Last Day to buy tickets! Last few tickets left!

Grab your chance to listen and meet experts in application security and get some new skills. Buy your ticket at www.basconf.org — ticket refunded at check-in!

#appsec #basconf #owasp #basc2026

Up your game in auditing applications at OWASP BASC

Michael Kreuger is conducting a workshop to learn how to audit your application for SDKs in it.

Check out more at www.basconf.org

#owasp #basconf #basc2026 #appsec

Tomorrow is the last day to buy BASC tickets!

Grab yours at www.basconf.org and get access to a day full of talks, workshops and a chance to win some amazing raffle prizes.

#appsec #basc2026 #basconf #owasp

Learn some new skills at OWASP BASC

Tony Quadros will be conducting a hands on workshop on writing custom static analysis rules

Check out more at www.basconf.org

#appsec #basconf #basc2026 #owasp

How Google Cloud Armor Helps Close OWASP Top 10 Risks in 2026 Most teams don’t fail OWASP because they ignore it. They fail because they can’t turn it into enforcement.

A useful point on Google Cloud Armor: OWASP awareness is not enough without enforcement. Strong edge controls can help reduce injection attempts, abusive automation, and pressure on fragile apps.
medium.com/google-cloud...
#CloudSecurity #GoogleCloud #GCP #OWASP #DevSecOps

Full Disclosure: [CVE-2026-33691] OWASP CRS whitespace padding bypass vulnerability

Kine of a neat vulnerability discovered in the OWASP Common Rule Set. Test your stuff on Windows folks!

https://seclists.org/fulldisclosure/2026/Apr/0

#owasp #cve

Dive into the world of SBOMs at OWASP BASC

Kelli Schwalm will speak on how to tell if your SBOM is wrong.

Check out more at www.basconf.org

#owasp #appsec #basconf #basc2026

GenAI Security Project ramps up guidance for AppSec teams New resources for providing practical guidance and tools for securing generative and agentic AI have been released by OWASP's GenAI Securi...

AI risks are evolving fast and OWASP's GenAI Security Project is keeping pace—new red-teaming taxonomy, 200+ mapped solutions, and updated guidance for AppSec teams. jpmellojr.blogspot.com/2026/04/gena.... #AppSec #GenAI #OWASP #AISecurity

Only 3 days left to secure your ticket to the application security conference. Spend a day learning from 18 talks, 4 expert‑led workshops, and enjoy raffle prizes. Buy at www.basconf.org — ticket refunded at check-in!

#appsec #basconf #owasp #basc2026

Learn about traditional and non traditional methods of AppSec

Gaurav Kulkarni will talk about how variant hunting redefines vulnerability management

Check out more at www.basconf.org

#appsec #owasp #basconf #basc2026

Big thank you to our Platinum sponsor NowSecure !

NowSecure provides a full suite of security and privacy testing solutions purpose-built for mobile apps.
Want to sponsor OWASP BASC 2026? Check out our website www.basconf.org

#owasp #basc #basc2026 #appsec

Workshop Resources: OWASP Threat and Safeguard Matrix (TaSM) The Cybersecurity Club hosted a global workshop led by Ross Young to introduce OWASP's Threat and Safeguard Matrix (TaSM), a practical framework that maps material threats to safeguards aligned with the NIST Cybersecurity Framework. Attendees worked through phishing, ransomware, web application attacks, third‑party data loss, and AI data‑leak scenarios involving ChatGPT and Google Gemini to identify coverage gaps, prioritize investments, and explore AI automation from Clear Capabilities. #OWASP #TaSM #RossYoung #ClearCapabilities #ChatGPT #GoogleGemini #NIST

Ross Young led a global workshop on OWASP’s Threat and Safeguard Matrix (TaSM), linking threats like phishing, ransomware, and AI data leaks to safeguards aligned with NIST standards. #OWASP #AIsecurity #USA

Only 4 days left to buy your ticket to the application security conference. Spend a day learning with 18 talks, 4 workshops led by experts, plus raffle prizes. Purchase at www.basconf.org — ticket refunded at check-in! #appsec #basconf #owasp #basc2026

OWASP PTK Findings as ZAP Alerts (Juice Shop Walkthrough) OWASP PTK 9.8.0 and the ZAP OWASP PTK add-on 0.3.0 now let ZAP display OWASP PTK findings directly as ZAP Alerts. This post shows how to install the add-on, choose which PTK rules to run (SAST / IAST ...

