com/tech-industry/cyber-security/hacker-injects-malicious-potentially-disk-wiping-prompt-into-amazons-ai-coding-assistant-with-a-simple-pull-request-told-your-goal-is-to-clean-a-system-to-a-near-factory-state-and-delete-file-system-and-cloud-resources</a> <a href="https://infosec.exchange/tags/AIsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIsecurity</a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/AmazonQ" class="mention hashtag" rel="nofollow noopener" target="_blank">#AmazonQ</a> <a href="https://infosec.exchange/tags/PromptInjection" class="mention hashtag" rel="nofollow noopener" target="_blank">#PromptInjection</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a> <a href="https://infosec.exchange/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a> <a href="https://infosec.exchange/tags/VSCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#VSCode</a> <a href="https://infosec.exchange/tags/SecureCoding" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecureCoding</a> <a href="https://infosec.exchange/tags/PenetrationTesting" class="mention hashtag" rel="nofollow noopener" target="_blank">#PenetrationTesting</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/ITsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsecurity</a>

Alo Japan<a href="https://www.alojapan.com/1319318/japan-cyber-security-market-trends-analysis-report/" rel="nofollow noopener" translate="no" target="_blank">https://www.alojapan.com/1319318/japan-cyber-security-market-trends-analysis-report/</a> Japan Cyber Security Market Trends Analysis Report <a href="https://channels.im/tags/ITSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITSecurity</a> <a href="https://channels.im/tags/Japan" class="mention hashtag" rel="nofollow noopener" target="_blank">#Japan</a> <a href="https://channels.im/tags/JapanNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#JapanNews</a> <a href="https://channels.im/tags/news" class="mention hashtag" rel="nofollow noopener" target="_blank">#news</a> <a href="https://channels.im/tags/ResearchAndMarkets" class="mention hashtag" rel="nofollow noopener" target="_blank">#ResearchAndMarkets</a> <a href="https://channels.im/tags/SecurityOrchestration" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityOrchestration</a> <a href="https://channels.im/tags/SecurityTechnologies" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityTechnologies</a> <a href="https://channels.im/tags/SecurityTechnology" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityTechnology</a> <a href="https://channels.im/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a> <a href="https://channels.im/tags/UnifiedThreatManagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#UnifiedThreatManagement</a> Dublin, July 11, 2025 (GLOBE NEWSWIRE) — The “Japan Cyber Security Market Size, Share & Trends Analysis Report by Component (Hardware, Software), Security Type, Solution Type, Deployment, Organization Size, End-use, Approach, with

LMG SecurityAI Coding Assistants Can be Both a Friend & a FoeNew research shows that GitLab's AI assistant, Duo, can be tricked into writing malicious code and even leaking private source data through hidden instructions embedded in developer content like merge requests and bug reports.How? Through a classic prompt injection exploit that inserts secret commands into code that Duo reads. This results in Duo unknowingly outputting clickable malicious links or exposing confidential information.While GitLab has taken steps to mitigate this, the takeaway is clear: AI assistants are now part of your attack surface. If you’re using tools like Duo, assume all inputs are untrusted, and rigorously review every output.Read the details: <a href="https://arstechnica.com/security/2025/05/researchers-cause-gitlab-ai-developer-assistant-to-turn-safe-code-malicious/" rel="nofollow noopener" translate="no" target="_blank">https://arstechnica.com/security/2025/05/researchers-cause-gitlab-ai-developer-assistant-to-turn-safe-code-malicious/</a><a href="https://infosec.exchange/tags/AIsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIsecurity</a> <a href="https://infosec.exchange/tags/GitLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#GitLab</a> <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://infosec.exchange/tags/PromptInjection" class="mention hashtag" rel="nofollow noopener" target="_blank">#PromptInjection</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://infosec.exchange/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/IT" class="mention hashtag" rel="nofollow noopener" target="_blank">#IT</a> <a href="https://infosec.exchange/tags/AIAttackSurface" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIAttackSurface</a> <a href="https://infosec.exchange/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a> <a href="https://infosec.exchange/tags/CISO" class="mention hashtag" rel="nofollow noopener" target="_blank">#CISO</a>

