🚨 𝟭𝟳,𝟲𝟭𝟬 𝗚𝗶𝘁𝗛𝘂𝗯 𝗿𝗲𝗽𝗼𝘀 𝘀𝗲𝗿𝘃𝗶𝗻𝗴 𝗺𝗮𝗹𝘄𝗮𝗿𝗲. About 14,000 re-pushed in 34 hours. We verified repos distributing SmartLoader in the FakeGit campaign. The mechanism: keep the repo & change where its download button points. We call it 𝗥𝗲𝗣𝗼𝗶𝗻𝘁𝗶𝗻𝗴.

As a payments infrastructure provider, @PaddleHQ can’t just float along when it comes to application security. 🚣 They turned to Apiiro to streamline collaboration with developers and propel their #AppSec program forward, enabling them to... 🚀 Maintain visibility of Paddle’s entire application estate, including every code change across 100+ pull requests per week. ⏳ Give them back 2 days' worth of work each week by automating risk assessments and enforcing policies directly in developers' workflows. 📦 Consolidate their security testing tooling with a unified platform across open source, software supply chain, and secrets security. 📊 Measure the impact their AppSec program has on both security efficiency and engineering productivity metrics. Read the full story: apiiro.com/resource/paddle-c…

We sat down with Adam Jordan (@XYLAMIC), Distinguished Engineer & Head of Secure, Sustainable Software at Shell, to talk about how Shell… 🤖 Enables autonomy to deliver secure software 💪 Defines strong security controls and automation 📈 Measures and articulates #AppSec success Watch the full interview with @idanplotnik 👇 apiiro.com/resource/adam-jor…