DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Top Enterprise SCA Tools in 2026: A Developer's Comparison
alexcybersmith profile

Top Enterprise SCA Tools in 2026: A Developer's Comparison

#security #opensource #appsec #devops
Comments
11 min read
A CVSS 10.0 in Your AI Coding Agent Is Just TOCTOU Wearing a Hoodie
coridev profile

A CVSS 10.0 in Your AI Coding Agent Is Just TOCTOU Wearing a Hoodie

#security #ai #appsec #devops
1
Comments
3 min read
Why I Suppressed 30% of Snyk's Recommendations
pgmpofu profile

Why I Suppressed 30% of Snyk's Recommendations

#security #appsec #java #devsecops
Comments
8 min read
Adding WebAuthn to a multi-tenant NestJS + Next.js app: what nobody tells you
elwin_ernst profile

Adding WebAuthn to a multi-tenant NestJS + Next.js app: what nobody tells you

#appsec #webauthn #security #passkeys
Comments
11 min read
A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)
santosh_kumarpuppala_96e profile

A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)

#security #cve #linux #appsec
Comments 2
6 min read
They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network
santosh_kumarpuppala_96e profile

They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

#security #cve #ruby #appsec
Comments
6 min read
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)
mohamed_aboelkheir profile

Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

#security #appsec #codereview #cybersecurity
Comments 2
11 min read
The npm Worm That Learned to Trust Your AI Agent
coridev profile
Cor E

The npm Worm That Learned to Trust Your AI Agent

#security #ai #devops #appsec
Comments
3 min read
Your AI Scam Detector Trusts Fake Reviewers More Than You Think
coridev profile
Cor E

Your AI Scam Detector Trusts Fake Reviewers More Than You Think

#security #ai #llm #appsec
1
Comments
3 min read
No, Claude Didn't 'Go Rogue.' Someone Gave It Root and Wi-Fi.
coridev profile
Cor E

No, Claude Didn't 'Go Rogue.' Someone Gave It Root and Wi-Fi.

#security #ai #appsec #cybersecurity
1
Comments
3 min read
GitHub finds your vulnerabilities. Something still has to manage them.
shahidfoy profile

GitHub finds your vulnerabilities. Something still has to manage them.

#security #github #devops #appsec
1
Comments
6 min read
trust_remote_code Was Always a Dare, Not a Safeguard
coridev profile
Cor E

trust_remote_code Was Always a Dare, Not a Safeguard

#security #ai #machinelearning #appsec
1
Comments
3 min read
Confronting Vault Sprawl And The Risks It Brings
dwayne_mcdaniel profile

Confronting Vault Sprawl And The Risks It Brings

#security #devsecops #appsec #devops
Comments
8 min read
Running Snyk on Real Legacy Java Code — The Full Unfiltered Results
pgmpofu profile

Running Snyk on Real Legacy Java Code — The Full Unfiltered Results

#java #security #appsec #spring
Comments
10 min read
HTB Orion — CraftCMS RCE, a Reverse Shell That Wouldn't Connect, and a Telnetd Auth Bypass
pyhacksecgp profile

HTB Orion — CraftCMS RCE, a Reverse Shell That Wouldn't Connect, and a Telnetd Auth Bypass

#hackthebox #appsec #pentesting #ctf
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.