7ASecurity retweeted
We’re proud to highlight @7ASecurity, an OWASP Platinum Supporter!
For Black Friday, they’re offering the OWASP community 51% off any security course with code OWASP51 🎉
🔗 store.7asecurity.com/discoun…
Their training has been featured at OWASP Global AppSec events worldwide — hands-on, practical, and community-driven.
#OWASP #AppSec #CyberSecurity #BlackFriday
7ASecurity retweeted
Master Modern Web App Security at OWASP Global AppSec EU 2025 in Barcelona!
2-Day Training | May 27-28, 2025
Level: Intermediate | Trainer: Abraham Aranguren
Take a 100% hands-on deep dive into the OWASP Security Testing Guide and Application Security Verification Standard (ASVS) in this action-packed course.
Don’t miss your chance to sharpen your security testing skills! Register now ⬇️
owasp.glueup.com/event/12398…
#OWASP #AppSecEU2025 #Cybersecurity #PenTesting #WebSecurity #DevSecOps #NodeJS #Infosec #Barcelona
7ASecurity retweeted
I spy with my little eye...a security audit of @opentelemetry! This telemetry for cloud-native software project was audited by @7aSecurity with funding provided by @CloudNativeFdn. Looking for more details? Read about it at ostif.org/otel-audit-complet…
7ASecurity retweeted

Open Technology Fund@OpenTechFund25 Jun 2024
United States
United StatesConnected via United States Android AppAccount-level information, not a live location or per-post device.
Whistleblowers need a secure way to contact journalists. That’s why @cover_drop was created with @guardian.
@OpenTechFund’s Security Lab partner @7aSecurity’s CoverDrop audit found the app is protected against a broad range of threats.
Learn more
ow.ly/5w4x50SiiQ8
7ASecurity retweeted
Found during an audit with us and @7aSecurity, OpenTelemetry's response to this disclosure was timely and admirable. Read about what the team did at github.com/open-telemetry/op…
CVE-2024-36129 The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows… cve.org/CVERecord?id=CVE-202…
7ASecurity retweeted
💥Our latest co-authored blog with @7aSecurity addresses the key reasons why penetration testing is a must for organizations of all sizes!💥
secfix.com/post/why-should-y…
#pentest #ISO27001 #Pentesting #informationsecurity #cybersecurity #hacking #ethicalhacking #infosec #security
7ASecurity retweeted
We collaborated with @7aSecurity and @OSTIFofficial on the nvm security audit as a result of the latest funding from the Sovereign Tech Fund!
Results were positive ✔️
Read more about the audit: hubs.la/Q02d9RyL0
7ASecurity retweeted
the first project of our collaboration with @openjsf has been published! nvm underwent a security audit by @7aSecurity, resulting in some great security developments- read about the experience and findings at ostif.org/nvm-audit-complete…
7ASecurity retweeted
Our security audit of @mozilla's K-9 Mail with @7aSecurity is published and online! Read about our experience and learn the details of the audit's outcome at ostif.org/k-9-mail-audit/
7ASecurity retweeted
🚨 #BruCON0x0F training registration is open🚨. Red, blue or purple? We've got you covered with 9(!) courses to pick from. brucon.org/2023/brucon-2023-…. Early bird till the 15th of July! Don't forget, you can always purchase a conf ticket with any training ticket. #HackingForBeer🍻
7ASecurity retweeted
Excited to have Abraham Aranguren (@7asecurity) as a speaker at Appdevcon! Join his session 'Hacking Android and IoT apps by Example (Part 1)' and learn from his expertise! Check this and more sessions at appdevcon.nl/schedule
7ASecurity retweeted
[1/4] TL;DR
Apache httpd doesn't automatically return Content-type to files without name (but with extension) or files with only dots as a name. For example, test.jpg will return Content-Type: image/jpeg, but ...jpg will not
7ASecurity retweeted
Arbitrary cache poisoning on all Akamai websites via 'Connection: Content-Length' - $50k in bounties well-earned by @jacopotediosi
medium.com/@jacopotediosi/wo…
blog.hacktivesecurity.com/in…
7ASecurity retweeted
Full house even on the last day of our Day 3 trainings at @nullcon with attacking Electron Desktop Apps along with @a0xnirudh and @7aSecurity
#NullconGoa2022 #security #hacking
7ASecurity retweeted
Python source code auditing and static analysis on a large scale :
github.com/SourceCode-AI/aur…
7ASecurity retweeted
Blizzard Jailbreak For iOS 15.0 - 16.0 Beta - Current Status was updated!
idevicecentral.com/blizzard-…
7ASecurity retweeted
Vulnerability in TikTok Android app could lead to one-click account hijacking
#MobileSecurity #AndroidSecurity by @Microsoft
microsoft.com/security/blog/…
7ASecurity retweeted
TIL whenever you see an SSL certificate error and the browser doesn't let you continue - even on your own risk, you can just type 'thisisunsafe' to bypass the protection
cybercafe.dev/thisisunsafe-b…
7ASecurity retweeted
Intercept Flutter traffic on iOS and Android (HTTP/HTTPS/Dio Pinning)
#MobileSecurity by @NVISO_Labs
blog.nviso.eu/2022/08/18/int…




























