Rust 1.97 has been released, introducing a new symbol mangling scheme enabled by default, improved Cargo warning controls, linker output no longer hidden by default, several stabilized APIs, and other enhancements. alternativeto.net/news/2026/7...

Someone thinks I should be sharing my lunch 🥗 🙄 #PetTax #GoldenDoodle

Google introduced Nano Banana 2 Lite, its newest image model for faster, cheaper image generation, and launched Gemini Omni Flash, a new generative video model in public preview for developers and users alternativeto.net/news/2026/7...

Happy Canada Day !!!! 🇨🇦🇨🇦🇨🇦 #canada

Missed out on #OWASP swag in Vienna? No worries, CyberSecGames has you covered! 🎉 The new OWASP Online Swag Store is LIVE! 🛍️ Get your favorite OWASP gear delivered straight to your door, and stay tuned for even more products coming soon! 👀 cybersecgames.com/pa...#OWASP #OWASPSwag #CyberSecGames

June was a busy month for the ZAP team, check it out:

This might be of interest to people that know me: opensource.org/blog/open-so...

#FullDisclosure from the ZAP team

The internet is getting weirder...so we're getting better. This year we added a free built-in VPN, AI features you can enable or block, split view, and more privacy tools. And we’re not done yet. Coming soon: a cleaner, more modern Firefox with new ways to make it your own. mzl.la/fxwhatsnext

#slack can someone explain this to me? I really expected something like 🤪, not a goose.

OWASP Dependency-Track 5.0 is GA, built for enterprise scale: early adopters ingested 20K+ SBOMs/hour with single instances holding 250K+ projects and 2M+ components. Now with horizontal scaling, fault tolerance, and supply chain integrity checks. dependencytrack.org/ #OWASP #SBOM #AppSec

ZAP now has a dedicated PTK active scan rule, so you can run the PTK rules in the ZAP active scanner. Check out the dramatic improvement in the scores vs Google Firing Range! www.zaproxy.org/blog/2026-06... #zaproxy #owaspptk #appsec

1/2 Canada just did something big: put openness at the heart of its national AI strategy. Canada is choosing a future where AI is something citizens can govern, own and benefit from. 2/2 We’re proud to be partnering with organizations like @Mila_Quebec to help make that vision real.

Google launches the new open-source Gemma 4 12B, a 12 billion parameter multimodal AI model designed to run locally on standard laptops with 16 GB of RAM. It handles text, images, and audio more efficiently with native multimodal processing alternativeto.net/news/2026/6...

In May ZAP learned to scan MCP servers as a first-class target, OWASP PTK automation reached Phase 1, and the Params extension moved out of the core into its own add-on. www.zaproxy.org/blog/2026-06... #zaproxy #appsec

Building better social media also means making it more accessible. We’re working with people in our community who use assistive technologies to help improve the Gander experience and make it more usable for all. Interested in participating? gandersocial.ca/blog... #NationalAccessibilityWeek

During the first 3 months of the Texas measles outbreak last year, almost 1 in 5 cases were hospitalized, and “all were unvaccinated or had unknown vaccination status”. Anti-vaxxers focus on death as the only endpoint that matters. Tell that to the families who’ve had a child hospitalized.

Yesterday, petition e-7115 was officially presented in the House of Commons of Canada by MP Jeff Kibble 🇨🇦! This means the call for secure coding standards across the Government of Canada is now part of the official parliamentary record. Security was discussed in parliament. This is HUGE. 1/2

So I am not allowed to use the word *****, then make sure people have iron balls tied to one of their feet. Unfortunately, it's all too easy to trick an #LLM into doing something it shouldn't do. Which means we really need to think outside the box to #secure them. #appsec #threatmodeling #games

🦊 Mozilla has previewed Project Nova, a design overhaul for Firefox, focusing on customization and privacy. It features a reorganized layout, enhanced privacy controls, new themes, and more, impacting both desktop and mobile users. alternativeto.net/news/2026/5...

I love these little speaker cards cons are doing. I can’t wait to meet a ton of new friends @hackglasgow.bsky.social. I’ve never been out of the US before so just in I’ll pack a Canadian flag tshirt.

Interesting CSRF write-up impacting an OWASP project. #AppSec #BugBountyTips github.com/juice-shop/m...

#itsec #redteam #hack #hackers #flipper blog.flipper.net/flipper-one-...

Jainil introduces malware analysis at #OWASP #Ottawa May 2026

👨‍💻 If you're a dev and you're using a security tool — you're doing it right. 🕵️‍♂️ If you're a pentester using only one tool — you're doing it wrong. Try more. Try better. Try @zaproxy.org #YouDontKnowZAP

You may have noticed I've been a bit quiet on social media recently, this is why...I'm going to present at Black Hat! Can't wait to present these techniques! Here is a link to the abstract in case the screenshot is hard to read: blackhat.com/us-26/briefi...

🚨 CTF DAY 🚨 The #BSidesBirmingham CTF opens today at 1:21pm 🔥 👉https://portal.securecodewarrior.com/#/register/486253638578 Need the tournament code? 🧠 “What frequency, in Hz, opened the long-distance trunk?” Good luck 👀 #BSidesBrum26

OWASP Juice Shop v20 is here! 🍹 Featuring: AI/LLM-based chatbot (w/ 3 hacking + 2 coding challenges), redesigned storefront, ~30% faster startup time, Angular 21, neon-fire & lime-green theme, and much more! owasp.org/blog/2026/05...

