🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

DRUMPF ….He basically telling him don’t forget where you came from‼️

Have you missed your chance to submit to BSides Belfast… not yet!! Get your proposals in by midnight this Saturday 14th June! #securitybsides #bsidesbelfast25 #infosec #cfp

13.7K ⭐️ Thank you! 🙏 star-history.com/#zaproxy/zapro… github.com/zaproxy/zaproxy #starhistory #GitHub #OpenSource via Star History

We have started to document how to configure ZAP against well known vulnerable apps: zaproxy.org/docs/testapps/ Let Simon Bennetts ⚡🇺🇦 know if you have any feedback or specific requests

A dev once told me: We dont have security bugs. Ran a ZAP scan on staging. 😅 ZAP didn’t just highlight issues - it showed patterns: missing headers, poor input handling, and outdated libraries. 💡 It’s not paranoia, it’s about visibility. Had a “Zed Attack Proxy wake-up call” moment?

This position is definitely needed at HoC, and their HR team is great. Go forth and apply!!!!

🚨 Heads up for web devs! 🚨 The HTML spec just got an important update to protect against mutation XSS (mXSS). Find out how escaping < and > in attributes is making the web a safer place. bughunters.google.com/blog/503874286…

x.com/i/broadcasts/1…

Spot on!!!!

State of CSS 2025 is now open: stateofcss.com Browser vendors use the results of 'State of' surveys to help prioritize the features to work on. If you care about CSS, please take some time to answer it, and help shape the future of the language

I knew we would end up here one day, but I always figured (hoped?) it would be farther in the future. While the tech is impressive the whole concept is scary and sad 😔

Do people really prefer dated versioning (ex: v2025.03.02) over semantic versioning (ex: v2.16.1)? Especially for software that’s only release 2 to 4 times per year. #OpenSource #software #versioning

Git 2.50 is here! Now with improved support for unreachable objects, incremental bitmaps, lots of internal performance improvements, and much more. ✨ Check out our recap ⬇️ github.blog/open-source/gi…

We released v18.0.0! It removes Node.js 18.x support; mitigates local build issues w/ libxmljs; adds a new ⭐⭐⭐⭐⭐-challenge; adds a DEF CON 33 theme for the OWASP® Foundation collab w/ Blue Team Village; fixes some bugs w/ telemetry, cats, and coupons! github.com/juice-shop/jui…

Pro tip - if an article/post mentions "OWASP ZAP" then you know its out of date or badly researched. Zed Attack Proxy has not been an OWASP® Foundation project for nearly 2 years!

The 1.4.3 and 1.0.9 security patch versions are out now! Read the blog for more information on what's changed: cs.co/60184R36s

The DVWA readme just got an Italian translation thanks to Giovanni Canedoli. github.com/digininja/DVWA…

#appsec standards question - do you think that _all_ webapp injection vulnerabilities relate to #HIPAA and #PCI_DSS ? If not, why not?

Mega add-on update alert! We've just upload loads of add-ons, so update your ZAP instances ASAP. Lots of authentication improvements have been included, more details coming soon ...

New! #OWASP #Wrongsecrets big LCM release: github.com/OWASP/wrongsec…. Try it out at wrongsecrets.com