Devsecops

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Grumpy Sage

Jul 6

Why Every CISO Needs an AIBOM in 2026 — And What Most Vendors Miss

#security #ai #devsecops #governance

9 min read

FabrizioPerezPeralta

Jul 6

Applying SAST to Infrastructure as Code: Unifying Cloud and Container Security with Trivy

#trivy #security #iac #devsecops

4 min read

FabrizioPerezPeralta

Jul 6

Shifting Mobile Security Left: Applying SAST to Android Apps with MobSF

#security #mobile #devsecops #android

3 min read

Mauricio Choqueña Choque

Jul 5

Applying SAST Tools to Infrastructure as Code — A Hands-On Look at Checkov

#iac #terraform #security #devsecops

4 min read

Mauricio Choqueña Choque

Jul 5

Applying SAST Tools to Real Applications — A Hands-On Look at Bandit

#security #python #sast #devsecops

4 min read

GIAN FRANCO AROCUTIPA AROCUTIPA

Jul 5

Applying SAST to Infrastructure as Code: Scanning Terraform with Checkov

#security #aws #devsecops #terraform

5 min read

Charles Kern

Jul 5

Why Cursor Keeps Writing SSRF Into Your URL Fetch Code

#security #webdev #ai #devsecops

3 min read

Eldor Zufarov

Jul 5

Your Phishing Simulation Score Is 99%. Here's Why That Worries Me.

#security #devsecops #appsec #devops

4 min read

Mehdi BOUTAYEB

Jul 4

Why evidence matters more than model memory in AI pentesting

#security #ai #opensource #devsecops

1 min read

Mehdi BOUTAYEB

Jul 4

Autonomous pentesting against Active Directory, without the black box

#security #ai #opensource #devsecops

1 min read

Charles Kern

Jul 4

Why Cursor Keeps Hashing Passwords With MD5 (And How to Fix It)

#security #webdev #ai #devsecops

2 min read

PatchVex

Jul 2

SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management

#security #compliance #soc2 #devsecops

5 min read

Uhltak Therestismysecret

Jul 2

Supply Chain Attacks verstehen: Praxisnahe Schutzstrategien für moderne IT-Infrastrukturen

#supplychainsecurity #softwaredependencies #cybersecurity #devsecops

6 min read

Saray Chak for Bawbel

Jul 2

We called AVE "the CVE for AI agents." A Reddit commenter told us that was wrong. They were right

#ai #security #mcp #devsecops

4 min read

PatchVex

Jul 1

Why CVSS Alone Doesn't Tell You What to Patch First (And How KEV + EPSS Changes Everything)

#security #devsecops #vulnerabilities #nessus

5 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# devsecops

Why Every CISO Needs an AIBOM in 2026 — And What Most Vendors Miss

Applying SAST to Infrastructure as Code: Unifying Cloud and Container Security with Trivy

Shifting Mobile Security Left: Applying SAST to Android Apps with MobSF

Applying SAST Tools to Infrastructure as Code — A Hands-On Look at Checkov

Applying SAST Tools to Real Applications — A Hands-On Look at Bandit

Applying SAST to Infrastructure as Code: Scanning Terraform with Checkov

Why Cursor Keeps Writing SSRF Into Your URL Fetch Code

Your Phishing Simulation Score Is 99%. Here's Why That Worries Me.

Why evidence matters more than model memory in AI pentesting

Autonomous pentesting against Active Directory, without the black box

Why Cursor Keeps Hashing Passwords With MD5 (And How to Fix It)

SOC 2 CC7.1: What Auditors Actually Ask For in Vulnerability Management

Supply Chain Attacks verstehen: Praxisnahe Schutzstrategien für moderne IT-Infrastrukturen

We called AVE "the CVE for AI agents." A Reddit commenter told us that was wrong. They were right

Why CVSS Alone Doesn't Tell You What to Patch First (And How KEV + EPSS Changes Everything)