SANS Holiday Hack Challenge 2025 https://isc.sans.edu/diary/32488

Firefox 145 was released on the 11th (sorry I missed it till today) www.firefox.com/en-US/firefo...

- Broke a 400d friends streak in #duolingo - Started working on shifting Ken code out of ZAP core to an add-on - Working on some doc updates and scan guidance #zaproxy - Working on some authentication performance concerns #zaproxy What have you been up to?

Thank you whack-jobs, conspiracy theorists, convoyers, and other stupid people for this amazing day of ignorance for #Canada. Your unnecessary spreading of pain and suffering will be remembered for years to come. #measles #vaccination #vaccine #Darwin www.cbc.ca/news/health/...

I got the Hacktoberfest 2025: Supercontributor badge from Hacktoberfest @hacktoberfest @digitalocean! www.holopin.io/hacktoberfes...

www.nytimes.com/shared/comme... “We have reached peak insanity: $100B in annual compensation is equivalent to approximately 3M full-time minimum-wage workers (at $16/hr) for one year. No accomplishment by any individual justifies receiving the same compensation as 3M people working full-time.”

#Django: Critical SQL Injection Vulnerability in Django (CVE-2025-64459): www.endorlabs.com/learn/critic...

Firefox nightly introduces the setHTML() method. Which is like a native DOMPurify. You can easily test it here: portswigger-labs.net/mxss/ Set HTMLSanitizer ✅ Auto update ✅ I'm trying to break it, I encourage you to break it too

Gawd damn we suck at math as a species #idiocracy

OLD TIMEY POISONS! ☠️🤢 Enjoy some Aqua Tofana, cyanide peach pits, sketchy groundwater, arsenic, old lace, movie myths, tragic mix-ups, and the birth of forensic toxicology with Pulitzer Prize winning Deborah Blum. It’s been quite a Spooktober, y’all! ☠️ www.alieward.com/ologies/hist...

Ok Cyberz community bring on your #WednesdayWin stories! For me: - I've recently past my 1yr mark at Checkmarx 🎉 - I've finished some #zaproxy rule and add-on work. - I'm starting some #zaproxy core work 😁

Hi Folks! What would you like to see changed in #OWASP #WrongSecrets?

Blaaahhhhh!!!!!

We are starting our Kali/Hacker-themed #Pumpkin #Carving #Contest! Share your masterpiece, tag us, and whoever on whichever social network has the most reactions will get $50 store credit (offsec.usa.dowlis.com/kali/view-al...). Ends 1st Nov 2025 00:00 UTC #JackOLantern

I got the Hacktoberfest 2025: Level 3 badge from Hacktoberfest @hacktoberfest @digitalocean! www.holopin.io/hacktoberfes...

I got the Hacktoberfest 2025: Level 2 badge from Hacktoberfest @hacktoberfest @digitalocean! www.holopin.io/hacktoberfes...

#WednesdayWins let’s hear your cyber, life, whatever wins for the week. Big or small your community needs to hear anything you’ve knocked off or accomplished. For me I’ve got the following: - Contributions to OWASP Nest Schema - ZAP rules and docs work #OpenSource

Found an XSS but got blocked by the CSP? https://cspbypass.com has a compiled list of ways to bypass the Content-Security Policy. Check out the video below 👇

With the May release of @OWASP ASVS 5.0.0, we now have 3 finished translations: Turkish, Russian and French! Thanks to everyone who prepared these and in particular thanks to Ata Seren who built a nice new translation validation script for us! Look out others on the way!

Many Online Services and Websites Affected by an AWS Outage https://isc.sans.edu/diary/32386

#owasp members please get out and vote 🗳️ board.owasp.org/elections/20... Check your membership related email account (check spam/junk) for "2025 OWASP Global Board of Directors Election" from simplyvoting. #GetOutAndVote

Great intro to various ZAP features!!

🚨 Our room block was extended by 1 day! BOOK YOUR GLOBAL #APPSEC ROOM TODAY. It is your final chance to grab discounted guest room rates at our hotel. Secure your spot NOW and pocket some extra cash 💸 book.passkey.com/gt/...#APPSEC #devsecops #OWASP #threatmodeling #SDLC

Last chance to catch "Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls" at the NDC Conference, Manchester. Join me and see just how wild the email RFCs really are. portswigger.net/research/tal...

