Here we go, with another pre-RSAC 2025 Conference Coverage Brand Story!

#QuantumSecurity, Real Problems, and the Unifying Layer Behind It All
A Brand Story with Marc Manzano, General Manager, Cybersecurity Group at SandboxAQ

As we get ready for RSAC 2025, we’re kicking things off with some Brand Story conversation that sets the tone for what’s coming.

In this pre-event episode, SandboxAQ shares how their flagship platform, Active Guard, is reshaping #cybersecurity at the intersection of #AI and #quantum. From cryptographic asset management to non-human identity oversight and automated compliance, it’s all about solving real challenges and building a more secure, interoperable future.

ITSPmagazine's Co-founders Marco Ciappelli and Sean Martin, CISSP sat down with Marc Manzano for a first look at the #technology and thinking behind it — and what you can expect from their presence at RSA Conference 2025.

We’ll reconnect and record with SandboxAQ on location at #RSAC2025 for a deeper dive into this critical conversation.

A special thank you to SandboxAQ for sponsoring our RSAC 2025 coverage and supporting this exploration into the future of cybersecurity.

Watch, listen, and learn more below:

Video Teaser: https://youtu.be/eCT8qNhp4nc

Full Video Episode: https://youtu.be/aD34MD5IRnc

Full Audio Podcast: https://brand-stories-podcast.simplecast.com/episodes/quantum-security-real-problems-and-the-unifying-layer-behind-it-all-a-brand-story-conversation-with-marc-manzano-general-manager-of-the-cybersecurity-group-at-sandboxaq-a-rsac-conference-2025-brand-story-pre-event-conversation

Explore our full RSAC 2025 Coverage: https://www.itspmagazine.com/events/rsac

Great blog from Square, on how they built a custom solution for #Kubernetes guardrails on top of Open Policy Agent. This is a perfect example of the flexibility OPA provides organizations to solve the most advanced use cases!

https://developer.squareup.com/blog/kube-policies-guardrails-for-apps-running-in-kubernetes/

Going Live in 15 Minutes — Come Join Us!

I’m about to tune in for a live ITSPmagazine webinar that dives into a topic I truly care about:

Secure Coding = Developer Empowerment

It’s not just about reducing risk — it’s about investing in developers, boosting velocity, and building better software from the start.

Today – April 18

Hosted by ITSPmagazine

In partnership with Manicode Security

Jim Manico

Jimmy Mesta

Sean Martin, CISSP

Will be talking about:

Why most developers never get proper secure coding training

How to get leadership buy-in for better dev security

Why this isn’t just security—it’s a career boost

If you’ve got time, join us live. If not, watch it on demand. Either way, it’s a conversation worth having.

Join here:

https://www.crowdcast.io/c/secure-coding-equals-developer-power-how-to-convince-your-boss-to-invest-in-you-an-itspmagazine-webinar-with-manicode-security-ad147fba034a

#ApplicationSecurity, #DeveloperEmpowerment, #SecureCoding, #DevSecOps, #softwaresecurity, #cybersecurity, #infosec, #ITSPmagazine

Are you looking for a new remote job? Browse 400+ remote positions from open source companies including @acquia @grafana @mozilla @wikimediafoundation and more on #OSJH
https://opensourcejobhub.com/jobs/?q=remote&utm_source=mosjh
#career #OpenSource #engineer #sales #security #marketing #CloudNative #developer #DevSecOps #SRE #FOSS

The #KubeCon recordings are now on YouTube! We'll be posting links to all the #OpenPolicyAgent related ones as we watch them. First out is the #OPA maintainer track session, where @charlieegan3 and @anderseknert give a short introduction to OPA and Rego, followed by a deep-dive into recent performance improvements, and a sneak peek at the project roadmap. Check it out!

https://www.youtube.com/watch?v=XtA-NKoJDaI

AI Code Assistants: A Double-Edged Sword?

AI-powered coding tools are revolutionizing development workflows, but they come with hidden dangers:

Hallucinated Dependencies: AI suggests packages that don’t exist.
Slopsquatting Attacks: Malicious actors register these fake packages, leading to potential security breaches.
Automated Installation Risks: Some AI agents might auto-install these without developer awareness.
False Legitimacy: AI-generated summaries can falsely validate these malicious packages.