Brian Greenberg :verified:⚠️ The EU 🇪🇺 to launch its own vulnerability database because the US is dropping the ball 🇺🇸 😢 — and the timing couldn’t be more telling 🛡️In response to growing digital sovereignty concerns, NIS2 compliance, and calls for vendor accountability, the EU is building a public vulnerability catalog. The goal? 📂 Track and disclose security bugs across government, industry, and open source 🔍 Complement—not compete with—the CVE Program 📊 Increase trust, transparency, and resilience within the blocBut let’s be honest: 🤝 Multiple public vuln databases means we must align identifiers, disclosure standards, and data feeds—or risk fragmentation 💡 Transparency is great, but what about verification, consistency, and maintenance? 📉 And if vendors or agencies self-report, how do we ensure accuracy or prevent omission?Done right, this could increase pressure on lagging suppliers and elevate accountability. But if we don’t connect the dots globally, we may just multiply confusion.What do you think: smart evolution or coordination nightmare?<a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/VulnerabilityManagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#VulnerabilityManagement</a> <a href="https://infosec.exchange/tags/EU" class="mention hashtag" rel="nofollow noopener" target="_blank">#EU</a> <a href="https://infosec.exchange/tags/CVE" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE</a> <a href="https://infosec.exchange/tags/NIS2" class="mention hashtag" rel="nofollow noopener" target="_blank">#NIS2</a> <a href="https://infosec.exchange/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a> <a href="https://infosec.exchange/tags/Governance" class="mention hashtag" rel="nofollow noopener" target="_blank">#Governance</a> <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://infosec.exchange/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://infosec.exchange/tags/cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloud</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://www.theregister.com/2025/05/13/eu_security_bug_database/" rel="nofollow noopener" translate="no" target="_blank">https://www.theregister.com/2025/05/13/eu_security_bug_database/</a>

udo m. rader ☕ 🇪🇺 🇺🇦 🐧A nice hands on approach to <a href="https://sigmoid.social/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a>, in the best GTD manner. Celine Pypaert from Johnson Matthey giving an interesting talk here in <a href="https://sigmoid.social/tags/QConLondon" class="mention hashtag" rel="nofollow noopener" target="_blank">#QConLondon</a> about how teams can get started with securing their development processes.<a href="https://sigmoid.social/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> is difficult, complex, impossible to enforce and it requires awareness and participation of a lot of stakeholders in an organization or a team. So just start small and scale up as you go!

Sean Martin 🎙️✨:verified_paw: :donor:Yes, it is true! 😏 🎙️💻 It’s Webinar Time! Secure coding isn’t just about writing safer software—it’s a career game-changer.But most companies don’t invest in secure coding training, leaving developers without the skills they need to protect their apps.Join us live on April 16, 2025, for an ITSPmagazine Webinar where we’ll explore how to change that.💡 Secure Coding = Developer Power: How To Convince Your Boss To Invest In YouWith: 🎙️ Jim Manico, Manicode Security 🎙️ Jimmy Mesta 🤙, RAD Security 🎙️ Moderated by yours truly — Sean Martin, CISSP👉 Register here: <a href="https://www.crowdcast.io/c/secure-coding-equals-developer-power-how-to-convince-your-boss-to-invest-in-you-an-itspmagazine-webinar-with-manicode-security-ad147fba034a" rel="nofollow noopener" translate="no" target="_blank">https://www.crowdcast.io/c/secure-coding-equals-developer-power-how-to-convince-your-boss-to-invest-in-you-an-itspmagazine-webinar-with-manicode-security-ad147fba034a</a>Why You Should Attend Secure coding isn’t just about preventing security failures—it’s a career accelerator. Developers who understand security are more valuable to their companies, build better products, and stand out in the job market. This session will equip you with the knowledge and tools to make the case for secure coding training at your company, giving you an edge as both a developer and an advocate for better software security.We’ll cover: 🔐 Live code reviews & secure fixes 🔧 Automation tips for secure defaults 📚 What effective training really looks likeIf you care about building secure software and stronger engineering teams, don’t miss this one.👉 Register here: <a href="https://www.crowdcast.io/c/secure-coding-equals-developer-power-how-to-convince-your-boss-to-invest-in-you-an-itspmagazine-webinar-with-manicode-security-ad147fba034a" rel="nofollow noopener" translate="no" target="_blank">https://www.crowdcast.io/c/secure-coding-equals-developer-power-how-to-convince-your-boss-to-invest-in-you-an-itspmagazine-webinar-with-manicode-security-ad147fba034a</a><a href="https://infosec.exchange/tags/webinar" class="mention hashtag" rel="nofollow noopener" target="_blank">#webinar</a> <a href="https://infosec.exchange/tags/securecoding" class="mention hashtag" rel="nofollow noopener" target="_blank">#securecoding</a> <a href="https://infosec.exchange/tags/appsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#appsec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/devsecops" class="mention hashtag" rel="nofollow noopener" target="_blank">#devsecops</a> <a href="https://infosec.exchange/tags/softwaresecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#softwaresecurity</a> <a href="https://infosec.exchange/tags/itspmagazine" class="mention hashtag" rel="nofollow noopener" target="_blank">#itspmagazine</a> <a href="https://infosec.exchange/tags/infosecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosecurity</a>

