Checkmarx Zero @CheckmarxZero
Checkmarx Zero Working to Keep the Open Source Ecosystem Safe https://t.co/3yB6kPHV9B checkmarx.com/zero/ Joined April 2022-
Tweets276
-
Followers199
-
Following19
-
Likes22
Our researchers evaluated Claude Code’s new security review feature. The results? ✔️ Finds simple vulnerabilities quickly ⚠️ Misses more complex issues ⚠️ Can be tricked into approving malicious code ⚠️ May even introduce new risk during analysis Bottom line: AI security review…
Yep, there's still new SQL Injection #vulnerability in 2025 -- this one is #CVE-2025-49870, in a popular #WordPress plugin that manages paid subscriptions (like when you want people to pay to subscribe to your blog, course content, etc. on your WordPress site). Someone didn't…
Lessons from session takeovers in Payload CMS, and malicious workflows in the Nx build system leaked secrets; #LastWeekInAppSec (2. September 2025) 🪪 Payload CMS SQLite adapter session management issues can lead to account takeover (CVE-2025-4644 and CVE-2025-4633). New…
🔒 AI vs CAPTCHA: Who’s really winning the fight? CAPTCHAs were once the frontline defense against bots. But with modern AI solving text, image, and even behavior-based challenges at near-human levels, traditional CAPTCHAs are crumbling. Our latest blog dives into: •How AI…
🐞 You should pay attention to the Kubernetes CVE-2025-5187 While it is only rated a Medium (CVSS 6.7), it's a privilege escalation. Node users can delete their own nodes without permission. That’s an easy way for attackers to cover tracks or cause integrity failures. 👉…
Amazon's close call with their #AmazonQ #VisualStudioCode extension is a case study in the need for #ApplicationSecurity teams to consider attacks against developers. A GitHub token for the plugin's CodeBuild configuration accidentally had more rights than expected. An…
Looks like we might have our first #LLM based #ransomware. Or at least a toolkit for ransomware development. ESET reports that they found a toolkit on VirusTotal that uses Ollama to generate local malware. It appears to either be a proof-of-concept (which ESET supposes is the…
If your developers are using #DockerDesktop (on Windows or MacOS), make sure you update to 4.44.3 to avoid a #vulnerability (#CVE-2025-9074) where malicious containers can break containment and make modifications on the host. MacOS's isolation does provide some mitigation, but is…
Here are some news items our team found interesting over the past week, which you might have missed. #️⃣ NPM module `cipher-base` (10M weekly downloads), part of the crypto-browserify JavaScript suite for performing cryptographic implementations in the browser, has a severe…
#LastWeekInAppSec for 19. August 2025: Code injection in AI Agent dev tool, path traversal in `go-getter`, model code injection protection bypass in TensorFlow Keras, and unsafe ImageMagick use in Rails Active storage checkmarx.com/zero-post/last… for details, mitigations, etc..…
Time for another #LastWeekInAppSec for 12. Aug 2025: ChatGPT-5 system prompt leaked, CISA supports CVE, and AppSec Village completes 💧 OpenAI released GPT-5 in its ChatGPT platform, but researchers almost immediately discovered and published the ChatGPT5 system prompt,…
🚨 CVE-2025-54887 | JWE (Ruby) — Missing AES-GCM tag validation The Ruby implementation of RFC 7516 (JWE) fails to validate AES-GCM authentication tags on encrypted JWEs. An attacker can brute-force/bypass the tag, breaking confidentiality and enabling crafted arbitrary JWEs.…
Looking for #LastWeekInAppSec for 5. Aug? We're taking a bye week on it to hang out at #BHUSA and #DEFCON -- look for us to get back on it next week! Meanwhile, keep an eye out for your friendly researchers (and Darren) around Las Vegas.
This article by Vladimir Shelkovnikov is a great summary of git commit privacy, and why it's so important to prevent sensitive data from leaking to git. Rewriting git history after you leak something like an API key doesn't necessarily remove the evidence; you should treat it as…
Isidora @FgZ9E5UNTP7KR
36 Followers 1K Following
teycir bensoltane @teycirben
86 Followers 2K Following
AliceHenrietta @d8961O6rBDG0S
17 Followers 755 Following Don’t wait for someone to save you. Save yourself.
Fatesblind @Fatesblind
4K Followers 3K Following Constitutionalist with a flair for liberty and a hint of conservative.
