Sign in

kingthorin_rm

@kingthorin.bsky.social
949 followers 119 following 395 posts

IT Sec guy, zaproxy co-lead, WSTG co-lead, VWAD co-lead, OWASP Ottawa volunteer, Hac≺3r, supporter of oxford commas, #INTJ. (Opinions == mine) 🍁

PostsRepliesMedia
Reposted by kingthorin_rm
OWASP Juice Shop @owasp-juice.shop · 28/09/2026
Official #JuiceShop introduction & hacking workshop with @bkimminich.bsky.social coming to Chennai 🇮🇳 on Oct 24th 2026: lnkd.in/p/ej9D2XAY Kindly co-organized by @owasp.org Chennai and Sri Sairam Chapters! 🙏 Registrations opening 🔜! Crossposted with @openvibe.social
064
Reposted by kingthorin_rm
SANS.edu Internet Storm Center @sansisc.bsky.social · 27/09/2026
Wireshark 4.6.9 Released isc.sans.edu/diary/33372
011
Reposted by kingthorin_rm
Jeroen @commjoenie.bsky.social · 22/09/2026
We released a new version of #OWASP #Wrongsecrets ! With devcontainer and AI related challenges. Try it out at www.wrongsecrets.com and give the repo a ⭐️ if you like it!
wrongsecrets.com
OWASP WrongSecrets
066
Reposted by kingthorin_rm
Julia Evans @b0rk.jvns.ca · 22/09/2026
periodic reminder that Wizard Zines has an educational use policy if you want to use them in your university courses! wizardzines.com/education/
14517
Reposted by kingthorin_rm
disclose.io @disclose.io · 12/09/2026
dnssecuritytxt census, Sep 7: 216 domains publish a security contact in DNS, net +20. New: one.com + 19 more group.one brands (incl. WP Rocket, Imagify), @defcon.bsky.social's defcon.social, Concordia Univ. of Edmonton, Skatteverket, Steno (legal tech). One TXT record: dnssecuritytxt.org
034
Reposted by kingthorin_rm
ZAP by Checkmarx @zaproxy.org · 15/09/2026
The latest weekly release does not include the AJAX Spider and DOM XSS add-ons. You can install them via the Marketplace as usual, but we recommend you using the Client Spider and OWASP PTK add-ons instead. For more details see www.zaproxy.org/blog/2026-09... #zaproxy #appsec
zaproxy.org
ZAP Updates - August 2026
We’re retiring the AJAX Spider and DOM XSS add-ons from the nightly and weekly releases, and the new LLM Support add-on officially launched in August.
052
Reposted by kingthorin_rm
OWASP London Chapter @owasplondon.bsky.social · 13/09/2026
The next OWASP London Chapter meetup [IN-PERSON] will take place on September 28th 2026 at 6pm. Talks from Chris Holman and Glyn Wintle. This event is kindly hosted by @Civo tech Junction and kindly sponsored by @aikidosecurity.bsky.social Register to attend here: 👇
eventbrite.co.uk
OWASP London Chapter meetup [IN-PERSON]
Join us to learn from expert speakers, network with like-minded professionals and stay ahead in the ever-evolving world of Cyber Security
022
Reposted by kingthorin_rm
OWASP Ottawa @owaspottawa.bsky.social · 13/09/2026
🚨 #OWASP #Ottawa September 2026 #Meetup with Katie McMillan and Robert Babaev 🚨 Open Source Software is Federally Included in Canada with Katie McMillan -and- Can You Not? How to Avoid Destroying Prod with Agent Permissions with Robert Babaev #Cybersecurity #InfoSec #AppSec #Tech
meetup.com
OWASP Ottawa September 16th, 2026 with Katie McMillan and Robert Babaev, Wed, Sep 16, 2026, 6:00 PM | Meetup
* **Note: Our Meetup page may be removed soon due to platform changes at OWASP. For the most up-to-date** **information on OWASP Ottawa events, resources, and announcements
112
Reposted by kingthorin_rm
OWASP Ottawa @owaspottawa.bsky.social · 11/09/2026