Stay Vigilant: Always double-check AI-generated code and dependencies. Trust, but verify.

#AI #CyberSecurity #DevSecOps #SupplyChain #SoftwareDevelopment
https://www.theregister.com/2025/04/12/ai_code_suggestions_sabotage_supply_chain

Whoa, just checked out the latest GitGuardian report. It's wild how many secrets popped up *again*! We're talking millions of credentials just floating around out there.

And here's the kicker: it's not *only* about human slip-ups anymore. You've got more and more 'Non-Human Identities' (NHIs) – think bots, scripts, AI agents – churning out secrets too. And honestly? Those NHI secrets often get way less attention than the ones people handle.

As a pentester, I bump into this constantly. Find an old, forgotten API key lying around, and *boom* – system's compromised. Yeah, automated scans are definitely helpful, but nothing beats having solid secrets management in place. It's absolutely crucial.

So, how's everyone else keeping their secrets locked down? Got any killer best practices to share?

Meet the Keynote Speakers for OWASP Global AppSec EU 2025 in Barcelona!

Join us May 26-30, 2025, for an incredible lineup of speakers, including two industry leaders shaping the future of cybersecurity.

Dr. Kate Labunets – Assistant Professor, Utrecht University

Sarah-Jane Madden – Director of Cyber Defense, Fortive

Register
https://owasp.glueup.com/event/123983/register/

Cloud native adoption, AI, and security remain key focus areas in 2024. The latest report from LF Research and CNCF highlights the trends shaping the industry.

Read the report: https://www.linuxfoundation.org/research/cncf-2024-annual-survey?hsLang=en

Yes, it is true! It’s Webinar Time! Secure coding isn’t just about writing safer software—it’s a career game-changer.

But most companies don’t invest in secure coding training, leaving developers without the skills they need to protect their apps.

Join us live on April 16, 2025, for an ITSPmagazine Webinar where we’ll explore how to change that.

Secure Coding = Developer Power: How To Convince Your Boss To Invest In You

With:
Jim Manico, Manicode Security
Jimmy Mesta , RAD Security
Moderated by yours truly — Sean Martin, CISSP

Register here: https://www.crowdcast.io/c/secure-coding-equals-developer-power-how-to-convince-your-boss-to-invest-in-you-an-itspmagazine-webinar-with-manicode-security-ad147fba034a

Why You Should Attend
Secure coding isn’t just about preventing security failures—it’s a career accelerator. Developers who understand security are more valuable to their companies, build better products, and stand out in the job market. This session will equip you with the knowledge and tools to make the case for secure coding training at your company, giving you an edge as both a developer and an advocate for better software security.

We’ll cover:
Live code reviews & secure fixes
Automation tips for secure defaults
What effective training really looks like

If you care about building secure software and stronger engineering teams, don’t miss this one.

Register here: https://www.crowdcast.io/c/secure-coding-equals-developer-power-how-to-convince-your-boss-to-invest-in-you-an-itspmagazine-webinar-with-manicode-security-ad147fba034a

Yes, it is true!
It's Webinar Time!

... and we’re back with another ITSPmagazine Thought Leadership Webinar — because impactful conversations and meaningful perspective exchanges are what we’re all about.

After the success of our debut session “AI In Healthcare: Who Benefits, Who Pays, And Who’s At Risk?” (missed it? Watch it on demand https://www.crowdcast.io/c/ai-in-healthcare-who-benefits-who-pays-and-whos-at-risk-an-itspmagazine-thought-leadership-webinar-march-2025-3eeb9725b912) —we’re diving back in with a brand-new conversation focused on the heart of what drives our work: cybersecurity, technology, and society.

