Appsec

Mohamed AboElKheir

Jan 20

Lessons Learned #4: One error message could expose all your data (FileSender CVE-2024–45186)

#appsec #security #cybersecurity #design

5 min read

Mohamed AboElKheir

Jan 19

Lessons Learned #3: Is your random UUID really random? (Account takeover with the sandwich 🥪 attack)

#appsec #security #cybersecurity #design

7 min read

Jonathan Santilli

Jan 17

Leveraging Large Language Models for Cross-Component Vulnerability Detection

#ai #llm #appsec

3 min read

Jonathan Santilli

Jan 7

SQL Injection: the vulnerability that refuses to die

#appsec #coderemediation #sast #ai

4 min read

Jonathan Santilli

Jan 1

Access Control Security: Learning from Major Data Breaches

#securityengineering #owasp #cybersecurity #appsec

5 min read

Nitin Kumar

Dec 15 '24

My VAPT Learning Journey

#vapt #cybersecurity #appsec #learning

3 min read

Mohamed AboElKheir

Sep 25 '24

Lessons Learned #2: Your new feature could introduce a security vulnerability to your old feature (Clickhouse CVE-2024-22412)

#appsec #security #cybersecurity #design

4 min read

Pynt.io

Oct 21 '24

Why Security Misconfigurations Matter and 5 Ways to Prevent Them

#api #security #pynt #appsec

1 min read

Pynt.io

Oct 13 '24

API Security Tools: Threat Protection vs. Testing & 8 Tools to Know

#api #cybersecurity #apisecurity #appsec

5

1 min read

Pynt.io

Oct 13 '24

API Security: Threats, Tools, and Best Practices

#appsec #infosec #owasp #api

5

1 min read

bfuller

Sep 3 '24

Prevention: It's Time to Save Those Millions

#devops #appsec #security #operations

1

2 min read

aliv

Aug 13 '24

Introducing Omni4J: Secure your Java code

#java #appsec #softwaredevelopment #security

2 min read

Dwayne McDaniel for GitGuardian

Sep 6 '24

DEF CON 32: What We Learned About Secrets Security at AppSec Village

#defcon #appsec #security #cybersecurity

8

1

9 min read

Mohamed AboElKheir

Sep 3 '24

Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)

#security #cybersecurity #design #appsec

4 min read

brmartin | Bruno Martins

Jul 12 '24

Compreendendo o SAMM

#owasp #samm #appsec

6 min read

maz4l

Jul 10 '24

Web Security and Bug Bounty Hunting: Knowledge, Tools, and Certifications

#bugbountyhunter #ethicalhacking #webdev #appsec

3

3 min read

maz4l

Jul 10 '24

Understanding the Distinction Between Information Security and Cybersecurity

#infosec #cybersecurity #webdev #appsec

2 min read

Ivan Piskunov

Apr 16 '24

Secure SDLC (Part 1): issues, approach, tech metrics, team’s KPI

#devsecops #sdlc #appsec #asoc

1

6 min read

0xdbe

Mar 7 '24

Next.js: consequence of AppRouter on your CSP

#security #appsec #nextjs

3 min read

Ata Seren

Mar 17 '24

Creating a DevSecOps pipeline with Jenkins — Part 1

#jenkins #devsecops #devops #appsec

1

12 min read

Benson Macharia

Mar 15 '24

Mastering Application Security: The Power of Rate Limiting

#appsec #laravel #api #owasp

7

6 min read

0xdbe

Mar 7 '24

Next.js: Crafting a Strict CSP

#security #appsec #nextjs

1

4 min read

Gabriel Galdino

Jan 31 '24

O que vem depois do Pentesting?

#braziliandevs #pentest #security #appsec

14

13 min read

Binoy Vijayan

Jan 5 '24

Security - A brief introduction to application security

#security #auth2 #appsec #tutorial

5

2 min read

Gabriel Galdino

Dec 21 '23

Pensando sobre Cultura de AppSec

#culture #appsec #braziliandevs #security

8

1

3 min read

DEV Community

# appsec

Lessons Learned #4: One error message could expose all your data (FileSender CVE-2024–45186)

Lessons Learned #3: Is your random UUID really random? (Account takeover with the sandwich 🥪 attack)

Leveraging Large Language Models for Cross-Component Vulnerability Detection

SQL Injection: the vulnerability that refuses to die

Access Control Security: Learning from Major Data Breaches

My VAPT Learning Journey

Lessons Learned #2: Your new feature could introduce a security vulnerability to your old feature (Clickhouse CVE-2024-22412)

Why Security Misconfigurations Matter and 5 Ways to Prevent Them

API Security Tools: Threat Protection vs. Testing & 8 Tools to Know

API Security: Threats, Tools, and Best Practices

Prevention: It's Time to Save Those Millions

Introducing Omni4J: Secure your Java code

DEF CON 32: What We Learned About Secrets Security at AppSec Village

Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)

Compreendendo o SAMM

Web Security and Bug Bounty Hunting: Knowledge, Tools, and Certifications

Understanding the Distinction Between Information Security and Cybersecurity

Secure SDLC (Part 1): issues, approach, tech metrics, team’s KPI

Next.js: consequence of AppRouter on your CSP

Creating a DevSecOps pipeline with Jenkins — Part 1

Mastering Application Security: The Power of Rate Limiting

Next.js: Crafting a Strict CSP

O que vem depois do Pentesting?

Security - A brief introduction to application security

Pensando sobre Cultura de AppSec