🚨 OWASP Ottawa September 2026 Meetup with Katie McMillan and Robert Babaev 🚨 Open Source Software is Federally Included in Canada with Katie McMillan -and- Can You Not? How to Avoid Destroying Prod with Agent Permissions with Robert Babaev #OWASP #Ottawa #Cybersecurity #InfoSec #AppSec #Tech
meetup.com
OWASP Ottawa September 16th, 2026 with Katie McMillan and Robert Babaev, Wed, Sep 16, 2026, 6:00 PM | Meetup
* **Note: Our Meetup page may be removed soon due to platform changes at OWASP. For the most up-to-date** **information on OWASP Ottawa events, resources, and announcements
023
Reposted by kingthorin_rm
Uncle Joe @sydseter.com · 12/09/2026
OWASP Cornucopia just released v3.5.3 (github.com/OWASP/cornuc...) A Special thanks to Prajakta G Kamble, Ayman Algamal, Swaraj Singh, and Adarsh Kumar for all the bug fixes. Cornucopia is getting more secure and stable than ever! #cornucopia #appsec #security #mobile #games
github.com
Release v3.5.3 · OWASP/cornucopia
What's Changed build(deps-dev): bump globals from 17.11.0 to 17.12.0 in /cornucopia.owasp.org by @dependabot[bot] in #3460 build(deps-dev): bump wrangler from 4.127.1 to 4.129.1 in /cornucopia.owa...
143
Reposted by kingthorin_rm
Liran Tal @lirantal.com · 11/09/2026
We have been working on the OWASP MCP Security Taxonomy - an open, vendor-neutral framework designed to create a common language for MCP security risks, weaknesses, attack patterns, controls, detections, and test cases: github.com/OWASP/MCP-Ta... Go check it out and give feedback
github.com
GitHub - OWASP/MCP-Taxonomy: OWASP MCP Taxonomy
OWASP MCP Taxonomy. Contribute to OWASP/MCP-Taxonomy development by creating an account on GitHub.
2116
Reposted by kingthorin_rm
OWASP Ottawa @owaspottawa.bsky.social · 09/09/2026
Save the date: Saturday October 17th. #OWASP #Ottawa is pleased to announce a day of learning, community, and mentorship to celebrate the 25th Anniversary of the OWASP Foundation and the OWASP Ottawa Chapter’s selection of one of the top chapters in a constellation of over 130 Chapters. #Cyber
122
Reposted by kingthorin_rm
ZAP by Checkmarx @zaproxy.org · 08/09/2026
ZAP updates for August. We’re removing 2 add-ons from the nightly and weekly releases, so if you use those then make sure you read it to understand the implications. www.zaproxy.org/blog/2026-09... #zaproxy #appsec
zaproxy.org
ZAP Updates - August 2026
We’re retiring the AJAX Spider and DOM XSS add-ons from the nightly and weekly releases, and the new LLM Support add-on officially launched in August.
043
kingthorin_rm @kingthorin.bsky.social · 27/08/2026
vwad.owasp.org now supports shareable search/filter 🔍 links 🔗 for both Basic and Advanced search, making it easier for people to share with teams or friends. #OWASP #AppSec #BugBounty #CTF
053
Reposted by kingthorin_rm
Firefox @firefox.com · 21/08/2026
A fingerprinting script from Alibaba’s AliExpress was invasive enough someone noticed when it interrupted their headphone's bluetooth connection. In response, one of our team wrote up how Firefox has largely eliminated WebAudio fingerprinting 👇 ritter.vg/blog-webaudi...
ritter.vg
webaudio fingerprinting on alibaba - ritter.vg
Tom Ritter's personal homepage, where he rambles about tech-related topics.
315328
kingthorin_rm @kingthorin.bsky.social · 16/08/2026
Love this 👍⭐️, but it’s terribly pathetic that it is necessary 😔
010
Reposted by kingthorin_rm
Greg Jericho @grogsgamut.bsky.social · 16/08/2026
Happy 10 year anniversary of the best mic drop on Twitter. Hard to believe it’s been so long! Congrats @astrokatie.com

Katie Mack @AstroKatie
16h
Honestly climate change scares the heck out of me and it makes me so sad to see what we're losing because of it.

