DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.
rockyyy profile

The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

#appsec #webdev #security #pentesting
Comments
3 min read
Zero Permissions on Secrets Manager. Full Access to Your Secrets.
bala_paranj_059d338e44e7e profile

Zero Permissions on Secrets Manager. Full Access to Your Secrets.

#security #aws #cloud #appsec
2
Comments
9 min read
OpenAI's New Security Controls Are an Admission, Not an Innovation
coridev profile

OpenAI's New Security Controls Are an Admission, Not an Innovation

#security #ai #appsec #machinelearning
2
Comments
3 min read
An AI Agent Recommended a Malware Package. A Human Caught It. Next Time You Might Not Be So Lucky
coridev profile

An AI Agent Recommended a Malware Package. A Human Caught It. Next Time You Might Not Be So Lucky

#security #ai #llm #appsec
1
Comments
6 min read
Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat
hamelin123 profile

Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat

#security #appsec #devsecops #opensource
Comments
4 min read
CoSnitch Is a Reminder That Your Chatbot Will Tell on You If You Ask Nicely Enough
coridev profile

CoSnitch Is a Reminder That Your Chatbot Will Tell on You If You Ask Nicely Enough

#security #ai #llm #appsec
Comments
3 min read
Agentic SQL Injection Is Just SQL Injection Wearing a Trench Coat
coridev profile

Agentic SQL Injection Is Just SQL Injection Wearing a Trench Coat

#security #ai #llm #appsec
1
Comments 1
3 min read
MCP Servers Are Just the Latest Place We Forgot to Lock the Door
coridev profile

MCP Servers Are Just the Latest Place We Forgot to Lock the Door

#security #ai #appsec #cybersecurity
1
Comments
3 min read
OAuth Tokens Were Always the Weak Link. AI Agents Just Made It Worse
coridev profile

OAuth Tokens Were Always the Weak Link. AI Agents Just Made It Worse

#security #ai #appsec #cybersecurity
1
Comments
3 min read
FastAPI accepts a response_model on streaming routes and silently ignores it
pachilo profile

FastAPI accepts a response_model on streaming routes and silently ignores it

#fastapi #ai #programming #appsec
Comments
5 min read
A Sandbox Got Popped at Black Hat. Nobody Should Be Shocked.
coridev profile

A Sandbox Got Popped at Black Hat. Nobody Should Be Shocked.

#security #ai #llm #appsec
1
Comments
3 min read
The one they fixed
pachilo profile

The one they fixed

#ai #programming #fastapi #appsec
Comments
4 min read
Five findings in FastAPI, and what happened when I reported them
pachilo profile

Five findings in FastAPI, and what happened when I reported them

#fastapi #ai #programming #appsec
Comments
4 min read
Top Enterprise SCA Tools in 2026: A Developer's Comparison
alexcybersmith profile

Top Enterprise SCA Tools in 2026: A Developer's Comparison

#security #opensource #appsec #devops
Comments
11 min read
A CVSS 10.0 in Your AI Coding Agent Is Just TOCTOU Wearing a Hoodie
coridev profile

A CVSS 10.0 in Your AI Coding Agent Is Just TOCTOU Wearing a Hoodie

#security #ai #appsec #devops
1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.