Lewis Ardern

The next SecuriTEA & Crumpets is out! Check out my chat with @Primed_Mover where we talk about Egress Filtering in AWS, his academic work, and #supplychain security #infosec #appsec

RT @julianor: 🥦 CVE-2026-111497: Don't expect every vendor to announce exposure (especially when dynamically linked) Update Brotli across ALL your containers. This bug provides powerful memory overwrite and memroy layout leak primitives. New affected products are identified every day.

RT @leifdreizler: Malicious Python and JavaScript deps have dominated this year's supply chain news cycle, but how many of y'all still have pinning GitHub Actions on your to do list? Here’s how I did this org-wide at Semgrep.

RT @btphantomlabs: Breaking: Newly uncovered OpenAI Codex vuln enables command injection via GitHub branch names in task creation requests. Attackers could steal GitHub user access tokens & sensitive data. Full breakdown by Tyler Jespersen: #OpenAI #BTPhantomLabs

RT @semgrep: 🍹 Security meets social at our Security Speakeasy! Network with top industry pros and enjoy a great evening hosted by Semgrep, JIT, and @OligoSecurity. 📅 Mark your calendar for September 25th, 7-10 PM at Local Edition. #appsec #owaspglobalappsec

RT @leifdreizler: I just published my yearly blog! It's about preparing for performance reviews and tracking career growth year round 📈

RT @kmcquade3: Ready for launch 🚀 I'm so excited to share with the world what we're doing at @Nightvision_inc to identify exploitable vulnerabilities earlier in the SDLC 🧵 Yes, we made DAST that doesn't suck. Relevant YouTube interview from RSA:

The fact @ThePrimeagen latest video was exactly 420 is amazing. Excited to see you continue to crush it

RT @Variety: Apple TV+ has ordered a series adaptation of the William Gibson novel “Neuromancer.” The 10-episode series hails from co-creators Graham Roland and JD Dillard. Roland will also serve as showrunner, while Dillard will direct the pilot.

RT @MrBeast: I’m gonna give 10 random people that repost this and follow me $25,000 for fun (the $250,000 my X video made) I’ll pick the winners in 72 hours

Won’t be on the market for long, if you are hiring reach out

RT @onefiftyman: After a long coming, and many months of work behind the scenes, I have finally made my functional programming lectures from this summer at CMU available for free online. I truly hope it helps people.

RT @0xDC0DE: I am excited to speak again at the OWASP BeNeLux days! I spoke there two years ago when I just graduated my PhD. It is a fun conference with many great people to meet. See you all in Hasselt! #owasp #benelux #securedefaults

RT @theRaz0r: Received some swag and lovely message from @semgrep, thank you @LewisArdern @0xDC0DE!

+1 its where I met @5uggy and gave one of my first presentations

The rookie track is indeed legendary.

RT @Tomycardy: Perception check

Anyone would be lucky to have Enno on their team! If you are hiring you should reach out to them #infosec #appsec

RT @trailofbits: We're open sourcing new Semgrep rules to detect CSRF and CORS misconfigurations in Apollo GraphQL. Check out how we used Semgrep's taint mode to make the rules more accurate and easier to write.

RT @0xDC0DE: @BSidesMunich 👜 Bring your own code and I will help you write Semgrep rules, live at the workshop! ✍ Sign up for my workshop on October 14 if you are interested.

🐦 ☠️ ❌

RT @nfFrenchie: 🚀 I'm Hiring: Founding Engineer! Huge problem space, exciting tech, opportunity for huge ownership of the solution. #golang, Software Supply Chain, #k8s, #SBOM & #SLSA More info here: #BuildTrustedSoftware