Talks that challenge, workshops that teach, and a community that pushes boundaries. That’s WICCON 2025. Haarlem, Oct 30–31. Join us & be part of it 👉 wiccon.nl/tickets-2025 #WICCON2025

Late #WednesdayWin this was my wrist a year ago. I’ve been through physio and done a ton of exercise etc myself. It’s 85-90% back!!!

Y'ALL LIKE REVOLUTIONS? Storming the Bastille. Facing off with tanks. Canceling a streaming subscription. Here's a breakdown of why they happen -- and how -- with the world's foremost expert in revolutions and social change. (And yes there are tips.) www.alieward.com/ologies/revo...

RiP Jane Goodall 🦍 apple.news/ATzz13DBZQhe...

[🤖] Save 30% during your next shopping frenzy with #coupon code: pEw8ph7ZQr (expires 2025-10-31)

New blog post: Alert De-Duplification www.zaproxy.org/blog/2025-09... #zaproxy #appsec

🎥 Want to level up your ZAP game? The @zaproxy.org team has an awesome library of how-tos, demos, and deep dives — all free. From beginner basics to advanced scripting, it’s all here: 👉 zaproxy.org/videos/ #YouDontKnowZAP

gofund.me/ae3e52797 An old friend of the herd is going through something awful. If you're in a position to consider donating, we hope you will.

Really #apple @AppleSupport it's 2025, my street name actually DOES have an apostrophe!!!!! #UserExperienceFail #UXFail #Mac #uxui

Hi everyone! I recently joined The OWASP Top Ten project team, and we need your opinion! We're very close to finishing the 2025 list, and we want your feedback. Please answer this survey for us? https://twp.ai/4iqTqJ @owasp.org #owasp #owasptopten

GitHub will require a FIDO-based two-factor authentication method to publish updates to npm packages. The company will also deprecate legacy long-lived npm tokens and roll out new ones that last only seven days. github.blog/security/sup...

I'm speaking at OWASP Ottawa on Thursday October 9th, in person! Come check out the details on my crusade for more secure code in Canada! https://twp.ai/9PVlxa CC @[email protected] @owasp_ottawa

Later today, I'll be hosting a ModSecurity / CRS community call luma.com/8yc1p543 We'll be talking about success metrics, WAF testing and other integration questions.

OWASP is teaming up with @InfoSecMap to make cybersecurity events & resources more accessible, inclusive, and global - including OWASP Chapters & Events! No marketing, pay-to-play nonsense - just human curated community & events. Explore the brand new OWASP hub now: InfoSecMap.com/owasp

Missed this talk? Check out the recorded version of this talk on our YouTube channel, along with plenty of our past talks! 📽️: www.youtube.com/watch?v=tza_...

Last night, OWASP Ottawa had the pleasure of hosting Robert Babaev for his insightful talk, titled "(Finally) Sufficient Logging and Monitoring - MCP Edition". Thank you, Robert, for this amazing talk, and we look forward to more talks from you in the future.

Alright bskyverse share your stories. Your cyberz friends need to hear some good news. Big or small!!! In #OpenSource I’ve gotten to do some actual Web testing recently & am working on some changes to ZAP’s scan rules. Plus datafaker released 2.5.0 this week #WednesdayWins

Happening today! Not gonna make it? Watch the live stream on our YouTube channel at www.youtube.com/watch?v=tza_... Details of event in the original post 👇

Just registered for @hacktoberfest.com 2025 #OpenSource

Are you an OWASP Member? Our 2025 Elections are coming soon, and only OWASP Members are eligible to vote. Join or renew today! Memberships start from $20 USD or $50 USD a year, depending on your location. Help sustain our mission and drive our impact! owasp.glueup.com/org... #membership

You can now configure ZAP Scan Policies using Alert Tags: www.zaproxy.org/blog/2025-09... #zaproxy #appsec

Wow the @zaproxy.org team has been busy!! 😀⚡

Please donate blood today! Learn about Sherif Mansour's fight with acute myeloid leukemia, and how you can help everyone with blood cancers by donating blood today. owasp.org/blog/2025/... #donateblood

If you want to understand the struggle anyone doing input validation has, just look at ver 16.0 of the unicode standard: unicode.org/versions/Uni... Unicode 16.0 adds 5185 characters, for a total of 154,998 characters 244 pages. yeah, good luck with that. <script>alert('𐒀𐒁𐒂')</script>

I just sponsored @htmlunit.bsky.social Go sponsor your open source heroes! #GitHub #OpenSource #support #Sponsorship