Dave Wichers (@wichers) profile picture

Application Security Consultant - Managing Director at EY, OWASP Benchmark Project Lead, OWASP Board Member (2004-2013), OWASP Top 10 Project Lead (2003-2017)

Columbia, MD
Joined January 2009
Photo by Dave Wichers (@wichers)Photo by Dave Wichers (@wichers)
Dave Wichers retweeted
So apparently a @haveibeenpwned email wiped an entire ticketing system due to the SQL injection pattern I put in the contents of it 🤣 fyr.io/2020/05/30/haveibeenp…
53
437
55
1,838
Dave Wichers retweeted
Retweeted with without comment.
Through a donation of 500,000 testing kits and 1 million masks, we join hands with Americans in these difficult times.
3
13
Dave Wichers retweeted
ZAP is 9 today! seclists.org/bugtraq/2010/Se… Thank you to all of our contributors and supporters! #owasp #zaproxy
13
32
I'm pumped. Just created what I hope is the last PR before we merge & push out the *official* @owasp ESAPI 2.2.0.0 release. May take a day or 2 for others to verify, so please be patient. In the meantime, celebrating with a @GuinnessIreland Draught Stout. Stay tuned!
1
3
4
“The Ocean Cleanup Is Starting, Aims To Cut Garbage Patch By 90% By 2040” forbes.com/sites/jeffkart/20…
3
3
Dave Wichers retweeted
if you think 90 days is too short to develop a security fix what is your plan if there's an actively exploited security bug in your product where you have to deliver a fix within hours...
7
25
86
Dave Wichers retweeted
Offensive talks are shiny... but give thought to the blue team and how to prevent/defend. Pointing out problems without thoughts on a solution is not shiny.
1
7
2
23
Dave Wichers retweeted
Today they released WiFI Kraken krackattacks.com/
1
10
10
Baird confirms @Equifax breached via @ApacheStruts. Could be the recent CVE-2017-5638 or CVE-2017-9805. baird.bluematrix.com/docs/pd…
1
38
5
29
Eclipse 2017
2
28
1
107
Dave Wichers retweeted
Just got an email that one of my lightbulbs isn't responding to queries. My house has better monitoring than some enterprises I've worked at
4
109
7
355
Dave Wichers retweeted
Replying to @owasp
@OWASP dependency-check 2.0.0 released! Find out if known vulnerable dependencies are making your apps insecure groups.google.com/forum/#!to…
2
77
2
75
Dave Wichers retweeted
There are many reasons to criticize Google, but some Google projects are pure goodness. Thank you Google for making us all safer. teapawt.net/benhawkes/status/87791…
In three years, Project Zero has helped fix over 1000 vulnerabilities: bugs.chromium.org/p/project-…
8
1
20
Microsoft releases emergency patch for 'crazy bad' Windows zero-day bug zd.net/2pfejGv #infosec #cybersecurity
1
6
3
Dave Wichers retweeted
BASIC computer language is 53 years old today. Retweet if BASIC was your first computer language? #ThisDayinSTEM bit.ly/2qxeFnU
610
15,585
3,438
6,545
Good thoughts from OWASP's @matt_tesauro on the OWASP T10 RC - owasp.blogspot.com/2017/05/o…
5
2
Dave Wichers retweeted
We recently shared a 3rd party study saying 37% of sites use vulnerable JS libs. Turns out the real number 2x worse. teapawt.net/snyksec/status/8471457…
We ran a test on the top 5k URL's from Alexa—77% of them use a JavaScript library with a known vulnerability! buff.ly/2o8dopM
Dave Wichers retweeted
Investigating a data breach with tens of millions of people in there. This is big - and real. – at Gold Coast, Queensland
19
72
9
123
Dave Wichers retweeted
Hat-tip to the GOOG for this effort opensource.googleblog.com/20…
1
48
1
39