Gary P Jackson (RAT) @gary4205
@AstroKatie Maybe you should learn some actual SCIENCE then, and stop listening to the criminals pushing the #GlobalWarming SCAM!

Katie Mack @AstroKatie
@gary4205 | dunno, man, I already went and got a PhD in astrophysics.
Seems like more than that would be overkill at this point.
121121292062
kingthorin_rm @kingthorin.bsky.social · 11/08/2026
@github.com @gitforwindows.org Why don't these both have -v or both have "list" ⁇ git stash list git branch -v Be consistent, be-e consistent!!!!!
static.klipy.com
Consistency Consistent
ALT: Consistency Consistent
100
Reposted by kingthorin_rm
OWASP Juice Shop @owasp-juice.shop · 11/08/2026
v20.2.0 is here! github.com/juice-shop/j... 🆕: 3 IaC challenges, Angular 22, TypeScript 6, several unintended RCEs fixed, streamlined packaging process, and a lot of small improvements under the hood! Crossposted with @openvibe.social
github.com
Release v20.2.0 · juice-shop/juice-shop · GitHub
🅰️ Frontend Updated frontend to Angular 22.x and Angular Material 22.x Updated TypeScript to 6.0.x Updated angular-eslint to 22.x Switched QR code library from ng-qrcode to angularx-qrcode 2734b6a...
0108
Reposted by kingthorin_rm
Uncle Joe @sydseter.com · 06/08/2026
OWASP Cornucopia just released v3.4.5 A Special thanks to Prajakta G Kamble, Adarsh Kumar and Khushal Malhotra for all the bug fixes. Cornucpia is now more secure and stable than ever! Did you know that OWASP Cornucopia v3 now comes with EoP and PHANTOM-B? #ai #games #security #threatmodeling
dev.to
OWASP Cornucopia v3 with EoP and PHANTOM-B
We’re thrilled to bring you OWASP Cornucopia v3.4 with an update that expands how we identify...
185
kingthorin_rm @kingthorin.bsky.social · 07/08/2026
What's this? @zaproxy.org fuzzer update released this morning, with work from yours truly. #PenTest #WebAppSec #BugBountyTips
063
kingthorin_rm @kingthorin.bsky.social · 07/08/2026
Good morning world!
020
Reposted by kingthorin_rm
ZAP by Checkmarx @zaproxy.org · 06/08/2026
www.zaproxy.org/blog/2026-08... - a huge increase in the number of times ZAP was started, and we now recommend using the Client Spider instead of the AJAX Spider #zaproxy #appsec
zaproxy.org
ZAP Updates - July 2026
ZAP was started more than 13 million times in July, another big jump, and the Client Spider officially became our recommended option for crawling modern web apps.
033
kingthorin_rm @kingthorin.bsky.social · 06/08/2026
Crazy Wolf Spider 🕷️ Glad my daughter saw it as she was exiting the park outhouse 😁 #spider #NatureIsCool
000
Reposted by kingthorin_rm
Michelle says: Be kind. Always. ❤️ @snarkysillysad.bsky.social · 01/08/2026
Scientists of the Nautilus research ship capture a Big Fin Squid on camera, at 5454m (17’800 ft) depth. This was their live reaction: 🔊 #AGoodPlace
281070268
kingthorin_rm @kingthorin.bsky.social · 01/08/2026
Why are we our own worst enemies. Why can’t our self talk always be nice things or things we wanna hear. Gawd damn my brain is busy today 😔 #MentalMealthMatters #MensMentalHealth
010
Reposted by kingthorin_rm
Firefox @firefox.com · 01/08/2026
The internet's better when it's open. Proof: this post 🔥
213118
Reposted by kingthorin_rm
Unsloth AI @unsloth.ai · 29/07/2026
Kimi K3 can now be run locally! ✨ The 1-bit model retains ~78.9% accuracy after we shrunk it from 1.56TB to 594GB (-62% size). Run on a Mac Studio + 128GB RAM device. Kimi K3 is the strongest open model to date. Guide: unsloth.ai/docs/models/... GGUF: huggingface.co/unsloth/Kimi...
