@cossacklabs profile picture
Cossack Labs @cossacklabs

Cybersecurity, tailored for your mission

Joined January 2015
  • Tweets 1,890
  • Following 1,026
  • Followers 2,514
763 Photos and videos
Case study: A minor update of an analytics library caused a major security incident—user credentials were sent to a third-party backend. Learn how we found and fixed it: cossacklabs.com/blog/how-mob… #AppSecurity

How mobile app analytics library led to the PII exposure | Cossack Labs

Vulnerabilities in third-party libraries: Exploring a real-world case where an update in an analytics library exposed personal data. We’ll cover the entire journey from discovering the issue to...

cossacklabs.com
1
7
1,460
We’re pleased to share that today @vixentael is speaking at the @NATO #TIDESprint 43 in Helsinki. Check the Cyberspace track, where Anastasiia shares experience on protecting mission-critical systems and accelerating security decision-making.
2
16
1,367
Last week, we shared our experience in a cybersecurity workshop for defense tech companies organised by @BRAVE1ua. We covered topics from security fundamentals, like risk management and internal cybersecurity programs, to industry-specific technical challenges and approaches.
2
343
React Native is great for cross-platform apps, but their security can be a concern. In her recent article for @owasp, @julepka shares practical tips for assessing these apps, using #OWASP guidelines to identify common security risks. ➤‌‌ Read more: bit.ly/4e8AIc1
4
257
Meet Anton Shepeta at CocoaTalks meetup! If you are in Kyiv, don't miss Cossack Labs' Security Engineer, Anton Shepeta, discussing iOS reverse engineering tips & tricks at the CocoaTalks meetup on Tuesday, October 29. Thanks @macpaw for hosting! ➤‌‌ bit.ly/3YldHy0
2
269
Let’s focus on the Software Bill of Materials (#SBOM), its security and common problems. Can SBOMs be trusted to enhance supply chain security and vulnerability management? Are there reasons they cannot? ➤‌‌cossacklabs.com/blog/sbom-fr… 👈

SBOM from the security perspective | Cossack Labs

Despite being a potential approach for enhancing software supply chain security, SBOM’s own flaws and complexities in implementation may be holding back its goal to improve software transparency and...

cossacklabs.com
3
229
New release of Acra data security solution for databases and distributed apps. Enhanced MariaDB, MySQL, and PostgreSQL support. Simplified TLS config & optimised key management tools, updated Acra engineering examples. ➤‌‌ cossacklabs.com/news/product… 👈

Acra Community Edition 0.96.0: Improved user experience and database compatibility | Cossack Labs

New release of Acra — data security solution for databases and distributed apps — focuses on improving user experience and expands compatibility with MySQL, PostgreSQL, MariaDB.

cossacklabs.com
1
1
1
1,196
How to protect your #ML models on mobile apps and edge devices against leakage, abuse and reverse engineering? Guidelines and advice from @vixentael and Maksym Khanas: ➤‌‌ cossacklabs.com/blog/machine… 👈

Protecting ML models running on edge devices and mobile apps | Cossack Labs

ML model security is critical when models are run on edge devices or mobile apps. Our guide goes deep into the addressing security risks and threats of ML models.

cossacklabs.com
3
185
On Ukraine's Independence Day, we reflect on our ongoing efforts to strengthen Ukraine’s cyber resilience in critical national infrastructure, mission-critical systems, govtech solutions, unmanned robotic systems, and many more. ➤‌‌ cossacklabs.com/news/press-r… 👈

Enhancing Ukraine’s cyber resilience | Cossack Labs

On Ukraine’s Independence Day, we reflect on our ongoing efforts to strengthen Ukraine’s cyber resilience in critical national infrastructure, mission-critical systems, govtech solutions, unmanned...

cossacklabs.com
1
8
1,170
Introducing CL MSS: Mobile security verification framework for product security, assessments & SSDLC. Thanks to main contributors: @julepka, @vixentael, Anton Shepeta, @G1ggg1L3s #SSDLC #appsec ➤‌‌ cossacklabs.com/blog/cossack… 👈

Cossack Labs Mobile Security Score framework for mobile AppSec | Cossack Labs

Cossack Labs Mobile Security Score (CL MSS) is an application security framework for mobile applications. It focuses on risk-based requirements, continuous risk management, and measurable progress...

