Chris Wysopal
Co-founder/Chief Security Evangelist Veracode. Former L0pht security researcher. Builds tools to find vulnerabilities in code at scale. Twitter: @weldpond
“Secure by design” is shifting from vision to standard. I note progress: >50% of apps now pass OWASP Top 10 checks (up from <33% in 2020) and exploitable flaws dropped from 3.6% to 2.6%. But 70% of apps still have major flaws—true success means making security part of every build, not an afterthought. https://www.forbes.com/councils/forbestechcouncil/2025/11/10/advancing-secure-by-design-from-ambition-to-industry-standard/
.@recon@infosec.exchange has been on my "must go" list for a long time and in 2024 I will finally get to participate for the first time in this great conference. Come to Montreal in June!
I will be on @criscifuentes decompilation panel. #ilovebinaries
New Executive Order to drop after SOTU. Finally! MFA for users interacting with federal government accounts.
"The Digital Theft EO is a directive that seeks to introduce new measures to prevent and detect identity theft involving public benefits" https://fedscoop.com/digital-theft-eo-to-follow-sou/