🚨 Keynote Speaker Alert! 🚨 Gadi Evron, Founder & CEO of Knostic, joins Global AppSec Vienna 2026 with his keynote: “We Live in the Future: The Death and Rebirth of Application Security.” owasp.glueup.com/eve... A must-see session on the future of AppSec, AI, and cybersecurity. #OWASP #AppSec

Blog: Automating OWASP PTK with ZAP (Phase 1) You can now automate OWASP pentestkit using ZAP www.zaproxy.org/blog/2026-05... #zaproxy #owasp-ptk #appsec

#Apache HTTP Server Vulnerability CVE-2026-23918 Exposes Millions of Servers to Remote Code Execution Attacks. Anyone running Apache httpd version 2.4.66 or earlier are strongly urged to upgrade immediately! 👇

Frigid temperatures, tiny flecks of plastic, bears, big red parkas, ice sheets, microscopic signs of life & “Should I try to visit Antarctica?” Let's ask @arielwaldman.com of the @pbs.org series #LifeUnearthed. She's a microscopist, NatGeo explorer & a total gem: www.alieward.com/ologies/anta...

@zaproxy.org sponsored the pizzas for our April 2026 meetup! This generosity was greatly appreciated by OWASP Ottawa and the attendees. 🔗: www.zaproxy.org

We released 1.13.3 of #OWASP #WrongSecrets with 2 new #security challenges! Reverse engineer a #swift Binary and use the #hardcoded #encryption key. You can test them out at www.wrongsecrets.com . Like what you see? Please give our repo github.com/OWASP/wrongs... a 🌟!

Firefox v150 released today. www.firefox.com/en-US/firefo... #Mozilla #Firefox #FreeTheWeb

I’ve been using this keyboard for most of my time working from home full time. About 18mo now. It’s clacky/loud but I like it while coding. Sharing because it’s on sale at a great price (not affiliate or anything) #keyboard #deals a.co/d/04lZUdk6

Here's everything that's new in Firefox 149 🔥 ☑️ Split View: Two tabs side by side, just like it should be ☑️ Built-in VPN Beta: Hide your IP address while browsing ☑️ Tab Notes: Leave yourself notes to remember why you opened that tab (available in Labs) blog.mozilla.org/en/firefox/f...

Only 2 days left until Early Bird Tickets for BSides Belfast 2026 go live at Tuesday 11am! Be part of a grassroots cybersecurity event that celebrates learning, sharing, and community spirit. bsidesbelfast.org/register/ #bsidesbelfast26 #securitybsides #bsidesbelfast

Want to build your own Juice Shop Tower running MultiJuicer to get some 😮😲🤩 reactions during your next on-site CTF? We now have a complete guide for assembly, RasPi setup, and network configuration at pwning.owasp-juice.shop/companion-gu...

Every time I see this thing on Amazon I think it’s an iPod Shuffle and it often makes me scroll back and look with a “wtf they brought it back?” Thought in my head (It’s an air purifier) 🤯🤪

⚡️ 𝗦𝗲𝗮𝘁𝘀 𝗮𝗿𝗲 𝗴𝗼𝗶𝗻𝗴 𝗳𝗮𝘀𝘁 𝗳𝗼𝗿 𝗡𝗼𝗿𝘁𝗵𝗦𝗲𝗰 𝟮𝟬𝟮𝟲'𝘀 𝗢𝗳𝗳𝗲𝗻𝘀𝗶𝘃𝗲 𝗢𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻𝘀 𝘁𝗿𝗮𝗰𝗸! Three trainings. Real offensive skills you can use on Monday morning! 👉 Spots are limited and filling up. Register now: nsec.io/training-sessions

Migrating from OWASP CRS 3.3 to 4.25 LTS? Part 1 of a 7-part series is out — covering what changed, what breaks, and how to plan your upgrade. ~500 changes, new plugin architecture, RE2/Hyperscan compat, and more.

OWASP CRS v4.25.0 LTS is out! First Long-Term Support for CRS 4 — stable foundation with security patches through Q3 2027. Formal backport policy, lessons from 3.3 applied, and crslang on the horizon.

Last night, the ISS captured a stunning aurora between Antarctica and Australia. Check out the incredible timelapse created by our astronaut photographer!

Old URL, new look: owasp-juice.shop will now bring you to our standalone project website! Here you find all the information as before, just better organized; in a stylish neon/cyberpunk hacker theme; and with more infos than ever before; also more mobile friendly! We hope you like the new style!

NEW: 1st ever OWASP MAScon at OWASP AppSec Vienna, June 25-26. Organized by @grepharder.bsky.social & Sven Schleier, with talks from Carlos, Stefan Bernhardsgrütter, @trufae.bsky.social, Jan Seredynski, @oleavr.fosstodon.org.ap.brid.gy & Jeroen Beckers mas.owasp.org/news/2026/03... #mobileappsec

OWASP Cornucopia just released v2.6.33 github.com/OWASP/cornuc... I just want to give a huge thank you to everyone who contributed this week. In non-particular order. (1/4) #owasp #appsec #cybersec #games #security