cossacklabs.com
2
7
1,020
Eugene Pilyankevich will join @aerorozvidka's 10th-anniversary stream and share details about UA DroneID. This technology improves the efficiency and security of deploying UAV and robotic systems during complex operations.
Aerorozvidka @aerorozvidka
10 Jul 2024
Розповідаємо про останній блок стріму - ROBOTIC SYSTEMS: 📍Чому ми вважаємо, що роботизовані системи - асиметрична відповідь ворогу 📍Проєкти напряму: DroneID, Група прототипування. 📍Майбутнє використання роботизованих систем: проблематика, перспективи, запит до спільноти
4
220
Cossack Labs is delighted to celebrate the 10th anniversary of our friend and ally @aerorozvidka, and to take part in the stream! Don't miss @vixentael talk on building security in mission-critical systems at youtube.com/@aerorozvidka

NGO Aerorozvidka

Air reconnaissance is a volunteer project to help the Ukrainian army. We aim to provide units of the State Border Guard Service of Ukraine and the Armed Forces of Ukraine operating in the anti-terr...

youtube.com
Aerorozvidka @aerorozvidka
4 Jul 2024
Сьогодні розповімо про блок C2IS: Що таке бойові інформаційні системи і чому це важливо? Які були передумови та виклики розробки системи ситуаційної обізнаності Дельта? Які виклики постали з початком повномасштабного вторгнення? Кібербезпека бойових інформаційних систем.
1
7
2,015
Cossack Labs retweeted
Software Testing Weekly 🚀 @QANewsletter
27 May 2024
Hey! 👋 The 221st issue is out! softwaretestingweekly.com/is… Congrats @jarbon, @semels, @GergelyOrosz, @MarkAHerschberg, @gil_zilberfeld, @joshin4colours, @ardjorganxhiu, @shivjirwankar, @cossacklabs, @GreenReportBlog, @dhh, @isabeliita90, @therunninglight and @Nikolay_A00! #SoftwareTesting #QA
3
8
14
2,122
Meet @vixentael at #DOU Day 2024! Don't miss Cossack Labs’ Head of Security Engineering @vixentaelʼs talk on building resilient mission-critical systems at DOU Day on May 18th.
DOU
 @doucommunity
13 Mar 2024
Спільното, раді нарешті анонсувати для вас теми спікерів на DOU Day. І почнемо з @vixentael, Head of Security Engineering, Security software engineer в Cossack Labs😎
2
12
1,793
Using security autotests for measurable and stable software security processes: Check our pre-built templates and learn how to implement them into the CI/CD pipeline. ➤‌‌ cossacklabs.com/blog/securit…👈

Security autotests for measurable and stable application security processes | Cossack Labs

Security automation contributes to measurable improvements: stable security processes and efficient assessments that save time and effort. Security-focused pre-built templates covering prevalent...

cossacklabs.com
2
5
1,418
Cossack Labs is proud to collaborate with @mintsyfra, @DefenceU & @aerorozvidka to develop UA DroneID: This innovative technology enables the protection of mission-critical assets and increases the efficiency of UAVs and unmanned robotic systems usage.
3
16
1,590
We are proud of our Lead Security Engineer, @julepka who is a director at @wwcodekyiv, for fostering professional development of the women's community in IT and co-organising the "Inspire & Connect" conference.
1
7
452
Deal with #OAuth2? Get savvy on OAuth2 mechanics, PKCE implementation, CSRF protection, and auto security checks to avoid common pitfalls. A detailed guide to OAuth2 security is here: ➤‌‌ cossacklabs.com/blog/practic… 👈

Practical OAuth security guide for mobile applications | Cossack Labs

How to implement OAuth in the context of mobile applications while avoiding security pitfalls? Practical steps on fortifying OAuth flow with PKCE, state parameter, managing secure redirections, and...

cossacklabs.com
1
2
261
Our Head of Security Engineering @vixentael shared unique expertise on building security for mission-critical apps and critical infrastructure at #NATO #TIDESprint 2024, Data Centric Security and Cybersecurity tracks.
5
318
Opportunity to meet @vixentael at #NATO #TideSprint 2024 event held by @NATO_ACT. Don't miss Head of Security Engineering @vixentaelʼs talk about building secure architecture for mission-critical applications within the Data Centric Security track.
NATO ACT
 @NATO_ACT
19 Mar 2024
#TIDESprint'24: Advancing Interoperability! @NATO’s leading think-tank arena aims at fostering advancements & innovations that rapidly evolve concepts and specifications to design more interoperable partnership between #NATO & Partner Nations. 📌act.nato.int/article/tide-sp… #WeAreNATO
1:39
1
11
1,946
Load more