GitHub Security Lab

🚀 ¡Nuevo Keynote confirmado para #DevOpsDaysLima2026! Cuando el código abierto que usa medio mundo empieza a ser generado por IA, la pregunta ya no es si hay riesgos. La pregunta es quién los está resolviendo. 🎤 Nos enorgullece anunciar que Xavier René-Corail de GitHub, llega a Lima como Keynote Speaker de esta nueva edición. Referente mundial en seguridad y open source, lidera el trabajo del GitHub Security Lab asegurando el código del que depende gran parte de la infraestructura tecnológica global. Su charla: "𝗢𝗽𝗲𝗻 𝘀𝗼𝘂𝗿𝗰𝗲 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻 𝘁𝗵𝗲 𝗔𝗜 𝗲𝗿𝗮" Una sesión donde compartirá las lecciones aprendidas protegiendo código abierto a escala, cómo están enfrentando los ataques a la cadena de suministro y qué significa asegurar código cuando parte de ese código ya no lo escribe un humano. ¿Es la IA el fin del open source o la oportunidad de asegurarlo mejor que nunca? Ven y decide tú mismo. 👀 Una charla imprescindible para quienes quieren proteger su software en esta nueva era. 📅 27 y 28 de agosto de 2026 📍 Centro de Convenciones de Lima - LCC 🎟️ Asegura tu entrada 👉 https://lnkd.in/eetV4ME7 Dos días de charlas, networking y aprendizaje junto a speakers nacionales e internacionales, comunidades tech y líderes que están marcando el rumbo del DevOps en la región. 🌎 🙌 No te quedes fuera. La comunidad te espera. #DevOpsDaysLima2026 #DevOps #DevOpsLATAM #OpenSource #DevSecOps #SupplyChainSecurity #ComunidadDevOps #GitHub

Attending BSides Vilnius? Don't miss 📌 Jaroslav Lobačevski 's session "LLM-assisted vulnerability hunting: hype vs. reality" to hear about the practical experience of using LLM agents for finding, triaging and reporting vulnerabilities in open-source software such as Signal or 7-Zip! 📅 June 4, 16:45 EEST 📍 Vilnius, Lithuania 👉 https://bsidesvilnius.lt/

Who's at DevTalks? Join Joseph Katsioloudes and discover practical ways to use AI for security through 12 GitHub Copilot demos from secure coding, to informed supply chain decisions, and secure SDLC. 📅 June 4, 14:00 EEST 📍 Bucharest, Romania 👉 https://www.devtalks.ro/

Attending AI DevCon? Join Joseph Katsioloudes and discover practical ways to use AI for security through 12 GitHub Copilot demos from secure coding, to informed supply chain decisions, and secure SDLC. 📅 June 1, 10:00 AM BST 📍 London, UK & Virtual 👉 https://lnkd.in/eAC_-9e5

Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. Read more at https://lnkd.in/dJhz4DaR

📦 Security Track Spotlight: 👉Join Shelby Cunningham & Madison Oliver Ficorilli at #PyConUS 2026 for “Breaking Bad (Packages)” and learn why traditional vulnerability tracking struggles with supply chain attacks and what better approaches look like. https://lnkd.in/gvVEvEKA #security

Your mother tongue is the new programing language for creating exploits. For maintainer month, we took inspiration from #OpenClaw and built ProdBot! An intentionally vulnerable agent wired up with MCPs, skills, agentic workflows, and multi-agent capabilities. You will learn from it, while having fun! It runs in Codespaces, straight from your browser, in under two minutes. Play now at: gh.io/secure-code-game Learn more: https://lnkd.in/gacyENSm

On 25th April at 10AM, join Sylwia Budzynska for the workshop "Introduction to security research. Find a CVE with CodeQL" at the Linux Session organized by Akademickie Stowarzyszenie Informatyczne in Wroclaw, Poland! Learn security research and static analysis fundamentals when looking for vulnerabilities in software. Using an example CVE we’ll walk through how we could find the CVE, how CodeQL would detect it, and write a CodeQL query to find similar variants of the vulnerability at scale. Check out more information on the conference's website: https://linuksowa.pl/

Building with AI? 🤖 Then you won’t want to miss tomorrow’s Devoxx France 🏢 workshop with Xavier René-Corail and Joseph Katsioloudes — all about how to build robust AI-powered applications. Shall we play a Game? LLM Security in Practice https://lnkd.in/grbXk8dQ 📍 Paris 142 - Palais des Congrès, Porte Maillot, Paris 🗓️ April 22, 10.30am CET