This is huge!
www.zaproxy.org/blog/2026-04...
OWASP PTK massively increases ZAP’s browser side testing capabilities .. and automation is up next!
Many thanks to Denis Podgurskii for this great integration.
#zaproxy #owasp #appsec

We have some interesting sessions on Threat Modeling as well

Alok Tibrewala will talk about Threat Modeling Development Workflow using Autonomous Code Generation

Check out more at www.basconf.org
#owasp #basc2026 #basconf #appsec

We’ve been working on something special…

🌟 Our first Impact Report is here!
Real stories, real voices, real impact, all made possible by you.

📄 owasp.org/assets/fil...

We are very proud of this one. Excited for what’s next 💪❤️

#OWASP #Impactreport #community #opensource #infosec #appsec

German OWASP Day 2026

Der diesjährige German #OWASP Day findet am 24.9.2026 in Karlsruhe statt .Am Vortrag bieten wir Community Trainings an, die letztes Jahr sehr gut angenommen wurden

Der CfT für 2026 ist bereits offen - bis zum 12.4. god.owasp.de/2026/cft.html

#Appsec #infosec #security #devsec #AI #LLM #SDLC #CISO

Original post on infosec.exchange

Hallo AppSec-Community!

Unsere Vorbereitungen für den German #OWASP Day 2026 (GOD) sind in vollem Gange. Wie einige vielleicht bemerkt haben, die Webseite ist live (und wie üblich in Farbe): https://god.owasp.de/2026 .
Der diesjährige GOD findet am 24.9.2026 in Karlsruhe statt (Konferenztag mit […]

Get engaged in some intense discussions on AppSec

Kathan Shah & Nikunj Doshi will show us what are the hidden blindspots in an AppSec Program

Check out more at www.basconf.org

#owasp #basc2026 #basconf #appsec

We have full day of really varied talks

Jeevan Jutla will talk about how to hack like humans but without humans

Check out more at www.basconf.org

#appsec #owasp #basc2026 #basconf

7 days left to buy your ticket to the exclusive application security conference. Get a day of learning with 18 talks and 4 workshops by experts, plus chances to win raffle prizes. Buy at www.basconf.org — price refunded when you check in! #appsec #basconf #owasp #basc2026

Original post on mastodon.social

There is the concept of #OWASP Security Champions.

Two years ago I helped a team in a large #SAFe transition very practically to establish that. I was the Champion and I had a vice Champion. He was a good frontend developer but as he said himself had no clue about security.
After two months I […]

Interested in an intersection between DNA and AppSec?

Yana K is giving a talk on Crypotography using DNA and BioSafe Data Security.

Check out more at www.basconf.org

#owasp #basc2026 #basconf #appsec

Big thank you to our Platinum sponsor Prime Security!

At Prime Security, we empower Security Teams to integrate risk-aware decisions into the very fabric of product development.
Grab your tickets at www.basconf.org

#owasp #basc #basc2026 #appsec

Check out some more interesting sessions in AppSec

Vidhya Baskaran and Nilkanth Patil will talk about how to work towards centralizing vulnerability management

Check out more at www.basconf.org
#appsec #basc2026 #basconf #owasp

Stay ahead! Learn how OWASP SAMM helps achieve CRA compliance by turning security requirements into measurable practices, integrating them into your SDLC, and embedding continuous, risk-based security.

Read: owaspsamm.org/blog/2...

#OWASP #SAMM #CyberResilienceAct #SDLC

Why the pentesting playbook doesn’t fit: belief, assumptions, and non-determinism About the author Hussein Bahmad Hussein is a penetration testing manager in NVISO’s SSA team in which he manag...

#AI #Security #AISecurity #AITesting #AppSec #LLMSecurity […]

[Original post on blog.nviso.eu]

Learn about the greatest lie in enterprise security with Arnab Roy!

Grab your ticket at www.basconf.org

#owasp #basc2026 #appsec #basconf

Join Fabio Cerullo’s 3-Day Web App Security Essentials training ⚔️
Exploit real vulnerabilities, understand OWASP Top 10 (2025), and tackle modern risks like AI-generated code, all in hands-on labs.
owaspglobalappseceuv...

#AppSec #CyberSecurity #OWASP #EthicalHacking #SecureCoding #Infosec

Dont wait hurry! Grab a ticket to the only application security conference in New England. With 18 talks and 4 workshops get some new skills and upgrade your knowledge on Saturday April 11th 2026. Also if you check in at the event, you will get refunded! Buy your tickets at www.basconf.org

#owasp