Secure Coding = Developer Power: How To Convince Your Boss To Invest In You An ITSPmagazine Webinar With Manicode Security April 16, 2025

We’re honored to welcome two brilliant minds joining Sean Martin, CISSP — yes, of course, he’s pretty sharp too — for this one:

Jim Manico, Founder and Secure Coding Educator at Manicode Security
Jimmy Mesta , Course Instructor for Manicode and CTO at RAD Security

Why does #securecoding still feel like an afterthought? This session tackles that question head-on—covering why most companies don’t invest in secure coding training, how developers can advocate for themselves, and how this skillset can seriously boost your career. We’ll even get into some live code reviews and automation demos you won’t want to miss.

Secure Coding = Developer Power: How To Convince Your Boss To Invest In You
LIVE: April 16, 2025
REGISTER HERE: https://www.crowdcast.io/c/secure-coding-equals-developer-power-how-to-convince-your-boss-to-invest-in-you-an-itspmagazine-webinar-with-manicode-security-ad147fba034a

Be sure to share this with your fellow #developers, coworkers, and anyone who cares about building safer software and smarter teams. This is your chance to invest in yourself—and help your company do the same.

LET'S go, we can do this!!!

#webinar, #securecoding, #developerlife, #cybersecurity, #infosec, #softwaresecurity, #devsecops, #itspmagazine #infosecurity #tech #technology #software #programmers

Find and protect your third-party GitHub actions from supply-chain attacks with Scharf.

Scharf is a blazing fast, scanner and lookup tool to find all GitHub workflow actions with mutable references.

#cybersecurity #github #devsecops #software

https://github.com/cybrota/scharf

Ready to shine on stage? Share your expertise at #OWASP Global #AppSec USA in Washington, DC this November! Submit your presentations now for this incredible event! Seize the opportunity - apply here: https://sessionize.com/owasp-global-appsec-USA-2025-cfp2/ #infosec #AI #devsecops #SBOMM

AI-generated code is powerful—but dangerous if used carelessly. Are you “vibe coding” without realizing the risks? Learn why blind trust in AI introduces vulnerabilities and how DevSecOps can help you avoid the hidden traps.

#AI #DevSecOps #CyberSecurity #SecureCoding #VibeCoding

https://webdad.eu/2025/03/31/code-ai-and-security-avoiding-the-hidden-traps-of-ai-generated-code/

Debugging OIDC can be frustrating. Let’s fix that.

Spent hours debugging OIDC flows? We built an OIDC Tester to make life easier.

Test authorization flows (Auth Code, PKCE, Client Credentials, etc.)
Validate ID & access tokens
Debug configs quickly

Try it here https://oidc-tester.compile7.org/

Would love to hear your thoughts—what’s the most annoying part of working with OIDC?

MCP, Agentic Knowledge Graphs & AI Models: Solving Conversational Analytics

https://www.eventbrite.com/e/mcp-agentic-knowledge-graphs-ai-models-solving-conversational-analytics-tickets-1304648411519?aff=ebemoffollowpublishemail&ref=eemail&utm_campaign=following_published_event&utm_content=follow_notification&utm_medium=email&utm_source=eventbrite

In this free webinar led by ex-Snowflake, Cloudera, and Amazon leaders, we'll unveil how cutting-edge LLMs (GPT 4.5, Sonnet 3.7, Deepseek V3/R1, Gemini 2.5, etc.) are revolutionizing data products.
#python #machinelearning #deeplearning #ai #developer #dev #devsecops #devops #mlops #learn #learning #study #git #github #codeberg #tensorflow #pytorch #jax #huggingface #linux #ubuntu #popos #llm

Regal v0.32.0 just dropped! After having worked mostly on language server features recently, it was time for the linter to get some love. This release includes 3 new linter rules as well as much faster linting. Check it out!

https://github.com/StyraInc/regal/releases/tag/v0.32.0

Ready to shine on stage? Share your expertise at #OWASP Global #AppSec USA in Washington, DC this November! Submit your presentations now for this incredible event! Seize the opportunity - apply here: https://sessionize.com/owasp-global-appsec-USA-2025-cfp2/ #infosec #AI #devsecops #SBOMM

I am curating the Supply Chain Security track at #Rootconf2025!

Got stories, tools, or lessons from the trenches? Come speak — or just show up and learn.

hasgeek.com/rootconf/2025/