
AppSec Village @DEFCON & @RSAConference A volunteer-run, non-profit focused on education, awareness, and community. Founded by @erezyalon and @tzionit411.
Las Vegas, NV
Joined December 2018
- Tweets1.6K
- Following5.8K
- Followers10.9K
- Likes487
With the EU Cyber Resilience Act reshaping SBOM requirements, tracking what applies where is its own job. This dashboard does it for you.
🔗 cybeats.com/regulations?utm_…
Thank you for your support as a Gold Sponsor of @AppSec_Village in 2026, @cybeatstech!
#CRA #AppSec
Read @FiniteStateInc's guide to learn how to generate binary-derived inventories that stand up to regulatory scrutiny.
finitestate.io/resources/fir…
Thanks for supporting @AppSec_Village as a Silver Sponsor this year!
#CRA
Firmware scanners return thousands of CVEs, but the EU CRA expects risk-based remediation.
🔍 Our Silver Sponsor @FiniteStateInc shares a 5-step framework to filter low-impact noise using CVSS, EPSS, and binary reachability.
finitestate.io/resources/how…
Thanks for your support!
In LLM Application Security: Governing AI-Driven Risk Across the Software Lifecycle, Checkmarx looks at what happens when AI starts generating more of the code we rely on.
🔗 checkmarx.com/llm-applicatio…
Proud to have @Checkmarx backing @AppSec_Village as a Gold Sponsor!
Attackers exploit in minutes. Is your security stack ready?
Learn how to move from passive visibility to real-time protection with
@OligoSecurity's free CADR For Dummies guide.
Download: oligo.security/cadr-for-dumm…
Proud to have Oligo as a Silver Sponsor!
AI is in production. But what's actually executing?
@OligoSecurity's 2026 Runtime Execution Report reveals what's running, how it behaves, and why it matters.
Read: buff.ly/0lrvsrP
Proud to have Oligo as a 2026 @AppSec_Village Silver Sponsor!
💀 AppSkeletor has returned.
His mission? To bring enlightenment to the cyber community, one painfully obvious security tip at a time.
Swipe through his Words of Wisdom, then share your own below. 🔮
@CISAgov
#CybersecurityAwarenessMonth #AppSecVillage
Put your prompt skills to the test in Clash of Prompts by @SymbioticSecAI!
Go 1v1 in a live AI battle to generate the most secure code.
Join the battle: buff.ly/GqVn3qL
Shoutout to Symbiotic Security, an @AppSec_Village Silver Sponsor!
From Jan–Jul 2026, @Xbow evaluated top AI models to test their offensive cybersecurity capabilities.
📖 Read the Mid-Year 2026 AI Model Security Research Report: xbow.com/whitepapers/mid-yea…
Huge shoutout to @Xbow, @AppSec_Village’s one and only Platinum Sponsor for 2026! 💙
AI coding agents can write working code, but secure code is another story. Across 200 real-world repo tasks, models were secure + functional just 24–36% of the time.
Read the report: theweatherreport.ai/posts/ca…
Thanks to an @AppSec_Village Gold Sponsor, @Checkmarx! 💙
AI is adding new layers to the software supply chain: models, agents, MCP servers & more.
@Checkmarx breaks down 10 risks that security teams should know.
Read: checkmarx.com/resources/10-a…
Proud to have Checkmarx as a Gold Sponsor of @AppSec_Village 💛
#AppSec
SBOM rules are moving fast: FDA, EU CRA, PCI-DSS, NIS2. Cybeats’ free SBOM Booklet breaks down what’s required and how to put SBOMs to work.
Download: 4049062.fs1.hubspotuserconte…
Proud to have @CybeatsTech as a Gold Sponsor of @AppSec_Village. 💛
#SBOM #CyberSecurity
Patching a CVE in a Python library sounds simple... until you try to do it at scale.
Wesley Wiedenmeier from @chainguard_dev breaks down why backporting security fixes is so hard.
Thank you for your support as a Gold Sponsor in 2026!
chainguard.dev/unchained/thi…
Malicious AI agent skills can hide data exfiltration or pull new instructions remotely.
@chainguard_dev’s Patrick Smyth shows how they work - and how hardening can catch them.
Watch: buff.ly/eVNt6QQ
Proud to have Chainguard as a Gold Sponsor of @AppSec_Village. 🙌
Pentesting can age fast when code keeps shipping.
@AikidoSecurity asked 400 security and engineering leaders what’s broken in security testing - and whether AI helps or hurts.
Read the report: buff.ly/rLK4oHn
Thanks for supporting @AppSec_Village as a Gold Sponsor.
Supply chain attacks don’t stop at your code. @AikidoSecurity's checklist covers dependencies, CI/CD, containers, developer environments and more.
Download it: aikido.dev/reports/supply-ch…
Proud to have Aikido as a Gold Sponsor. Thanks for backing @AppSec_Village. 💛
Attackers don’t see isolated bugs - they see the full puzzle. 🧩
@xbow on exploit chaining: xbow.com/whitepapers/the-sum…
Proud to have XBOW as a Platinum Sponsor of @AppSec_Village. 🖤
#ApplicationSecurity #InfoSec
From code to runtime, there’s always more to secure.
Thank you, @OX__Security , for supporting @AppSec_Village this year as a Bronze Sponsor. 🤎
See what they do here: ox.security/?utm_source=defc…
#AppSec #CyberSecurity
A shoutout to @Char_49, a Bronze Sponsor of @AppSec_Village. 🤎
Thanks for supporting the Village and the community that keeps it buzzing.
Learn more about Char49, here: char49.com/
#AppSec #CyberSecurity
AppSec gets complicated fast.
Glad to have @apiiroSecurity supporting @AppSec_Village as a Bronze Sponsor and backing the community behind it. 🤎
Find out more about what they do: apiiro.com/
#AppSec #CyberSecurity






















