DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How to Reduce Time to Revoke for Exposed Credentials
dwayne_mcdaniel profile

How to Reduce Time to Revoke for Exposed Credentials

#security #devsecops #secrets #appsec
5
Comments 1
8 min read
Why SAST and DAST Aren't Enough for Secrets Security
dwayne_mcdaniel profile

Why SAST and DAST Aren't Enough for Secrets Security

#security #devsecops #appsec #secrets
Comments
10 min read
We Built a Standardized File Format for Prompt Injection and Called It AGENTS.md
coridev profile

We Built a Standardized File Format for Prompt Injection and Called It AGENTS.md

#security #ai #appsec #devops
1
Comments
3 min read
The LLM Isn't Your Attacker. Your eval() Statement Is.
coridev profile

The LLM Isn't Your Attacker. Your eval() Statement Is.

#security #llm #appsec #devops
6
Comments 2
4 min read
Junior AppSec Engineer Overwhelmed by Massive Code Reviews: Strategies for Efficiency and Confidence
olgabyte profile

Junior AppSec Engineer Overwhelmed by Massive Code Reviews: Strategies for Efficiency and Confidence

#appsec #onboarding #mentorship #codereview
Comments
11 min read
How to Measure Time to Revoke for Exposed Credentials
dwayne_mcdaniel profile

How to Measure Time to Revoke for Exposed Credentials

#security #devsecops #secrets #appsec
Comments
5 min read
Manually Breaking Authentication — A Full Walkthrough (CWE-307, CWE-330, CWE-640)
jomynn profile

Manually Breaking Authentication — A Full Walkthrough (CWE-307, CWE-330, CWE-640)

#security #appsec #testing #tutorial
Comments
3 min read
The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.
rockyyy profile

The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

#appsec #webdev #security #pentesting
Comments
3 min read
Zero Permissions on Secrets Manager. Full Access to Your Secrets.
bala_paranj_059d338e44e7e profile

Zero Permissions on Secrets Manager. Full Access to Your Secrets.

#security #aws #cloud #appsec
2
Comments
9 min read
OpenAI's New Security Controls Are an Admission, Not an Innovation
coridev profile

OpenAI's New Security Controls Are an Admission, Not an Innovation

#security #ai #appsec #machinelearning
2
Comments
3 min read
An AI Agent Recommended a Malware Package. A Human Caught It. Next Time You Might Not Be So Lucky
coridev profile

An AI Agent Recommended a Malware Package. A Human Caught It. Next Time You Might Not Be So Lucky

#security #ai #llm #appsec
1
Comments
6 min read
Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat
hamelin123 profile

Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat

#security #appsec #devsecops #opensource
Comments
4 min read
CoSnitch Is a Reminder That Your Chatbot Will Tell on You If You Ask Nicely Enough
coridev profile

CoSnitch Is a Reminder That Your Chatbot Will Tell on You If You Ask Nicely Enough

#security #ai #llm #appsec
Comments
3 min read
MCP Servers Are Just the Latest Place We Forgot to Lock the Door
coridev profile

MCP Servers Are Just the Latest Place We Forgot to Lock the Door

#security #ai #appsec #cybersecurity
1
Comments
3 min read
OAuth Tokens Were Always the Weak Link. AI Agents Just Made It Worse
coridev profile

OAuth Tokens Were Always the Weak Link. AI Agents Just Made It Worse

#security #ai #appsec #cybersecurity
1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.