Thomas Moerkerken @moerketh
114 Followers 929 Following Software Engineer with a passion for open source and cloud-native technologies. DevSecOps | Blue Team
Aaditya Mahale @aaditya_mahale_
3 Followers 25 Following Tech enthusiast | CDAC PG-DAC | MCA Graduate | Java | Spring Boot | Passionate about digital solutions. Let's connect and innovate!🚀
比个心 @vbigthing
91 Followers 4K Following
John Kiefer @johnkiefer66
0 Followers 23 Following
rebootmaster @rebootmast66993
0 Followers 363 Following
Hjuwhnbds @hjuwhnbds97696
3 Followers 117 Following
Bheema @Bheema_0x01
20 Followers 734 Following
Eran Kinsbruner @ek121268
4K Followers 3K Following VP Portfolio Marketing at Checkmarx ,speaker, author of https://t.co/sZbo0v1S4C, https://t.co/wmjiqB1WUh #dev #AppSec #DevOps #DevSecOps #CISO #SAST #SCA #ASPM #DAST
ARPSyndicate - Cyber ... @arpsyndicate
523 Followers 296 Following A Global Cyber Intelligence Company with hyperspecialization in Information Discovery, Shadow IT & Vulnerability Intelligence
noraneko_nobuo @HVKHgyjaijz1IOw
81 Followers 589 Following
カリウム45 @kalium45
159 Followers 514 Following アナログ回路/自作PCは面白い。 サカナクションとHoneyWorks好き。なんか最近プロセカなどの音ゲー配信をしてます。 配信用垢→https://t.co/cs5NjqEWML この垢は雑多ですがよろしくお願いします！ 🌂
ALT @IxkatLobo
32 Followers 174 Following
Justice Hernandez @JHernandez47276
12 Followers 109 Following
Alexander Thandi Uban... @thandiubani
2K Followers 2K Following Lead Editor @Tori_Nigeria. Poet. Lover. Husband. 🇳🇬Onye Abia.
Thereisno2ndbest @allinonthechair
122 Followers 687 Following Bitcoin | Altcoin | Meme coin Investor $S $PLS $PLSX $Goggles
Jai Aradhye @JAI_ARADHYE
0 Followers 27 Following
Pavan @Pavan1497670195
0 Followers 24 Following
Mayur Singru @MayurSingru
58 Followers 383 Following
João Guedes @guedesao
0 Followers 12 Following
Fernando Castilla @FerD7010
135 Followers 580 Following CEO & Founder at NOVACODIFY | Purpose-driven tech for startups | MVPs, AI, Web3 & custom software that scales 🚀 #StartupTech #AI #Web3 #Innovation
Shiris Kumar @Shiris_kumar
11 Followers 361 Following Break-Fix-Repeat | Offsec Enthusiast | PwC | Intel Sports | Samsung - Harman | GE HealthCare
Juni15 @mcslaw15
1 Followers 59 Following
Tuğba Karakaya @suigeneris0606
111 Followers 266 Following İnsanın değeri, Kalbinin ağırlığı kadardır..♌️💛💙
ওয়ান ড�... @delaparasa30286
0 Followers 1 Following
S Ƨ lmvich @SoldatTiger
13 Followers 63 Following «Впечатления маленькой девочки внутри большого Саши»
ECHOz @oz_ech
0 Followers 15 Following
Cristhian Anyosa @AnyosaCristhian
34 Followers 422 Following Ingeniero de Sistemas - UNAC SAP - QLIK SENSE Seguridad Informática y Forense C|EH #ClubSportingCristal #AnimePeru
huhrefd111 @huhrefd11142396
0 Followers 82 Following
Harp6X @harp6x
468 Followers 5K Following #vsoc #Malware Research, #threatintel & #threathunting (✿ ♥‿♥)
Simon Bennetts ⚡�... @psiinon
7K Followers 632 Following ZAP (@zaproxy) by @Checkmarx lead, #Mozillian Mastodon: @[email protected]
R M ⚡🇺🇦 @kingthorin_rm
2K Followers 451 Following IT Sec guy, @zaproxy co-lead, @owasp_wstg co-lead, VWAD co-lead, @owasp_ottawa volunteer, Hac≺3r, supporter of oxford commas, #INTJ. (Opinions == mine) 🍁
gdama @gd_gdama
1 Followers 2K Following
TeamX 🌐 @CitiZenS3x
192 Followers 3K Following 👉Follow for LATEST NEWS - international affairs, wars, immigration, security, human rights, media, science, tech & occasional memes 💪🏽🇮🇱 🕊️ 🇺🇦💪🏽
RS @nicesuitbro
2 Followers 19 Following
Eilon Cohen @NoShitOasis
170 Followers 764 Following Not financial advice. Self-made speculator, researcher, developer. Don't follow if you're into the matrix.
