DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I Used AI to Help Remediate Vulnerabilities — Here's How Useful It Actually Was
pgmpofu profile

I Used AI to Help Remediate Vulnerabilities — Here's How Useful It Actually Was

#ai #security #appsec #java
Comments
7 min read
Before and After: Measuring Security Posture Improvement With Real Metrics
pgmpofu profile

Before and After: Measuring Security Posture Improvement With Real Metrics

#security #appsec #java #devsecops
Comments
6 min read
Zero-Day in 24 Hours: How AI-Assisted Exploit Velocity Is Redefining Enterprise Cyber Defense
thefluxread profile

Zero-Day in 24 Hours: How AI-Assisted Exploit Velocity Is Redefining Enterprise Cyber Defense

#aithreatintelligence #appsec #cybersecurity #devsecops
Comments
4 min read
Credential Harvesting Explained: How Attackers Collect Secrets From Developer Machines
dwayne_mcdaniel profile

Credential Harvesting Explained: How Attackers Collect Secrets From Developer Machines

#security #devsecops #appsec #secrets
Comments
12 min read
Your AI Coding Agent Trusts Git More Than It Trusts You
coridev profile
Cor E

Your AI Coding Agent Trusts Git More Than It Trusts You

#security #ai #appsec #cybersecurity
1
Comments
3 min read
Putting a Deterministic Cop Between Your LLM and Its Tools Is Not Optional Anymore
coridev profile
Cor E

Putting a Deterministic Cop Between Your LLM and Its Tools Is Not Optional Anymore

#security #ai #llm #appsec
4
Comments 2
3 min read
What Was on This Machine? Answering the Blast Radius Question After a Laptop Compromise
dwayne_mcdaniel profile

What Was on This Machine? Answering the Blast Radius Question After a Laptop Compromise

#security #devsecops #appsec #secrets
Comments
10 min read
Why an AppSec agent should try to disprove its own findings
omarmohelal profile

Why an AppSec agent should try to disprove its own findings

#appsec #security #ai #opensource
Comments
6 min read
The POST was guarded, the GET on the same URL was not: cross-tenant PII disclosure in CoopCycle (GET /api/stores/{id}/addresses)
santosh_kumarpuppala_96e profile

The POST was guarded, the GET on the same URL was not: cross-tenant PII disclosure in CoopCycle (GET /api/stores/{id}/addresses)

#security #php #symfony #appsec
Comments
8 min read
The TODO shipped to npm: an unauthenticated route that could stop any city's AI workflow (Your Priorities, @yrpri/api < 9.0.244)
santosh_kumarpuppala_96e profile

The TODO shipped to npm: an unauthenticated route that could stop any city's AI workflow (Your Priorities, @yrpri/api < 9.0.244)

#security #node #typescript #appsec
Comments
7 min read
A SQL escape is not a shell escape: OS command injection in GOautodial goAPIv2
santosh_kumarpuppala_96e profile

A SQL escape is not a shell escape: OS command injection in GOautodial goAPIv2

#security #cve #php #appsec
Comments
5 min read
How to Reduce Time to Revoke for Exposed Credentials
dwayne_mcdaniel profile

How to Reduce Time to Revoke for Exposed Credentials

#security #devsecops #secrets #appsec
5
Comments 1
8 min read
Why SAST and DAST Aren't Enough for Secrets Security
dwayne_mcdaniel profile

Why SAST and DAST Aren't Enough for Secrets Security

#security #devsecops #appsec #secrets
Comments
10 min read
We Built a Standardized File Format for Prompt Injection and Called It AGENTS.md
coridev profile

We Built a Standardized File Format for Prompt Injection and Called It AGENTS.md

#security #ai #appsec #devops
1
Comments
3 min read
The LLM Isn't Your Attacker. Your eval() Statement Is.
coridev profile

The LLM Isn't Your Attacker. Your eval() Statement Is.

#security #llm #appsec #devops
6
Comments 2
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.