DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
GitHub finds your vulnerabilities. Something still has to manage them.
shahidfoy profile
Shahid Foy

GitHub finds your vulnerabilities. Something still has to manage them.

#security#github#devops#appsec
1
Comments
6 min read
trust_remote_code Was Always a Dare, Not a Safeguard
coridev profile
Cor E

trust_remote_code Was Always a Dare, Not a Safeguard

#security#ai#machinelearning#appsec
1
Comments
3 min read
Confronting Vault Sprawl And The Risks It Brings
dwayne_mcdaniel profile

Confronting Vault Sprawl And The Risks It Brings

#security#devsecops#appsec#devops
Comments
8 min read
Running Snyk on Real Legacy Java Code — The Full Unfiltered Results
pgmpofu profile

Running Snyk on Real Legacy Java Code — The Full Unfiltered Results

#java#security#appsec#spring
Comments
10 min read
HTB Orion — CraftCMS RCE, a Reverse Shell That Wouldn't Connect, and a Telnetd Auth Bypass
pyhacksecgp profile
PyHackSecGP

HTB Orion — CraftCMS RCE, a Reverse Shell That Wouldn't Connect, and a Telnetd Auth Bypass

#hackthebox#appsec#pentesting#ctf
Comments
4 min read
How to Prevent API Keys and Secrets from Leaking into LLMs
fazalu_rahman_41075c71a18 profile

How to Prevent API Keys and Secrets from Leaking into LLMs

#security#appsec#chatgpt#webdev
Comments
2 min read
Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers
eldor_zufarov_1966 profile

Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers

#appsec#supplychain#devsecops#ai
Comments
3 min read
An "Autonomous" AI Attack Got Caught Because It Left the Door Open
coridev profile
Cor E

An "Autonomous" AI Attack Got Caught Because It Left the Door Open

#security#ai#cybersecurity#appsec
2
Comments 1
3 min read
Hardening my own Nmap web UI: the security holes I shipped, and what actually saved me
dipesthapa profile
Dipesh Thapa

Hardening my own Nmap web UI: the security holes I shipped, and what actually saved me

#security#python#fastapi#appsec
2
Comments
4 min read
Your Phishing Simulation Score Is 99%. Here's Why That Worries Me.
eldor_zufarov_1966 profile
Eldor Zufarov

Your Phishing Simulation Score Is 99%. Here's Why That Worries Me.

#security#devsecops#appsec#devops
Comments
4 min read
Agentic AI Security: Risks, OWASP Agentic Top 10, and Defensive Patterns (2026)
securecodinghub profile

Agentic AI Security: Risks, OWASP Agentic Top 10, and Defensive Patterns (2026)

#ai#security#owasp#appsec
Comments
13 min read
DAST false negatives vs SAST false positives: a real case
securitystefan profile
Stefan

DAST false negatives vs SAST false positives: a real case

#security#appsec#sast#dast
1
Comments
10 min read
Cache Poisoning at the Edge: How Cloudflare Workers & Vercel Edge Functions Break Everything You Thought You Knew
arashad_dodhiya_0e4bdba5a profile

Cache Poisoning at the Edge: How Cloudflare Workers & Vercel Edge Functions Break Everything You Thought You Knew

#websecurity#cachepoisoning#appsec#bugbounty
Comments
7 min read
AI Harnesses Are Just Middleware, and Middleware Trust Bugs Are Older Than Your Career
coridev profile
Cor E

AI Harnesses Are Just Middleware, and Middleware Trust Bugs Are Older Than Your Career

#ai#security#appsec#llm
1
Comments 2
3 min read
Copilot for Word Will Copy Its Own Poison Into Every Document It Touches
coridev profile
Cor E

Copilot for Word Will Copy Its Own Poison Into Every Document It Touches

#security#ai#llm#appsec
3
Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.