Back in #ATL April 20th & 21st, 2027 at the Historic Academy of Medicine w/ #dataSecOps https://xitter.cf/t.co/Er5xHIc5j7
Atlanta
Joined February 2016
- Tweets2K
- Following679
- Followers740
- Likes412
Pinned Tweet
did you see @sherrod_im on @abcnewslive w/ insights & updates on #php2shell ?
Will there be a more significant security incident between now & her keynote at #devopsdays #Atlanta in April? 🤔😅
🔒🐢🦀🦑🤫
Our CFP is open!
super early bird tix will be available soon!
devopsdaysATL retweeted
When AI agents can build anything, how do you decide what's actually worth building?
Lena Hall, Senior Director of Developers and AI at @Akamai, took the AGNTCon + MCPCon NA keynote stage with “The Anything Trap: What to Build When Agents Can Build Everything.”
Because the hard part isn't just what agents can build. It's knowing what they should build. Join the livestream: bit.ly/3U6tMrS
devopsdaysATL retweeted
@sarah_edo, Distinguished Engineer at @Google, just took the AGNTCon + MCPCon NA keynote stage to talk about “The Agentic Web.”
What happens when AI agents become part of how we navigate and interact with the web? This is the conversation you don't want to miss. bit.ly/3U6tMrS
devopsdaysATL retweeted
We're donating Agent Skills to the Agentic AI Foundation (@AgenticAIFdn), the same foundation we donated MCP to.
Since December 2025, 70+ agent platforms have integrated the standard, including ChatGPT, Cursor, GitHub Copilot, and VS Code.
Here's what that means for you:
devopsdaysATL retweeted
We got @lenadroid keynoting at AGNTCon + MCPCon.
The Anything Trap: What to Build When Agents Can Build Everything
ALT Lena keynoting
ALT Slide
ALT Another slide
devopsdaysATL retweeted
'This is absolutely not being overhyped'
I spoke to @sherrod_im at @PaloAltoNtwks @Unit42_Intel about the PHP flaws and AI's cybersecurity reckoning
The Palo Alto Networks’ Unit 42 threat intelligence chief says AI-driven vulnerability discovery is “the new normal” — and explains why she’s surprisingly optimistic.
groundlevel-ai.com/p/php-vul…
devopsdaysATL retweeted
Sooo excited to welcome four new projects to the Agentic AI Foundation! 🎉
- Agent Skills
- Open Responses
- OpenEnv
- OpenSandbox
Huge thank you and congrats to Anthropic, OpenAI, Hugging Face, and Alibaba for contributing these projects to a neutral home ❤️
Truly honored to help support the growth of each.
devopsdaysATL retweeted
I flew out here to research our #dataSecOps topic for @devopsdaysATL
TL;DR
I've been using agentic coding practices in non-prod to build hardened web applications for years now.
Can we run agents in prod safely?
is it worth the $ or the headache?
can we afford not to? 🤔
devopsdaysATL retweeted
Things that aren’t security controls:
- thoughts and prayers
- alignment
- prompts prohibiting action
- saying “not my circus not my monkeys”
- “it is what it is”
Feel free to add 😂
devopsdaysATL retweeted
What did people think “focus on security” meant? It meant this. It meant finding all these problems (of which there are so many more) and fixing them.
The goal isn’t to have an easy day at the office. It’s to make sure people don’t die. It’s to stop truly horrible cyber attacks.
devopsdaysATL retweeted
This is critical. Please follow guidance from PHP and us at Unit 42 Palo Alto Networks. Defenders, time to defend. unit42.paloaltonetworks.com/…
devopsdaysATL retweeted
🚨 🚨 🚨 REVOKE YO' KEYS... 🚨 🚨 🚨
This one is pretty gnarly: Intermediate CA Compromise. Certificates aren't being publicly circulated but they are definitely currently in the wind.
m.cje.io/4yTalC6
devopsdaysATL retweeted
I spoke with ITPro about DeepSeek and what happens when national security policy meets the realities of AI development.
itpro.com/security/us-bans-d…
devopsdaysATL retweeted
I think a caveat we always have to remember is that we’re used to technology continuously improving. We don’t know what that curve looks like for ai and if it actually will have significant improvements. We’ve seen reduction in efficacy due to cost and it may be the norm.
devopsdaysATL retweeted
Your WAF knows what SQL injection looks like. It has no idea what a prompt injection means.
Check out my Cloud Native Seattle talk: the four doors of prompt injection, and an airline chatbot leaking a secret code via one poisoned booking note 👇
youtube.com/watch?v=t9PGQuR0…
devopsdaysATL retweeted
the DeepSeek order has some interesting implications beyond just banning the model itself: the language around third-party products developed using DeepSeek is very broad. we're going to see more friction between national security policy & the realities of AI dev very soon.