Michele Spagnuolo

Happy to publish the effort of my last five years: Security Signals. research.google/pubs/securit...

Excited to present Security Signals with @ddworken.bsky.social and @webappsec.dev, my primary project at Google for the past five years. Thanks, @madwebwork.bsky.social! Paper: research.google/pubs/securit... Slides: speakerdeck.com/mikispag/sec...

One of the best tools I've seen to convert between various encodings. Thanks @miki.it for suggesting it. gchq.github.io/CyberChef/

I'm in the process of creating a *web security* starter pack and need your help finding more webbies here. Please share and recommend folks passionate about web security in comments below so we can get this community started here 🙂 go.bsky.app/Uf8dZhz

1/ X's algorithm was changed in mid-July 2024 to systematically boost Republican-leaning accounts and Elon Musk's own account following his endorsement of Donald Trump, according to a newly released computational study of engagement from the Queensland University of Technology.⬇️

XSS vulnerabilities keeping you up at night? 😱 Google's new "Commitment to Secure by Design" whitepaper has answers! Safe Coding and web platform improvements are key. Read more (page 7): static.googleusercontent.com/media/public...

Excited to share our latest blog post on memory safety! We’re tackling spatial safety in our massing C++ codebase by hardening live++ by default. It adds bounds checks to things like std::vector, preventing a fair bit of out-of-bounds vulnerabilities: security.googleblog.com/2024/11/retr...