# appsec

1 min read

Pynt.io

Oct 13

API Security: Threats, Tools, and Best Practices

#appsec #infosec #owasp #api

1 min read

bfuller

Sep 3

Prevention: It's Time to Save Those Millions

#devops #appsec #security #operations

2 min read

aliv

Aug 13

Introducing Omni4J: Secure your Java code

#java #appsec #softwaredevelopment #security

2 min read

Dwayne McDaniel for GitGuardian

Sep 6

DEF CON 32: What We Learned About Secrets Security at AppSec Village

#defcon #appsec #security #cybersecurity

8

9 min read

Mohamed AboElKheir

Sep 3

Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)

#security #cybersecurity #design #appsec

4 min read

brmartin | Bruno Martins

Jul 12

Compreendendo o SAMM

#owasp #samm #appsec

6 min read

maz4l

Jul 10

Web Security and Bug Bounty Hunting: Knowledge, Tools, and Certifications

#bugbountyhunter #ethicalhacking #webdev #appsec

3 min read

maz4l

Jul 10

Understanding the Distinction Between Information Security and Cybersecurity

#infosec #cybersecurity #webdev #appsec

2 min read

Ivan Piskunov

Apr 16

Secure SDLC (Part 1): issues, approach, tech metrics, team’s KPI

#devsecops #sdlc #appsec #asoc

6 min read

0xdbe

Mar 7

Next.js: consequence of AppRouter on your CSP

#security #appsec #nextjs

3 min read

Ata Seren

Mar 17

Creating a DevSecOps pipeline with Jenkins — Part 1

#jenkins #devsecops #devops #appsec

12 min read

Benson Macharia

Mar 15

Mastering Application Security: The Power of Rate Limiting

#appsec #laravel #api #owasp

7

6 min read

0xdbe

Mar 7

Next.js: Crafting a Strict CSP

#security #appsec #nextjs

4 min read

Gabriel Galdino

Jan 31

O que vem depois do Pentesting?

#braziliandevs #pentest #security #appsec

14

13 min read

Binoy Vijayan

Jan 5

Security - A brief introduction to application security

#security #auth2 #appsec #beginners

2 min read

Gabriel Galdino

Dec 21 '23

Pensando sobre Cultura de AppSec

#culture #appsec #braziliandevs #security

8

3 min read

Wilklins Nyatteng for AWS Community Builders

Nov 27 '23

Securing Your Applications on AWS: Guide to Data Privacy and Protection

#aws #appsec #infosec #devsecops

3 min read

Gabriel Galdino

Nov 21 '23

Como identificar vulnerabilidades no código fonte?

#webdev #appsec #security #devops

26

8 min read

Gabriel Galdino

Nov 7 '23

Dicas de codificação segura em C#

#appsec #security #csharp #dotnet

24

9 min read

Cossack Labs

Sep 14 '23

Building security for digital wallets and financial applications

#security #mobile #web #appsec

2 min read

bfuller

Sep 13 '23

Threads of the Next Wave of DevOps

#devops #appsec #collaboration #nextops

9

7 min read

Dwayne McDaniel for GitGuardian

Sep 5 '23

DEF CON 31: A hot time in the Las Vegas heat and some cool days in AppSec Village

#security #defcon #hacking #appsec

14 min read

Rake

Sep 1 '23

Fun Infosec Writeups from GH

#cybersecurity #informationsecurity #vulnerabilities #appsec

3 min read

Rake

Aug 31 '23

Interesting Software Vulns

#vulnerabilities #infosec #appsec #cybersecurity

3 min read

Gabriel Galdino

Aug 24 '23

Codificação segura, por que todos devs precisam conhecer?

#appsec #codereview #devsecops

17

2 min read

Nuk for GuardRails

Jun 24 '23

DAST in 5 Minutes (Or Less): What You Need to Know

#dast #devsecops #appsec

3 min read

Lucas Santos Ferreira for M3Corp

Jun 23 '23

Configurando o agente DAST ISM Veracode em servidores Linux

#dast #appsec #devsecops #veracode

3 min read

Harry Kimpel for New Relic

Jun 21 '23

Mitigate the hidden security risks of open source software libraries

#newrelic #devsecops #appsec #observability

9 min read

michelleamesquita for Leão de Chácara

Apr 3 '23

Criando meu próprio Github Actions para a área de AppSec

#githubactions #devsecop #appsec

3 min read

Shannon McFarland for Outshift By Cisco

Apr 18 '23

VMClarity: What Happens During a Scan?

