🚨 CTF DAY 🚨 The #BSidesBirmingham CTF opens today at 1:21pm 🔥 👉https://portal.securecodewarrior.com/#/register/486253638578 Need the tournament code? 🧠 “What frequency, in Hz, opened the long-distance trunk?” Good luck 👀 #BSidesBrum26

OWASP Juice Shop v20 is here! 🍹 Featuring: AI/LLM-based chatbot (w/ 3 hacking + 2 coding challenges), redesigned storefront, ~30% faster startup time, Angular 21, neon-fire & lime-green theme, and much more! owasp.org/blog/2026/05...

🚨 Keynote Speaker Alert! 🚨 Gadi Evron, Founder & CEO of Knostic, joins Global AppSec Vienna 2026 with his keynote: “We Live in the Future: The Death and Rebirth of Application Security.” owasp.glueup.com/eve... A must-see session on the future of AppSec, AI, and cybersecurity. #OWASP #AppSec

Blog: Automating OWASP PTK with ZAP (Phase 1) You can now automate OWASP pentestkit using ZAP www.zaproxy.org/blog/2026-05... #zaproxy #owasp-ptk #appsec

#Apache HTTP Server Vulnerability CVE-2026-23918 Exposes Millions of Servers to Remote Code Execution Attacks. Anyone running Apache httpd version 2.4.66 or earlier are strongly urged to upgrade immediately! 👇

Frigid temperatures, tiny flecks of plastic, bears, big red parkas, ice sheets, microscopic signs of life & “Should I try to visit Antarctica?” Let's ask @arielwaldman.com of the @pbs.org series #LifeUnearthed. She's a microscopist, NatGeo explorer & a total gem: www.alieward.com/ologies/anta...

@zaproxy.org sponsored the pizzas for our April 2026 meetup! This generosity was greatly appreciated by OWASP Ottawa and the attendees. 🔗: www.zaproxy.org

We released 1.13.3 of #OWASP #WrongSecrets with 2 new #security challenges! Reverse engineer a #swift Binary and use the #hardcoded #encryption key. You can test them out at www.wrongsecrets.com . Like what you see? Please give our repo github.com/OWASP/wrongs... a 🌟!

Firefox v150 released today. www.firefox.com/en-US/firefo... #Mozilla #Firefox #FreeTheWeb

I’ve been using this keyboard for most of my time working from home full time. About 18mo now. It’s clacky/loud but I like it while coding. Sharing because it’s on sale at a great price (not affiliate or anything) #keyboard #deals a.co/d/04lZUdk6

Here's everything that's new in Firefox 149 🔥 ☑️ Split View: Two tabs side by side, just like it should be ☑️ Built-in VPN Beta: Hide your IP address while browsing ☑️ Tab Notes: Leave yourself notes to remember why you opened that tab (available in Labs) blog.mozilla.org/en/firefox/f...

Only 2 days left until Early Bird Tickets for BSides Belfast 2026 go live at Tuesday 11am! Be part of a grassroots cybersecurity event that celebrates learning, sharing, and community spirit. bsidesbelfast.org/register/ #bsidesbelfast26 #securitybsides #bsidesbelfast

Want to build your own Juice Shop Tower running MultiJuicer to get some 😮😲🤩 reactions during your next on-site CTF? We now have a complete guide for assembly, RasPi setup, and network configuration at pwning.owasp-juice.shop/companion-gu...

Every time I see this thing on Amazon I think it’s an iPod Shuffle and it often makes me scroll back and look with a “wtf they brought it back?” Thought in my head (It’s an air purifier) 🤯🤪

⚡️ 𝗦𝗲𝗮𝘁𝘀 𝗮𝗿𝗲 𝗴𝗼𝗶𝗻𝗴 𝗳𝗮𝘀𝘁 𝗳𝗼𝗿 𝗡𝗼𝗿𝘁𝗵𝗦𝗲𝗰 𝟮𝟬𝟮𝟲'𝘀 𝗢𝗳𝗳𝗲𝗻𝘀𝗶𝘃𝗲 𝗢𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻𝘀 𝘁𝗿𝗮𝗰𝗸! Three trainings. Real offensive skills you can use on Monday morning! 👉 Spots are limited and filling up. Register now: nsec.io/training-sessions

Migrating from OWASP CRS 3.3 to 4.25 LTS? Part 1 of a 7-part series is out — covering what changed, what breaks, and how to plan your upgrade. ~500 changes, new plugin architecture, RE2/Hyperscan compat, and more.

OWASP CRS v4.25.0 LTS is out! First Long-Term Support for CRS 4 — stable foundation with security patches through Q3 2027. Formal backport policy, lessons from 3.3 applied, and crslang on the horizon.

Last night, the ISS captured a stunning aurora between Antarctica and Australia. Check out the incredible timelapse created by our astronaut photographer!

Old URL, new look: owasp-juice.shop will now bring you to our standalone project website! Here you find all the information as before, just better organized; in a stylish neon/cyberpunk hacker theme; and with more infos than ever before; also more mobile friendly! We hope you like the new style!

