DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations

Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations

1
Comments
4 min read
1.8 Million APKs Later, We Should Talk About What "AI Agent" Actually Means in a Threat Model

1.8 Million APKs Later, We Should Talk About What "AI Agent" Actually Means in a Threat Model

1
Comments
3 min read
An AI Agent Swarm Just Red-Teamed a Package Registry Without Asking Permission

An AI Agent Swarm Just Red-Teamed a Package Registry Without Asking Permission

1
Comments
3 min read
sk-1234 Is Not a Secret, It's a Docs Example, and 10% of You Shipped It Anyway

sk-1234 Is Not a Secret, It's a Docs Example, and 10% of You Shipped It Anyway

1
Comments
3 min read
Ethical hacking is not a toolset, it is a mindset with a permission slip

Ethical hacking is not a toolset, it is a mindset with a permission slip

Comments
6 min read
Invisible Unicode Tag Characters Just Jumped From Prompt Injection to Phishing

Invisible Unicode Tag Characters Just Jumped From Prompt Injection to Phishing

1
Comments
6 min read
The Auth Template That Trusted Its Caller: AccessKeyID Injection in EKS

The Auth Template That Trusted Its Caller: AccessKeyID Injection in EKS

Comments
6 min read
The Webhook is the Persistence: RBAC Misconfiguration in EKS

The Webhook is the Persistence: RBAC Misconfiguration in EKS

1
Comments 3
6 min read
Cognito With the Safety Off: MFA Disabled, Advanced Security Disabled

Cognito With the Safety Off: MFA Disabled, Advanced Security Disabled

Comments 1
6 min read
Understanding Vulnerabilities Through Ethical Exploitation: A Foundation for Stronger Application Security

Understanding Vulnerabilities Through Ethical Exploitation: A Foundation for Stronger Application Security

Comments
5 min read
I Used AI to Help Remediate Vulnerabilities — Here's How Useful It Actually Was

I Used AI to Help Remediate Vulnerabilities — Here's How Useful It Actually Was

Comments
7 min read
ASCII Smuggling Just Graduated From AI Attacks to Your Inbox

ASCII Smuggling Just Graduated From AI Attacks to Your Inbox

1
Comments
5 min read
Your AI Coding Agent Will Run Whatever a Stranger's Repo Tells It To

Your AI Coding Agent Will Run Whatever a Stranger's Repo Tells It To

1
Comments
3 min read
Before and After: Measuring Security Posture Improvement With Real Metrics

Before and After: Measuring Security Posture Improvement With Real Metrics

Comments
6 min read
6 Best AI Pentesting Tools in 2026

6 Best AI Pentesting Tools in 2026

Comments 1
12 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.