AWS Security LIVE! from Black Hat

Varshith V Hegde

The Most Embarrassing Private Key in Web PKI History

#security #webdev #devops

Oct 27

Akhouri Anmol Kumar

Encryption, Explained Properly: AES vs ChaCha20 vs Argon2id (and How to Actually Combine Them)

#security #cryptography #python

Oct 22

𝗝𝗼𝗵𝗻

Your "use server" Functions Are Public HTTP Endpoints (And Middleware Won't Save You)

#webdev #javascript #react

Oct 27

Sam LABBE

155 responses leaked between AI customers: the GLM-5.3 KV cache bug — and the canary test for YOUR provider

#ai #security #cloud

Oct 27

Rong Zhu

Stop writing || true before your SARIF upload

#githubactions #security #python

Oct 28

David Ernst

The Easy Button for AWS Account Details and Cost Savings

#aws #security #finops

Oct 28

Rain S

Actions the Tool Registry Does Not Know About: Who Owns Them?

#ai #security #agents

Oct 28

Otto

Running Claude Code in CI: what -p silently turns off

#claude #ai #devtools

Oct 27

Shanjeev Rajendran

What Cloakroom would and wouldn't have done in October's incidents

#security #ai #opensource

Oct 28

Martin Pisacreta

How I Protect an ASP.NET Core API with Microsoft Entra ID

#dotnet #csharp #security

Oct 28

SniffPup

Supabase RLS policy examples: copy-paste policies for 7 common app patterns

#supabase #postgres #security

Oct 28

SniffPup

How to find exposed API keys on your website (a 7-step check)

#security #webdev #javascript

Oct 28

zbinze

Why Card Number Formats Differ: Hex, Decimal, Byte Order

#hardware #security #programming

Oct 28

Tolga Coskun

Your coding agent doesn't need your real API key

#ai #security #claude

Oct 28

Nabeel Hassan

A Stranger Writes Half of My AI Matcher's Prompt

#ai #security #llm

Oct 27