tonghuaroot @tonghuaroot
450 Followers 3K Following Staff Security Engineer. Cyber Security enthusiast, not Hacker. Focus on Application Security, Penetration testing. #OSCP #OSEP #RedTeam #AppSec #WebSec
João Oliveira @ValdDracula
29 Followers 322 Following
かなで @TwinTailTrap
15 Followers 69 Following
Jann Yip @jann_yip
115 Followers 256 Following Jann is the Regional Marketing Director at Checkmarx. #makeyourmark today!
CA$H @RobJTejas
335 Followers 3K Following Electrical Engineer turned Digital Forensicator. Thinker, tinkerer, inventor, artist, home chef, gamer, home brewer. Socially aware, spiritually awoke.
AppSec Village @AppSec_Village
11K Followers 6K Following AppSec Village @DEFCON & @RSAConference A volunteer-run, non-profit focused on education, awareness, and community. Founded by @erezyalon and @tzionit411.
Sam Stepanyan @securestep9
7K Followers 4K Following @OWASPLondon Chapter Leader (#OWASP #OWASPLondon). OWASP Board Member. Application Security (#AppSec) Consultant. OWASP Nettacker Project co-leader. #CISSP
Maciej Mensfeld @maciejmensfeld
2K Followers 204 Following Work @mend_io, Karafka author, and https://t.co/zTioLZz3Jk creator. Tweeting about notable performance improvements in OSS projects, security, and Ruby stuff
Jesse Mitchell @TotalCoder
44 Followers 70 Following Hey! I'm Jesse! I'm a bit of a total tech geek. Developer of https://t.co/WT39abMS4t
Louis Lang @LouiswLang
90 Followers 58 Following Co-founder @phylum_io, former @nsagov and @sony red team. Working on software supply chain security. @[email protected]
Phylum @Phylum_IO
333 Followers 375 Following Phylum automates software supply chain security to contextualize risks, block attacks and allow organizations to only use trusted open-source code.
OpenSSF Scorecard @Scorecards_dev
125 Followers 6 Following OpenSSF Scorecard quickly assesses open source projects for security risks through a series of automated checks. Part of @OpenSSF
AmitaiBs3 @AmitaiBs3
573 Followers 236 Following Threat Research, Intelligence & DFIR. Love & hate relationship with threat actors. 💔 | Threat Intelligence Analysis @ CPR.
Cynthia SW 🌻 @CynSieWil
2K Followers 4K Following Interested in security research and ethical AI. Archaeology volunteer. Tweets & opinions are my own. She/her
BleepingComputer @BleepinComputer
240K Followers 200 Following Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
Dark Reading @DarkReading
342K Followers 48 Following One of the most widely read and trusted cybersecurity news sites, providing IT security professionals informed insights into the latest news and trends.
Ana Lucia Amaral @analucia_B2B
2K Followers 5K Following GTM & Growth Marketing Exec | Helping SaaS & Cybersecurity scale globally, accelerate pipeline & build high-impact ecosystems | 5x CRN WOTC
Erez @ErezYalon
1K Followers 462 Following VP of Security Research @Checkmarx; Founder of @AppSec_Village; API Security Project Leader @OWASP
Jossef Harush Kadouri @jossefharush
103 Followers 42 Following
Checkmarx Open Source @CheckmarxOSS
90 Followers 456 Following @checkmarx Open Source Program Office.
Checkmarx @Checkmarx
7K Followers 3K Following Checkmarx is how the world’s largest enterprises can finally get ahead of application risk without slowing down development. #AlwaysReadyToRun
Cybersecurity and Inf... @CISAgov
309K Followers 99 Following Official communications from CISA on X will always originate from this account. No other accounts are authorized to convey info from CISA or senior CISA staff.Trends for United States
You might like
