Principal Security Architect & Partner at https://xitter.cf/t.co/yIU71SfS40, CloudSec Researcher. Find me at bsky

Oslo, Norway
Joined August 2012
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @eriktorenberg
Done my research and decided to sign up for it. Thank you for sharing this
13
Every supply-chain attack affecting the npm ecosystem, the most common apps I find vulnerable are the vibe-coded ones due to lack of version pinning.. If @Cursor and other coding platforms make pinning the default, we'll see less runtime environments affected.
1
2
142
First P1 achieved, unfortunately a duplicate.
2
159
Karim El-Melhaoui retweeted
Shai-Hulud 2.0, a tale of 4 graphs: many numbers have made the news in regards to this story - such as 800 compromised packages - but visualizing the data clearly shows the potential impact of hijacking even a small set of key packages (in terms of prevalence or dependents):
1
9
24
2,436
Karim El-Melhaoui retweeted
🚨 New Shai-Hulud-style npm attack hitting 25k+ repos and growing fast. Devs & CI/CD exposed via malicious preinstall. Wiz Research has detection + mitigation. Details: wiz.io/blog/shai-hulud-2-0-o…
4
45
8
89
83,280
Replying to @gauravphoenix
Not an investment analysis but since you mention a Norwegian company: There’s declining interest rates affecting mortgage yield of Norwegian banks, they’ve had a historically good yield. There’s also the competitive landscape with Sparebank 1 SMN which is strong in the region
1
1
62
Karim El-Melhaoui retweeted
The schedule for fwd:cloudsec Europe is out, with a single track of high-quality talks over 2 days, along with “Birds of a Feather” interactive sessions! fwdcloudsec.org/conference/e… Some sponsorship opportunities are still available
3
1
14
1,544
Another year in the books as a Microsoft MVP🎉
2
129
I’m left wondering how many unpaid AWS bills are related to this.
Credit Card Update! After 14 weeks, the program to audit unused/unneeded credit cards has expanded to 55 agencies resulting in ~610k de-activated cards. As a reminder, at the start of the audit, there were ~4.6M active cards/accounts; more work to do!
1
339
Replying to @0xdabbad00
That’s a solid one!
1
137
Front row seat on @paulschwarzen session presenting OWASP Domain Protect at @AppSecEU 👏
1
156
Reminder that the fwd:cloudsec Europe 2025 Call for Papers is open! First time speakers who requested feedback by May 30th and meet the submission criteria will receive feedback on how to improve during the second round. For more: fwdcloudsec.org/conference/e…
6
10
1,447
What happens if a lambda that puts an event to an S3 triggers on the same S3… I can’t afford to find out
1
191
Replying to @CraigHRowland
Interested in reading your research, where may I find it?
182