21009
kingthorin_rm @kingthorin.bsky.social · 28/07/2026
I totally ripped this off from someone on X, it resonates with me so I’m reposting it. #YayNaps
021
kingthorin_rm @kingthorin.bsky.social · 23/07/2026
Wow German break through in #QuantumComputing #geek www.hpcwire.com/off-the-wire...
hpcwire.com
SAXON Q Brings Room-Temperature Diamond Quantum Computing to Commercial Market - HPCwire
LEIPZIG, Germany, July 21, 2026 — SAXON Q, a pioneer in diamond-based nitrogen-vacancy (NV) quantum computing, today announced the commercial availability of the 128-qubit SXQ128 and 512-qubit SXQ512 ...
010
Reposted by kingthorin_rm
Uncle Joe @sydseter.com · 16/07/2026
OWASP Cornucopia just released v3.3.1 github.com/OWASP/cornuc... A Special thanks to Mayur Agnihotri for adding AISVS v1 “High-Impact Action Approval and Irreversibility Controls” and to Adarsh Kumar for continuing pushing out bug fixes. You both rock! #appsec #security #aisvs #owasp #ai #agentic
github.com
Release Release v3.3.1 · OWASP/cornucopia
What's Changed build(deps-dev): bump svelte-check from 4.7.2 to 4.7.3 in /cornucopia.owasp.org by @dependabot[bot] in #3232 build(deps): bump filelock from 3.29.7 to 3.30.0 by @dependabot[bot] in ...
273
Reposted by kingthorin_rm
OWASP® Foundation @owasp.org · 15/07/2026
OWASP Dependency-Track 5.0 is GA, built for enterprise scale: early adopters ingested 20K+ SBOMs/hour with single instances holding 250K+ projects and 2M+ components. Now with horizontal scaling, fault tolerance, and supply chain integrity checks. dependencytrack.org/ #OWASP #SBOM #AppSec
163
Reposted by kingthorin_rm
AlternativeTo @alternativeto.net · 10/07/2026
Rust 1.97 has been released, introducing a new symbol mangling scheme enabled by default, improved Cargo warning controls, linker output no longer hidden by default, several stabilized APIs, and other enhancements. alternativeto.net/news/2026/7...
A stylized black "Rust" logo with a gear motif sits against a soft gradient background featuring pastel colors.
081
kingthorin_rm @kingthorin.bsky.social · 03/07/2026
Someone thinks I should be sharing my lunch 🥗 🙄 #PetTax #GoldenDoodle
010
Reposted by kingthorin_rm
AlternativeTo @alternativeto.net · 01/07/2026
Google introduced Nano Banana 2 Lite, its newest image model for faster, cheaper image generation, and launched Gemini Omni Flash, a new generative video model in public preview for developers and users alternativeto.net/news/2026/7...
A close-up of a colorful spider on a web, blurred background with droplets, highlighting the title "Nano Banana 2 Lite."
031
kingthorin_rm @kingthorin.bsky.social · 01/07/2026
Happy Canada Day !!!! 🇨🇦🇨🇦🇨🇦 #canada
010
Reposted by kingthorin_rm
OWASP® Foundation @owasp.org · 01/07/2026
Missed out on #OWASP swag in Vienna? No worries, CyberSecGames has you covered! 🎉 The new OWASP Online Swag Store is LIVE! 🛍️ Get your favorite OWASP gear delivered straight to your door, and stay tuned for even more products coming soon! 👀 cybersecgames.com/pa... #OWASPSwag #CyberSecGames
032
kingthorin_rm @kingthorin.bsky.social · 01/07/2026
June was a busy month for the ZAP team, check it out:
021
kingthorin_rm @kingthorin.bsky.social · 26/06/2026
This might be of interest to people that know me: opensource.org/blog/open-so...
opensource.org
Open Source AI Fellowship Announced at UN Open Source Week
The OSI is pleased to announce the launch of the Open Source AI Fellowship at UN Open Source Week.
