AWS Security LIVE! from Black Hat

James Anderson

The Witness Was the Suspect: Why AI Audit Logs Can't Be Trusted

#ai #security #agents

Oct 5

Robert Adamson

We Gave AI Agents Real Tools — Then Realized “Just Ask Before Acting” Wasn’t Enough

#ai #security #programming

Oct 5

Vansh Sharma

When Skipping an API Error Can Delete Valid Data: A Cartography Fix

#python #opensource #cncf

Oct 5

aiXis

Every app on your Mac is talking to the internet - I built a map of it (zero telemetry)

#opensource #privacy #showdev

Oct 5

Sammi De Blas

AI Recommends Packages Attackers Registered First

#ai #security #agents

Oct 5

Akhouri Anmol Kumar

💀 I Hunted Down the Silent Killers in ATLOCK v5 (And Why Your Python App is Probably Failing in Silence) 🔥

#debugging #python #security

Oct 5

Anas Sheikh

That Wildcard in Your next/image remotePatterns Config Might Be an SSRF Hole

#nextjs #webdev #security

Oct 5

jj1423

Beyond the package name: why following the call is the hard part of supply-chain security

#vulnerabilities #security #supplychain

Oct 5

Freddie Thompson

Multi-Tenant Database Isolation: RLS, Schema-per-Tenant, and the Migration Wall

#architecture #database #postgres

Oct 5

Keyvault Edge

How to audit your codebase for exposed API keys (free tools)

#security #git #devops

Oct 5

Matheus Feijão

Hallucination blocked before the human

#ai #security #compliance

Oct 5

Sythos

JS Barcode Universal 1.6.4: security hardening, real formats and a better Bun day

#javascript #node #opensource

Oct 5

Cenk KURTOĞLU

3 Supabase RLS Leaks I Found in Production Apps This Week (and the 30-Second Check for Each)

#supabase #security #postgres

Oct 5

Sherdil Cloud

Compliance Isn't a PDF Checklist: It's a CI Gate

#devops #security #cicd

Oct 5

Daniel Pertu

Every URL our server fetches was typed by somebody else, so fetch() was never an option

#node #security #webdev

Oct 5