Appsec

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Patience Mpofu

May 7

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

#security #appsec #python #tutorial

8 min read

Patience Mpofu

May 7

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

#appsec #security #tutorial #python

8 min read

Cover image for Best Snyk Alternatives in 2026: Which AppSec Tool Should You Choose?

Alex Vakulov

May 6

Best Snyk Alternatives in 2026: Which AppSec Tool Should You Choose?

#snyk #appsec #cybersecurity #devsecops

12 min read

Cover image for SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

Dwayne McDaniel for GitGuardian

May 5

SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

#security #devops #appsec #cybersecurity

10 min read

Cover image for From a Single IP to Exfiltrated Passwords in a PNG: My First Freelance Pentest Engagement

Marco Altomare

May 4

From a Single IP to Exfiltrated Passwords in a PNG: My First Freelance Pentest Engagement

#cybersecurity #webtesting #webscraping #appsec

13 min read

Cover image for 60–80% of your CVEs are unreachable. Here's how to prove it.

Rajat Kumar

May 4

60–80% of your CVEs are unreachable. Here's how to prove it.

#cybersecurity #typescript #javascript #appsec

4 min read

Mohamed AboElKheir

Apr 28

What AppSec Engineers Actually Do (and Why It Matters)

#appsec #cybersecurity #security #design

7 min read

Eldor Zufarov

Apr 28

If Your Security Scanner Can't See Attack Chains, You're Flying Blind

#devsecops #appsec #cybersecurity #fintech

5 min read

Cover image for What Government Data Breaches Teach Us About Access Control

logiQode

Apr 25

What Government Data Breaches Teach Us About Access Control

#security #appsec #devops #typescript

5 min read

fosres

Apr 23

Secure System Design -- 14 Challenges

#security #appsec #cloudsec #opensource

31 min read

Eldor Zufarov

Apr 23

From LOW to CRITICAL: How a 5-Step Vulnerability Chain Goes Undetected by Flat Scanners

#security #appsec #vulnerabilities #devops

3 min read

Cover image for Are You Still Checking Binary Hardening by Hand? I Built bincheck in Rust

Kazuma Koga

Apr 21

Are You Still Checking Binary Hardening by Hand? I Built bincheck in Rust

#rust #security #appsec #devops

2 min read

Cover image for Execute First, Ask Never: A Vulnerability in snyk-agent-scan

Jonathan Santilli

Apr 20

Execute First, Ask Never: A Vulnerability in snyk-agent-scan

#agents #ai #appsec #mcp

8 min read

Eldor Zufarov

Apr 20

From Alert Lists to Exploit Graphs: How Auditor Core Changes the Security Calculus

#cybersecurity #appsec #architecture #devsecops

5 min read

Bala Paranj

Apr 17

Subdomain Takeover is Not Just Phishing: How Acronis Nearly Lost Authenticated API Access

#security #aws #cloud #appsec

6 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Forem

# appsec

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

Best Snyk Alternatives in 2026: Which AppSec Tool Should You Choose?

SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

From a Single IP to Exfiltrated Passwords in a PNG: My First Freelance Pentest Engagement

60–80% of your CVEs are unreachable. Here's how to prove it.

What AppSec Engineers Actually Do (and Why It Matters)

If Your Security Scanner Can't See Attack Chains, You're Flying Blind

What Government Data Breaches Teach Us About Access Control

Secure System Design -- 14 Challenges

From LOW to CRITICAL: How a 5-Step Vulnerability Chain Goes Undetected by Flat Scanners

Are You Still Checking Binary Hardening by Hand? I Built bincheck in Rust

Execute First, Ask Never: A Vulnerability in snyk-agent-scan

From Alert Lists to Exploit Graphs: How Auditor Core Changes the Security Calculus

Subdomain Takeover is Not Just Phishing: How Acronis Nearly Lost Authenticated API Access