Pinned Tweet
**Not everything needs to be a damn AI agent.**
There. I said it. And I will keep saying it.
Warning: hot takes ahead.
Recently, I was teaching a secure AI class, and one of my students was telling me about an AI agent they were building.
1/16
There. I said it. And I will keep saying it.
Warning: hot takes ahead.
Recently, I was teaching a secure AI class, and one of my students was telling me about an AI agent they were building.
1/16
7
5
52
5,138
You can write perfectly secure application code and STILL end up with a critical security vulnerability.
That's one of the most important lessons from PHP2Shell, and it's a perfect example of why **software supply chain security** matters so much.
1/8
That's one of the most important lessons from PHP2Shell, and it's a perfect example of why **software supply chain security** matters so much.
1/8
4
1
4
683
For example, updating a container base image in your repository doesn't mean your running application has been fixed. You still need to rebuild, redeploy, and verify.
I made a video explaining the recent PHP2Shell vulnerabilities and what developers need to know.
7/8
I made a video explaining the recent PHP2Shell vulnerabilities and what developers need to know.
7/8
1
0
1
139
🎥 twp.ai/E5Guxq
**Secure coding is essential. But securing the entire software supply chain is essential too.**
#SoftwareSupplyChainSecurity #AppSec #SecureCoding #PHP
8/8
**Secure coding is essential. But securing the entire software supply chain is essential too.**
#SoftwareSupplyChainSecurity #AppSec #SecureCoding #PHP
8/8
0
0
1
234
🎉 **GOOD NEWS for twp.ai/IlvwD3 users! You're protected against PHP2Shell!**
Yesterday, two critical vulnerabilities were disclosed in PHP, the programming language that powers WordPress.
And understandably, a LOT of website owners are worried!
1/8
Yesterday, two critical vulnerabilities were disclosed in PHP, the programming language that powers WordPress.
And understandably, a LOT of website owners are worried!
1/8
1
0
7
956
And a big thank you to the twp.ai/1VmZrK5 and PHP security teams for working together to protect users before the public disclosure!
**Please share this with anyone you know who runs a WordPress website.** They may be wondering whether they're affected!
7/8
**Please share this with anyone you know who runs a WordPress website.** They may be wondering whether they're affected!
7/8
1
0
0
204
👑 I asked Claude to build me an app that would call me Queen every morning.
What could possibly go wrong?
Well...
I wanted a cute little application that would greet me, give me a compliment, and share an inspirational quote.
1/5
What could possibly go wrong?
Well...
I wanted a cute little application that would greet me, give me a compliment, and share an inspirational quote.
1/5
1
0
11
886
🎧 Season 2, Episode 2: What Can Your AI Agent Actually Do?
We're talking about the difference between what we ASK an AI agent to do and what we actually give it the POWER to do.
Because those are two very different things.
🎥 Watch on YouTube: twp.ai/E5GXjf
4/5
We're talking about the difference between what we ASK an AI agent to do and what we actually give it the POWER to do.
Because those are two very different things.
🎥 Watch on YouTube: twp.ai/E5GXjf
4/5
1
0
3
203
Prefer audio? Find DevSec Station wherever you listen to podcasts. Follow or subscribe so you don't miss the rest of Season 2!
#DevSecStation #AISecurity #AppSec #AIAgents
5/5
#DevSecStation #AISecurity #AppSec #AIAgents
5/5
0
0
2
127