DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why SAST and DAST Aren't Enough for Secrets Security
dwayne_mcdaniel profile

Why SAST and DAST Aren't Enough for Secrets Security

#security #devsecops #appsec #secrets
10 min read
We Built a Standardized File Format for Prompt Injection and Called It AGENTS.md
coridev profile

We Built a Standardized File Format for Prompt Injection and Called It AGENTS.md

#security #ai #appsec #devops
1
3 min read
The LLM Isn't Your Attacker. Your eval() Statement Is.
coridev profile

The LLM Isn't Your Attacker. Your eval() Statement Is.

#security #llm #appsec #devops
6
2
4 min read
Junior AppSec Engineer Overwhelmed by Massive Code Reviews: Strategies for Efficiency and Confidence
olgabyte profile

Junior AppSec Engineer Overwhelmed by Massive Code Reviews: Strategies for Efficiency and Confidence

#appsec #onboarding #mentorship #codereview
11 min read
How to Measure Time to Revoke for Exposed Credentials
dwayne_mcdaniel profile

How to Measure Time to Revoke for Exposed Credentials

#security #devsecops #secrets #appsec
5 min read
Manually Breaking Authentication — A Full Walkthrough (CWE-307, CWE-330, CWE-640)
jomynn profile

Manually Breaking Authentication — A Full Walkthrough (CWE-307, CWE-330, CWE-640)

#security #appsec #testing #tutorial
3 min read
The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.
rockyyy profile

The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

#appsec #webdev #security #pentesting
3 min read
Zero Permissions on Secrets Manager. Full Access to Your Secrets.
bala_paranj_059d338e44e7e profile

Zero Permissions on Secrets Manager. Full Access to Your Secrets.

#security #aws #cloud #appsec
2
9 min read
OpenAI's New Security Controls Are an Admission, Not an Innovation
coridev profile

OpenAI's New Security Controls Are an Admission, Not an Innovation

#security #ai #appsec #machinelearning
2
3 min read
An AI Agent Recommended a Malware Package. A Human Caught It. Next Time You Might Not Be So Lucky
coridev profile

An AI Agent Recommended a Malware Package. A Human Caught It. Next Time You Might Not Be So Lucky

#security #ai #llm #appsec
1
6 min read
Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat
hamelin123 profile

Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat

#security #appsec #devsecops #opensource
4 min read
CoSnitch Is a Reminder That Your Chatbot Will Tell on You If You Ask Nicely Enough
coridev profile

CoSnitch Is a Reminder That Your Chatbot Will Tell on You If You Ask Nicely Enough

#security #ai #llm #appsec
3 min read
MCP Servers Are Just the Latest Place We Forgot to Lock the Door
coridev profile

MCP Servers Are Just the Latest Place We Forgot to Lock the Door

#security #ai #appsec #cybersecurity
1
3 min read
OAuth Tokens Were Always the Weak Link. AI Agents Just Made It Worse
coridev profile

OAuth Tokens Were Always the Weak Link. AI Agents Just Made It Worse

#security #ai #appsec #cybersecurity
1
3 min read
FastAPI accepts a response_model on streaming routes and silently ignores it
pachilo profile

FastAPI accepts a response_model on streaming routes and silently ignores it

#fastapi #ai #programming #appsec
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.