INFORMATION SECURITY research, information, companies and tools. Also: open source, privacy, encryption, mobile, social, cloud and data management.
Silicon Valley, CA
Joined September 2011
- Tweets4.4K
- Following1.8K
- Followers271
- Likes129
Pinned Tweet
THIS COMPANY IS A RISING STAR . . .
Via @TechCrunch: @EndorLabs, which helps companies secure their #opensource packages, raises $70M tcrn.ch/44SrQna
#appsec #developer #DevSecOps #cybersecurity #OSS #devops #supplychain #security #VC #VentureCapital
New @code_armor study examines the growing gap between #AI-powered #vulnerability discovery and risk reduction, with 40% of tech leaders finding AI-generated code review a significant security challenge businesswire.com/news/home/2…
CONTOS DUNNE retweeted
How AI guardrails are impeding the work of offensive cybersecurity researchers techcrunch.com/2026/07/23/ho…
The Wall Street Journal gets insights from @NCCsecurityUS into what we can learn from the FBI Internet Crimes report wsj.com/tech/cybersecurity/i… #cybersecurity
CONTOS DUNNE retweeted
CRM AI’s Hidden Security Risks - By Aaron Costello @AppOmniSecurity
contactcenterpipeline.com/Ar…
#cctr #custserv #cx #contactcenter #customerservice #customersuccess #customerexperience #callcenter #artificialintelliegence #ai
Read this in-depth report by @DarkReading about BodySnatcher, a #ServiceNow flaw that @AppOmniSecurity researcher @ConspiracyProof says is "the most severe #AI-driven vulnerability uncovered to date" darkreading.com/remote-workf…
CONTOS DUNNE retweeted
‼️ New Research Drop ‼️
I’m excited to share my latest @AppOmniSecurity Labs research: a CVSS 9.3 critical vulnerability in #ServiceNow’s AI platform.
It's dubbed "BodySnatcher" (CVE-2025-12420) because of its novel exploit path: it allowed an unauthenticated attacker to impersonate any user on the platform and execute powerful out-of-the-box (OOB) AI agents with the victim's permissions. The result? Complete platform takeover.
Read my write-up here for the juicy technical details: appomni.com/ao-labs/bodysnat…
#cybersecurity #ai #saas #vulnerability
TechRepublic speaks with @NCCGroupplc about why addressing skills gaps in #OperationalTechnology teams, especially as they relate to #AI will be a challenge this year techrepublic.com/article/new…
IEEE Spectrum explores the world of real-time audio #deepfakes and how simple it's become to make them, based on research from @NCCsecurityUS spectrum.ieee.org/real-time-…
Treating every #security alert in your software development lifecycle is one pitfall to avoid, says @EndorLabs CEO @varun__badhwar. Instead, get context to help developers prioritize the risks that matter most forbes.com/councils/forbeste… #SDLC
In its latest episode, @SecWeekly interviews @ConspiracyProof of @AppOmniSecurity about a #dataexposure he uncovered in #ServiceNow Knowledge Bases affecting 1,000+ instances scworld.com/podcast-segment/…
According to an @NCCsecurityUS report, governments have levied at least 2,700 #dataprivacy fines totaling around $7.3 billion since 2020. Read the story by @thetomzone in @ITBrew itbrew.com/stories/2024/09/2… #cyberpolicy
Private data for #Fortune200 organizations and others around the globe is currently being exposed on the web from #ServiceNow applications #misconfigured for general public access, finds @AppOmniSecurity. Read the story by @adrianweckler independent.ie/business/tech…
#OpenSource #security patches have a 75% chance of breaking an #application. Read the story by @F_Jcksn in @TechRepublic about new @EndorLabs research: techrepublic.com/article/dep…
Comprehensive @AppOmniSecurity report surveying 644 organizations across six countries finds the #security of enterprise #SaaS applications is still far short of ideal, and 1/3 of companies have been breached. businesswire.com/news/home/2…
From #BlackHat, #SupplyChainSecurity leader @EndorLabs unveils groundbreaking capabilities providing a new way to remediate #ApplicationSecurity risks devops.com/endor-labs-adds-a…
#SaaS-aware identity #threatdetection and response capabilities unveiled by @AppOmniSecurity at #BlackHat provide industry-leading protection for critical enterprise Software-as-a-Service environments helpnetsecurity.com/2024/08/…
Leader in software #supplychainsecurity @EndorLabs announces strategic #VC investment from @CitiVentures endorlabs.com/learn/endor-la…
In a new video, @TechstrongTV interviews Escode, part of @NCCGroupplc about the growing importance of #SoftwareEscrow
techstrong.tv/videos/intervi… #resilience
Frost & Sullivan names @AppOmniSecurity 2023 Company of the Year for global SaaS Security Posture Management (#SSPM) industry leadership as the first solution enabling common #security capabilities across an organization’s entire #SaaS ecosystem. businesswire.com/news/home/2…