#sbom #opensource #appsec

2 min read

Shannon McFarland for Outshift By Cisco

Apr 13 '23

VMClarity: Virtual Machine Security

#sbom #opensource #appsec

2 min read

Cossack Labs

Mar 28 '23

Breaking and building encryption in NFC digital wallets 📳

#encryption #cryptography #security #appsec

2 min read

Mark Michon for Bearer

Mar 28 '23

How to scan your ruby or JS project for security improvements, for free.

#security #appsec #tooling

3 min read

Nuk for GuardRails

Mar 17 '23

What’s the Difference between AppSec, Software Security, Cybersecurity, and DevSecOps?

#appsec #devsecops #softwaresecurity #cybersecurity

6 min read

Lucas Santos Ferreira for M3Corp

Mar 14 '23

Os diferentes modos de se realizar SAST com a Veracode

#sast #appsec #devsecops #veracode

4 min read

brmartin | Bruno Martins for Leão de Chácara

Feb 26 '23

Modelagem de Ameaças -Decompondo o Aplicativo

#braziliandevs #threatmodeling #security #appsec

7 min read

brmartin | Bruno Martins for Leão de Chácara

Feb 25 '23

Terminologias Utilizadas em Modelagem de Ameaças

#threatmodeling #security #braziliandevs #appsec

4 min read

Gabriel Galdino

Feb 23 '23

Explicando o TOP 4 da OWASP "Design Inseguro" para desenvolvedores

#owasp #appsec #beginners #security

10

3 min read

brmartin | Bruno Martins for Leão de Chácara

Feb 22 '23

Modelagem de Ameaças - Introdução

#threatmodeling #appsec #devsecops #security

3 min read

brmartin | Bruno Martins

Feb 16 '23

Princípios de Segurança Cibernética

#cybersecurity #devsecops #blueteam #appsec

7 min read

Gabriel Galdino

Feb 2 '23

Explicando o TOP 2 da OWASP "Falhas Criptográficas" para desenvolvedores

#owasp #appsec #cryptographic

10

5 min read

Gabriel Galdino

Jan 25 '23

Explicando o TOP 1 da OWASP "Broken Access Control" para desenvolvedores

#owasp #appsec #security #accesscontrol

6

7 min read

0xdbe

Nov 9 '22

GitHub: How To Enable Code Scanning With Semgrep

#security #appsec #github

3 min read

openappsec

Sep 28 '22

open-appsec NGINX WAF makes machine learning friendly using gamification

#cloudnative #nginx #kubernetes #appsec

2 min read

Simon Bennetts for Jit - Minimum Viable Security for Developers

Sep 14 '22

How to Automate OWASP ZAP

#owasp #opensource #security #appsec

7

8 min read

Cossack Labs

Aug 22 '22

Subscribe to a new newsletter for security-aware developers!

#security #cryptography #devsecops #appsec

6

1 min read

David Melamed for Jit - Minimum Viable Security for Developers

Jul 5 '22

What is Minimum Viable Security (MVS) and how does it improve the life of developers?

#security #appsec #devsecops #mvs

6

6 min read

Cossack Labs

May 12 '22

Encryption in ⛅ cloud native apps

#cloudnative #encryption #cryptography #appsec

12

3 min read

Deepfence

May 9 '22

Network Traffic Observability: Three PacketStreamer Use Cases

#devsecops #infosec #appsec #cybersecurity

3 min read

Gary Robinson

Apr 19 '22

Doing DevSecOps without constant CI/CD changes

#security #devops #appsec #cybersecurity

5 min read

Gary Robinson

Apr 5 '22

How to Approach DevSecOps Security Automation

#devops #devsecop #appsec #security

5 min read

Cossack Labs

Mar 18 '22

2 free data security tools every dev should know (and use)

#security #appsec #encryption #opensource

13

2 min read

Deepfence

Mar 15 '22

ThreatMapper 1.3.0: Now with Secret Scanning, Runtime SBOMs, and More

#sbom #devsecops #infosec #appsec

7

5 min read

0xdbe

Mar 13 '22

Spring Boot: Prevent Log Injection Attacks With Logback

#security #appsec #spring

4 min read

Cossack Labs

Feb 16 '22

Exploring 🚩🚩🚩red flags in React Native security libraries

#reactnative #appsec #cryptography #opensource

2 min read

Cossack Labs

Dec 15 '21

How to build a secure crypto wallet

#cryptography #cryptocurrency #appsec #datasecurity

9

1 min read

Artur Balsam

Sep 25 '21

Authentication bypass in cryptography library

#security #appsec #bcrpyt