Wir feiern die Vielfalt und Freiheit von Open Source Software (OSS)!

Damit OSS auch wirklich sicher bleibt, ist eine regelmäßige Überprüfung des Quellcodes unerlässlich. Denn: Erfolgreiche Angriffe lassen sich häufig auf Fehler im Programmcode zurückführen. Hier kommt unser Projekt CAOS ins Spiel! Neugierig auf mehr? Erfahrt hier alles über CAOS und unsere spannenden Analysen: https://www.bsi.bund.de/dok/1092594

PRevent: Open-source tool to detect malicious code in pull requests https://www.helpnetsecurity.com/2025/02/20/prevent-open-source-tool-to-detect-malicious-code-in-pull-requests/ #softwaredevelopment #threatdetection #codeanalysis #programming #JavaScript #opensource #Don'tmiss #Hotstuff #Apiiro #GitHub #Kotlin #Python #News #Java #Ruby #PHP

RiskInDroid: Open-source risk analysis of Android apps https://www.helpnetsecurity.com/2024/03/06/riskindroid-open-source-risk-analysis-android-apps/ #codeanalysis #opensource #Don'tmiss #Hotstuff #scanning #software #Android #GitHub #News

Having one of those "what the heck is wrong?!" moments.

I wrote a Roslyn analyzer. Tests work great.

I wrote the fixer for that diagnostic reported above. Test fails. Set breakpoints, and RegisterCodeFixesAsync never gets called, despite being set for the same descriptor. Same pattern I use with every other fixer, but this one is just silently... not doing anything.

Very confused and frustrated right now. Might have to ship this analyzer without a fix. #dotnet #csharp #Roslyn #CodeAnalysis

Can you find the vulnerability in this piece of code?
#PHP #CodeAnalysis #SAST

HIRING: Senior Product Security Engineer (Remote) / Remote https://infosec-jobs.com/J17350/ #InfoSec #InfoSecJobs #Cybersecurity #jobsearch #hiringnow #CyberCareer #RemoteJob #Agile #Applicationsecurity #Codeanalysis #ComputerScience #Docker #Exploit #Go #GWAPT #JavaScript #Kubernetes #OpenSource #OSCP #OSWE #OWASP #Pentesting #Productsecurity #SAMM #SAP #Vulnerabilitymanagement