NEW: 1st ever OWASP MAScon at OWASP AppSec Vienna, June 25-26. Organized by @grepharder.bsky.social & Sven Schleier, with talks from Carlos, Stefan Bernhardsgrütter, @trufae.bsky.social, Jan Seredynski, @oleavr.fosstodon.org.ap.brid.gy & Jeroen Beckers mas.owasp.org/news/2026/03... #mobileappsec

OWASP Cornucopia just released v2.6.33 github.com/OWASP/cornuc... I just want to give a huge thank you to everyone who contributed this week. In non-particular order. (1/4) #owasp #appsec #cybersec #games #security

📍 Location: 150 Louis-Pasteur Private, University of Ottawa, Room 117 📅 Date: March 18, 2026 ⏰ Time: 6:00 PM EST - Arrival, networking, & pizza! 🍕 6:30 PM EST - Technical Talk More information on our GitHub: github.com/OWASP/www-ch...

OWASP Ottawa is excited to announce our March 2026 meetup! @garthoid.bsky.social will be presenting their talk "We know what you hide in JS: If it runs in the browser, it's public" on March 18th, 2026. Details below👇 #owasp #ottawa #cybersecurity #javascript #networking #infosec

Given Apple’s recent MacBook Neo announcement this is an interesting take on the CPU and performance #Apple #MacbookNeo appleinsider.com/articles/26/...

Here we go... our Call for Papers is officially open! cfp.hackglasgow.live You've got until midnight on April 30th to submit your proposals. We can't wait to see what talk ideas you have brewing!

OWASP Cornucopia just released v2.6.21 github.com/OWASP/cornuc... I want to give a huge thank you to everyone who contributed this week. In non-particular order. Thank you Ayman Osama Algamal, Adarsh Kumar, Mradul Tiwari, khushal-winner, Tanmay Ranjan, Suresh Krishna, Aashish Kharel, Ashnaa Seth

My GitHub contributions are down 9% over the last 6 months areyougoingexponential.rhys.dev/kingthorin Though the graph is trending up. I believe this is because I've been tackling larger/longer bits of work 😁 #OpenSource

This is huge!! #WAF #DevSecOps

Good morning world! #SunRise

It's a great day to add a little fire to your browsing 🔥 Import your bookmarks, passwords, history, and tabs in just a few clicks. blog.mozilla.org/en/firefox/h...

Combine the Encode/Decode/Hash add-on with CyberChef operations in ZAP Encode/Decode Scripts for flexible encoding, decoding, and hashing in your testing workflow. www.zaproxy.org/blog/2026-02... #zaproxy #appsec #cyberchef

Join the OWASP Contributor Mixer alongside NDC Security! No slides, no sales, just real conversations with the people behind OWASP’s open-source projects. Grab a drink, meet collaborators, and see how to get involved. All welcome. luma.com/txn0myuk #owasp #opensource #mixer #NDC #community

I wrote a Blog post about combining ZAP with CyberChef. #AppSec #WebAppSec #BugBountyTips www.zaproxy.org/blog/2026-02...

I wish younger me had understood this: www.linkedin.com/posts/simons...

Canada is one step closer to mandatory secure coding in government software. Petition e-7115 is live! If you can sign, please do it today: 👉 https://twp.ai/9Pa2w8 This is how we make real change. 🙏

The next OWASP London Chapter in-person meetup will take place on February 26th, 2026 kindly hosted by @civo.com Tech Junction and kindly sponsored by @curity.io Additional raffle prize is kindly sponsored by @fortbridge.bsky.social Register to attend here: 👇 www.eventbrite.co.uk/e/owasp-lond...

@zaproxy.org Released add-ons today: GraphQL ➡️ Fixes the optional integration with the Tech Detection add-on which had been failing. OpenAPI ➡️ Re-enables Swagger Secret Detector Script Scan Rule, the JS Engine memory leak has been addressed. #AppSec #DevSecOps #WebAppSec #BugBountyTips

Have you heard? 👂 Early bird pricing is OPEN for Global AppSec USA, coming to San Francisco this November! Celebrate 25 years of OWASP and be part of an unforgettable AppSec experience. 🎟️ 👉 owasp.glueup.com/eve... #AppSec #OWASP #CyberSecurity #EarlyBird #SanFrancisco

Are you concerned that Pierre Poilievre refuses to get national security clearance? We are facing unprecedented level of threat from external forces and internal traitor groups. Please sign this petition calling on all national leaders to put their nation first. www.ourcommons.ca/petitions/en...

OMG so excited #WednesdayWin a set of authentication changes I've been working on for @zaproxy.org were merged this morning. #OpenSource

New blog post: www.zaproxy.org/blog/2026-02... Highlights of 2025 and our initial plans for 2026, including more 3rd Party tool integrations, enhanced exploring and, yes, AI integration! #zaproxy #appsec #ai

[🤖] Enjoy 20% off all our juicy products with this #coupon code: mNYT0hz3Wr (valid until 2026-02-28)

Interested in getting started with @zaproxy development? Here's a #GoodFirstIssue we just added: github.com/zaproxy/zapr...

Please go sign this 🇨🇦 Federal petition to establish a mandatory secure coding policy for the government of Canada: www.ourcommons.ca/petitions/en... 🍁

🇨🇦 yup

Thank you to Vincent Dragnea for an excellent presentation at our first #OWASP #Ottawa meetup of 2026. Also thank you to uOttawa | Faculty of Engineering | Faculté de génie for the amazing venue and Software Secured for the pizza. #appsec #infosec

www.zaproxy.org/blog/2026-01... #zaproxy #owasp #appsec

FYI Firefox 147 adds about:keyboard so on mac you can make alt+D (option+D) be address bar focus like it is on other platforms (There's one minor hiccup, if focus is currently a text field on the active page then it'll insert "∂", but in the majority of cases it works.) #Firefox #FreeTheWeb