DEV Community

# appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Ghost Platforms That Broke Our Payment Rails and How We Unchained Ourselves
interface-profit profile

The Ghost Platforms That Broke Our Payment Rails and How We Unchained Ourselves

#webdev #programming #security #appsec
Comments
3 min read
Platform Lockdowns Will Doom Your Business
interface-profit profile

Platform Lockdowns Will Doom Your Business

#webdev #programming #security #appsec
1
Comments
2 min read
The Egregious Cost of Compliance: One Platform's Overly Broad Restrictions
interface-profit profile

The Egregious Cost of Compliance: One Platform's Overly Broad Restrictions

#webdev #programming #security #appsec
Comments
2 min read
Unchaining Freelance Commerce in Nigeria Was Not Just About Payments
interface-profit profile

Unchaining Freelance Commerce in Nigeria Was Not Just About Payments

#webdev #programming #security #appsec
Comments
3 min read
The Dark Side of Standardized E-commerce Solutions for Global Creators
interface-profit profile

The Dark Side of Standardized E-commerce Solutions for Global Creators

#webdev #programming #security #appsec
Comments
2 min read
The Shai-Hulud Worm Is Now Open Source — Here's How to Stop Self-Replicating Prompts Before They Reach Your LLM
coridev profile

The Shai-Hulud Worm Is Now Open Source — Here's How to Stop Self-Replicating Prompts Before They Reach Your LLM

#security #llm #appsec #cybersecurity
1
Comments
5 min read
Hidden Audio Attacks on Voice AI: How Transcription Pipelines Get Hijacked
coridev profile

Hidden Audio Attacks on Voice AI: How Transcription Pipelines Get Hijacked

#security #ai #appsec #cybersecurity
Comments
4 min read
Your Okta Is Only As Strong As Your SIM Card
relaysh_aea8bcf38177 profile

Your Okta Is Only As Strong As Your SIM Card

#security #identity #mfa #appsec
Comments
3 min read
Modernising a 6-Year-Old Spring Boot Project Without Breaking Everything
pgmpofu profile

Modernising a 6-Year-Old Spring Boot Project Without Breaking Everything

#java #spring #security #appsec
Comments
8 min read
I Dusted Off a 6-Year-Old Java Project and Ran Snyk Against It — Here's What I Found
pgmpofu profile

I Dusted Off a 6-Year-Old Java Project and Ran Snyk Against It — Here's What I Found

#java #security #appsec #devops
Comments
9 min read
GraphQL Authorization Bypass: A Real CVE Code Review
securitystefan profile

GraphQL Authorization Bypass: A Real CVE Code Review

#graphql #security #appsec #codereview
1
Comments 1
9 min read
The 26-Dimensional Feature Vector: How a Machine Learns to Recognise a Secret
pgmpofu profile

The 26-Dimensional Feature Vector: How a Machine Learns to Recognise a Secret

#machinelearning #python #appsec #security
Comments
9 min read
Why the Variable Name Is the Most Important Feature in Secrets Detection
pgmpofu profile

Why the Variable Name Is the Most Important Feature in Secrets Detection

#machinelearning #python #security #appsec
Comments
8 min read
We scanned 50+ MCP servers and found HIGH-severity bugs in Atlassian, GitHub, Cloudflare, and Microsoft — here's what we learned
truong_bui_eaec3f963bbe21 profile

We scanned 50+ MCP servers and found HIGH-severity bugs in Atlassian, GitHub, Cloudflare, and Microsoft — here's what we learned

#mcp #security #llm #appsec
1
Comments 1
4 min read
Skill files are the new supply chain attack surface. Your CI pipeline does not know that yet.
saray_chak profile

Skill files are the new supply chain attack surface. Your CI pipeline does not know that yet.

#security #ai #devsecops #appsec
1
Comments 2
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.