Appsec Page 2

Vamsi NC

Mar 12

Security is a risk function

#security #appsec #practicalsecurity #applicableappsec

1 min read

Cover image for Login Page for Modern Applications

Alex P

Mar 26

Login Page for Modern Applications

#appsec #login #password #security

1

6 min read

SHUBHENDU SHUBHAM

Feb 6

Why Current Methods Fail to Measure Real Vulnerability Risks?

#security #cybersecurity #sast #appsec

2 min read

Mohamed AboElKheir

Jan 22

How Reachability Analysis 🔎 can help with open source vulnerabilities mess (Coana as an example)

#appsec #security #cybersecurity #design

10 min read

Mohamed AboElKheir

Jan 20

Lessons Learned #4: One error message could expose all your data (FileSender CVE-2024–45186)

#appsec #security #cybersecurity #design

5 min read

Mohamed AboElKheir

Jan 19

Lessons Learned #3: Is your random UUID really random? (Account takeover with the sandwich 🥪 attack)

#appsec #security #cybersecurity #design

7 min read

Cover image for Leveraging Large Language Models for Cross-Component Vulnerability Detection

Jonathan Santilli

Jan 17

Leveraging Large Language Models for Cross-Component Vulnerability Detection

#ai #llm #appsec

3 min read

Cover image for How to pass the OWASP MASVS verification by design

johan sydseter for OWASP® Foundation

Feb 14

How to pass the OWASP MASVS verification by design

#appsec #mobile #cybersecurity #security

4

6 min read

Cover image for OWASP® Cornucopia Website App 2.1 & Mobile App 1.1!

johan sydseter for OWASP® Foundation

Feb 14

OWASP® Cornucopia Website App 2.1 & Mobile App 1.1!

#appsec #security #threatmodeling #agile

7

5 min read

Jonathan Santilli

Jan 7

SQL Injection: the vulnerability that refuses to die

#appsec #coderemediation #sast #ai

4 min read

Cover image for How to do threat modeling for agile mobile app development?

johan sydseter for OWASP® Foundation

Feb 6

How to do threat modeling for agile mobile app development?

#agile #mobile #appsec #cybersecurity

4

8 min read

Cover image for Access Control Security: Learning from Major Data Breaches

Jonathan Santilli

Jan 1

Access Control Security: Learning from Major Data Breaches

#securityengineering #owasp #cybersecurity #appsec

5 min read

Cover image for My VAPT Learning Journey

Nitin Kumar

Dec 15 '24

My VAPT Learning Journey

#vapt #cybersecurity #appsec #learning

3 min read

Mohamed AboElKheir

Sep 25 '24

Lessons Learned #2: Your new feature could introduce a security vulnerability to your old feature (Clickhouse CVE-2024-22412)

#appsec #security #cybersecurity #design

4 min read

Cover image for Why Security Misconfigurations Matter and 5 Ways to Prevent Them

Pynt.io

Oct 21 '24

Why Security Misconfigurations Matter and 5 Ways to Prevent Them

#api #security #appsec #securityflaw

1 min read

Cover image for API Security: Threats, Tools, and Best Practices

Pynt.io

Oct 13 '24

API Security: Threats, Tools, and Best Practices

#appsec #owasp #api #apisec

5

1 min read

Cover image for Introducing Omni4J: Secure your Java code

aliv

Aug 13 '24

Introducing Omni4J: Secure your Java code

#java #appsec #softwaredevelopment #security

2 min read

Cover image for DEF CON 32: What We Learned About Secrets Security at AppSec Village

Dwayne McDaniel for GitGuardian

Sep 6 '24

DEF CON 32: What We Learned About Secrets Security at AppSec Village

#defcon #appsec #security #cybersecurity

8

1

9 min read

Cover image for Prevention: It's Time to Save Those Millions

bfuller

Sep 3 '24

Prevention: It's Time to Save Those Millions

#devops #appsec #security #operations

1

2 min read

Mohamed AboElKheir

Sep 3 '24

Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)

#security #cybersecurity #design #appsec

4 min read

brmartin | Bruno Martins

Jul 12 '24

Compreendendo o SAMM

#owasp #samm #appsec

1

6 min read

maz4l

Jul 10 '24

Web Security and Bug Bounty Hunting: Knowledge, Tools, and Certifications

#bugbountyhunter #ethicalhacking #webdev #appsec

3

3 min read

maz4l

Jul 10 '24

Understanding the Distinction Between Information Security and Cybersecurity

#infosec #cybersecurity #webdev #appsec

2 min read

Ivan Piskunov

Apr 16 '24

Secure SDLC (Part 1): issues, approach, tech metrics, team’s KPI

#devsecops #sdlc #appsec #asoc

1

6 min read

0xdbe

Mar 7 '24

Next.js: consequence of AppRouter on your CSP

#security #appsec #nextjs

3 min read

Forem

# appsec

Security is a risk function

Login Page for Modern Applications

Why Current Methods Fail to Measure Real Vulnerability Risks?

How Reachability Analysis 🔎 can help with open source vulnerabilities mess (Coana as an example)

Lessons Learned #4: One error message could expose all your data (FileSender CVE-2024–45186)

Lessons Learned #3: Is your random UUID really random? (Account takeover with the sandwich 🥪 attack)

Leveraging Large Language Models for Cross-Component Vulnerability Detection

How to pass the OWASP MASVS verification by design

OWASP® Cornucopia Website App 2.1 & Mobile App 1.1!

SQL Injection: the vulnerability that refuses to die

How to do threat modeling for agile mobile app development?

Access Control Security: Learning from Major Data Breaches

My VAPT Learning Journey

Lessons Learned #2: Your new feature could introduce a security vulnerability to your old feature (Clickhouse CVE-2024-22412)

Why Security Misconfigurations Matter and 5 Ways to Prevent Them

API Security: Threats, Tools, and Best Practices

Introducing Omni4J: Secure your Java code

DEF CON 32: What We Learned About Secrets Security at AppSec Village

Prevention: It's Time to Save Those Millions

Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase CVE-2023–38646)

Compreendendo o SAMM

Web Security and Bug Bounty Hunting: Knowledge, Tools, and Certifications

Understanding the Distinction Between Information Security and Cybersecurity

Secure SDLC (Part 1): issues, approach, tech metrics, team’s KPI

Next.js: consequence of AppRouter on your CSP