001
kingthorin_rm @kingthorin.bsky.social · 25/06/2026
#FullDisclosure from the ZAP team
000
Reposted by kingthorin_rm
Firefox @firefox.com · 16/06/2026
The internet is getting weirder...so we're getting better. This year we added a free built-in VPN, AI features you can enable or block, split view, and more privacy tools. And we’re not done yet. Coming soon: a cleaner, more modern Firefox with new ways to make it your own. mzl.la/fxwhatsnext
mzl.la
See what's next for Firefox
See and shape what’s next for Firefox.
2519328
kingthorin_rm @kingthorin.bsky.social · 11/06/2026
#slack can someone explain this to me? I really expected something like 🤪, not a goose.
000
Reposted by kingthorin_rm
OWASP® Foundation @owasp.org · 09/06/2026
OWASP Dependency-Track 5.0 is GA, built for enterprise scale: early adopters ingested 20K+ SBOMs/hour with single instances holding 250K+ projects and 2M+ components. Now with horizontal scaling, fault tolerance, and supply chain integrity checks. dependencytrack.org/ #OWASP #SBOM #AppSec
295
Reposted by kingthorin_rm
ZAP by Checkmarx @zaproxy.org · 05/06/2026
ZAP now has a dedicated PTK active scan rule, so you can run the PTK rules in the ZAP active scanner. Check out the dramatic improvement in the scores vs Google Firing Range! www.zaproxy.org/blog/2026-06... #zaproxy #owaspptk #appsec
zaproxy.org
Automating OWASP PTK with ZAP (Phase 2)
ZAP now has a dedicated PTK active scan rule, so you can run the PTK rules in the ZAP active scanner. And there are still more changes planned, but the results against Firing Range have been dramatic!
064
Reposted by kingthorin_rm
Mozilla @mozilla.org · 05/06/2026
1/2 Canada just did something big: put openness at the heart of its national AI strategy. Canada is choosing a future where AI is something citizens can govern, own and benefit from. 2/2 We’re proud to be partnering with organizations like @Mila_Quebec to help make that vision real.
2233
Reposted by kingthorin_rm
AlternativeTo @alternativeto.net · 04/06/2026
Google launches the new open-source Gemma 4 12B, a 12 billion parameter multimodal AI model designed to run locally on standard laptops with 16 GB of RAM. It handles text, images, and audio more efficiently with native multimodal processing alternativeto.net/news/2026/6...
Gemma 4 12B is highlighted, showcasing its capabilities as a unified transformer for multimodal processing in AI.
092
Reposted by kingthorin_rm
ZAP by Checkmarx @zaproxy.org · 02/06/2026
In May ZAP learned to scan MCP servers as a first-class target, OWASP PTK automation reached Phase 1, and the Params extension moved out of the core into its own add-on. www.zaproxy.org/blog/2026-06... #zaproxy #appsec
zaproxy.org
ZAP Updates - May 2026
In May ZAP learned to scan MCP servers as a first-class target, OWASP PTK automation reached Phase 1, and the Params extension moved out of the core into its own add-on.
043
Reposted by kingthorin_rm
Gander Social @gandersocial.ca · 01/06/2026
Building better social media also means making it more accessible. We’re working with people in our community who use assistive technologies to help improve the Gander experience and make it more usable for all. Interested in participating? gandersocial.ca/blog... #NationalAccessibilityWeek
White text reading “Social should work for everyone.” centred on a solid red background.
33314
Reposted by kingthorin_rm
Elizabeth Jacobs, PhD @elizabethjacobs.bsky.social · 30/05/2026
During the first 3 months of the Texas measles outbreak last year, almost 1 in 5 cases were hospitalized, and “all were unvaccinated or had unknown vaccination status”. Anti-vaxxers focus on death as the only endpoint that matters. Tell that to the families who’ve had a child hospitalized.
cdc.gov
Characteristics of Patients Hospitalized with Measles ...
This report describes characteristics of patients who were hospitalized during a large measles outbreak in west Texas.
515059
Reposted by kingthorin_rm
Tanya Janca | SheHacksPurple @shehackspurple.bsky.social · 29/05/2026
Yesterday, petition e-7115 was officially presented in the House of Commons of Canada by MP Jeff Kibble 🇨🇦! This means the call for secure coding standards across the Government of Canada is now part of the official parliamentary record. Security was discussed in parliament. This is HUGE. 1/2
274