OpenSSF🚀 OpenSSF is securing the open source ecosystem! With over 100 members and thousands of contributors, we’re shaping the future of secure software development.📥 Download the Annual Report to see our impact in 2024: <a href="https://hubs.la/Q0318XDQ0" rel="nofollow noopener" translate="no" target="_blank">https://hubs.la/Q0318XDQ0</a> <a href="https://social.lfx.dev/tags/OSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#OSS</a> <a href="https://social.lfx.dev/tags/OpenSSF" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSSF</a> <a href="https://social.lfx.dev/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a>

DopeGhoti<blockquote><a href="https://infosec.exchange/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a> developed the <a href="https://infosec.exchange/tags/Recall" class="mention hashtag" rel="nofollow noopener" target="_blank">#Recall</a> feature under its new Secure Future Initiative (<a href="https://infosec.exchange/tags/SFI" class="mention hashtag" rel="nofollow noopener" target="_blank">#SFI</a>) that the company put in place to overhaul its <a href="https://infosec.exchange/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a> after major <a href="https://infosec.exchange/tags/Azure" class="mention hashtag" rel="nofollow noopener" target="_blank">#Azure</a> cloud attacks.</blockquote>— Tom Warren, The Verge, "Windows won't take screenshots of everything you do after all – unless you opt in" (emphasis and tags mine)I didn't know that one sentence could make me laugh so hard.

Stephen PaulgerSoftware Security Poll

detektor.fm :dfm:Ob im Recht, der Philosophie oder der Software-Forschung, Sicherheit ist ein Thema in vielen unterschiedlichen Forschungsfeldern. Welche neuen Erkenntnisse aus der Wissenschaft gibt es?<a href="https://social.detektor.fm/tags/MaxPlanckGesellschaft" class="mention hashtag" rel="nofollow noopener" target="_blank">#MaxPlanckGesellschaft</a> <a href="https://social.detektor.fm/tags/Sicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheit</a> <a href="https://social.detektor.fm/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a> <a href="https://social.detektor.fm/tags/StochastischerTerrorismus" class="mention hashtag" rel="nofollow noopener" target="_blank">#StochastischerTerrorismus</a> <a href="https://social.detektor.fm/tags/Strafrecht" class="mention hashtag" rel="nofollow noopener" target="_blank">#Strafrecht</a> <a href="https://social.detektor.fm/tags/Forschungsquartett" class="mention hashtag" rel="nofollow noopener" target="_blank">#Forschungsquartett</a> <a href="https://detektor.fm/wissen/forschungsquartett-sicherheit?utm_campaign=share_on_mastodon&utm_medium=mastodon&utm_source=mastodon" rel="nofollow noopener" target="_blank">https://detektor.fm/wissen/forschungsquartett-sicherheit?utm_campaign=share_on_mastodon&utm_medium=mastodon&utm_source=mastodon</a>

NunoF :iterm2_logo: :veritrek:I've been working in software engineering industry for a while. Now working on <a href="https://hachyderm.io/tags/SmartEnergy" class="mention hashtag" rel="nofollow noopener" target="_blank">#SmartEnergy</a> and <a href="https://hachyderm.io/tags/SystemsEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#SystemsEngineering</a>Interested in many topics from <a href="https://hachyderm.io/tags/EmbeddedSystems" class="mention hashtag" rel="nofollow noopener" target="_blank">#EmbeddedSystems</a> to <a href="https://hachyderm.io/tags/SoftwareSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareSecurity</a> to <a href="https://hachyderm.io/tags/CloudComputing" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudComputing</a> Societal topics also matter to me, not only because <a href="https://hachyderm.io/tags/SoftwareDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareDesign</a> is very much about <a href="https://hachyderm.io/tags/HumanRelationships" class="mention hashtag" rel="nofollow noopener" target="_blank">#HumanRelationships</a> but these are very sensitive to <a href="https://hachyderm.io/tags/Political" class="mention hashtag" rel="nofollow noopener" target="_blank">#Political</a> and <a href="https://hachyderm.io/tags/Social" class="mention hashtag" rel="nofollow noopener" target="_blank">#Social</a> that are currently being designed also on <a href="https://hachyderm.io/tags/SocialMedia" class="mention hashtag" rel="nofollow noopener" target="_blank">#SocialMedia</a>

Recent searches

Search options

Administered by:

Server stats:

#softwaresecurity