DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A security checklist my coding agent has to run
lawaloyinlola profile

A security checklist my coding agent has to run

#security #appsec #ai #webdev
Comments 1
7 min read
An Undocumented Preference File Is All It Took to Hijack an AI Assistant
coridev profile

An Undocumented Preference File Is All It Took to Hijack an AI Assistant

#security #ai #cybersecurity #appsec
1
Comments
3 min read
Open-Sourcing Code Doesn't Undo Encrypting the Evidence
coridev profile

Open-Sourcing Code Doesn't Undo Encrypting the Evidence

#security #ai #appsec #cybersecurity
1
Comments
3 min read
Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked
thefluxread profile

Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked

#aisafety #appsec #bugbounty #claudeai
Comments
4 min read
One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In
coridev profile

One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In

#security #ai #llm #appsec
1
Comments
3 min read
Your AI Agent Isn't Broken. It's Doing Exactly What You Trained It To Do
coridev profile

Your AI Agent Isn't Broken. It's Doing Exactly What You Trained It To Do

#security #ai #appsec #devops
1
Comments 1
3 min read
AWS S3 Bucket Security: Find the Secrets Hiding Outside Git
dwayne_mcdaniel profile

AWS S3 Bucket Security: Find the Secrets Hiding Outside Git

#aws #security #appsec #cloud
Comments
8 min read
AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection
dwayne_mcdaniel profile

AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

#security #ai #appsec #devsecops
Comments
10 min read
Suffix Matching Is Not Authorization: Lessons from CVE-2026-49869 in Kestra
jeffreyciend profile

Suffix Matching Is Not Authorization: Lessons from CVE-2026-49869 in Kestra

#security #authentication #appsec #kestra
Comments
3 min read
Your Coding Agent Reads the Repository Before You Do: Configuration Injection in AI Developer Tooling
jeffreyciend profile

Your Coding Agent Reads the Repository Before You Do: Configuration Injection in AI Developer Tooling

#aisecurity #supplychain #developertooling #appsec
Comments
3 min read
The Bucket You Deleted Is Still in Your DNS: S3 Bucket Takeover at Bime
bala_paranj_059d338e44e7e profile

The Bucket You Deleted Is Still in Your DNS: S3 Bucket Takeover at Bime

#security #aws #cloud #appsec
Comments
6 min read
The Detection Layer That Was Quietly Off: GuardDuty Disabled on an AWS Account
bala_paranj_059d338e44e7e profile

The Detection Layer That Was Quietly Off: GuardDuty Disabled on an AWS Account

#security #aws #cloud #appsec
Comments
6 min read
Why Secrets Slip Through Every Layer of Your Security Stack
dwayne_mcdaniel profile

Why Secrets Slip Through Every Layer of Your Security Stack

#security #appsec #devsecops #secrets
Comments
5 min read
Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations
dwayne_mcdaniel profile

Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations

#security #supplychain #devops #appsec
1
Comments
4 min read
1.8 Million APKs Later, We Should Talk About What "AI Agent" Actually Means in a Threat Model
coridev profile

1.8 Million APKs Later, We Should Talk About What "AI Agent" Actually Means in a Threat Model

#security #ai #cybersecurity #appsec
1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.