# appsec

5 min read

Cossack Labs

Mar 18

2 free data security tools every dev should know (and use)

#security #appsec #encryption #opensource

15 3

2 min read

Deepfence

Mar 15

ThreatMapper 1.3.0: Now with Secret Scanning, Runtime SBOMs, and More

#sbom #devsecops #infosec #appsec

5 min read

0xdbe

Mar 13

Spring Boot: Prevent Log Injection Attacks With Logback

#security #appsec #spring

4 min read

Cossack Labs

Feb 16

Exploring 🚩🚩🚩red flags in React Native security libraries

#reactnative #appsec #cryptography #opensource

2 min read

Cossack Labs

Dec 15 '21

How to build a secure crypto wallet

#cryptography #cryptocurrency #appsec #datasecurity

11 2

1 min read

Artur Balsam

Sep 25 '21

Authentication bypass in cryptography library

#security #appsec #bcrpyt

3 min read

Artur Balsam

Sep 25 '21

Secure by default, unsafe by you

#security #appsec #react #mithril

14

2 min read

Artur Balsam

Sep 25 '21

Security by incident and surprise

#security #csrf #html #appsec

4 min read

Artur Balsam

Sep 25 '21

Corona Virus Threat Modelling

#security #threatmodelling #corona #appsec

4 min read

0xdbe

Sep 6 '21

Angular Security - Disable Inline Critical CSS

#security #appsec #angular

5 2

2 min read

Gary Robinson

Jul 21 '21

How to approach DevSecOps security automation

#devops #security #sre #appsec

4

4 min read

mackenziejj

Jun 21 '21

Codecov supply chain attack - Step by step breakdown

#security #appsec #devops #hacking

7 min read

Cossack Labs

Apr 13 '21

What do appsec and fire extinguishers have in common?

#security #appdev #appsec #riskmanagement

10

3 min read

mackenziejj

Mar 30 '21

To Secure Today’s Code, It’s Time to Shift Left

#cybersecurity #appsec #security #infosec

9

6 min read

Tanya Janca

Mar 20 '21

Alice and Bob Learn: Chapter Discussions

#application #security #appsec #devsecops

2 min read

Tanya Janca

Mar 10 '21

One Year Anniversary of We Hack Purple

#startup #appsec #business #purple

4 min read

Tanya Janca

Mar 4 '21

Why I Joined the NeuraLegion Advisory Board

#appsec #advisory #board #development

2 min read

Iury Souza

Dec 27 '20

Publishing an obfuscated kotlin library

#kotlin #java #appsec #gradle

14

6 min read

Tanya Janca

Dec 5 '20

How to get your boss to approve the training you want

#training #appsec #infosec #devsecops

4

4 min read

Tanya Janca

Jul 7 '20

Security is Everybody's Job - Part 6 - The Second Way

#devops #beginners #devsecops #appsec

14

3 min read

Tanya Janca

Jun 4 '20

Security is Everybody's Job - Part 5 - The First Way

#devops #beginners #devsecops #appsec

4 min read

Tanya Janca

May 29 '20

Security is Everybody's Job - Part 4 - What is DevSecOps?

#devops #beginners #devsecops #appsec

3

2 min read

Tanya Janca

May 21 '20

Security is Everybody's Job - Part 3 - What IS DevOps?

#devops #beginners #devsecops #appsec

16

2 min read

Tanya Janca

May 14 '20

AMA: Where can we learn Threat Modelling?

#threat #application #security #appsec

12 1

2 min read

Scott Gerlach

Apr 21 '20

Using StackHawk in GitLab - Know Before You Go (Live)

#appsec #cicd #devops #development

7 min read

Tanya Janca

Apr 19 '20

AMA: DevSecOps versus Secure SDLC

#appsec #sdlc #development #programming

8 2

1 min read

Scott Gerlach

Apr 18 '20

Scanning the Damn Vulnerable Web App with StackHawk

#appsec #development #dast #security

8

10 min read

Tanya Janca

Apr 17 '20

Security is Everybody's Job - Part 2 - What is application security?

#devops #beginners #devsecops #appsec

30 3

4 min read

coadaflorin

Apr 13 '20

AppSec: Some testing technique explained DAST, SAST, IAST, OSA/SCA

#appsec #security

7 min read

Tanya Janca

Apr 8 '20

Security is Everybody's Job - Part 1 - DevSecOps

#devops #beginners #devsecops #appsec

55 2

3 min read

Tanya Janca

Apr 7 '20

AMA AppSec: What would you tell University Students about Application Security?

#ama #appsec #security #university

2 min read

coadaflorin

Apr 7 '20

Quick Security in VS Code with CodeSweep

#vscode #appsec #sast #security

2 min read

Katie McCaskey for Sonatype

Apr 3 '20

Ryan Lockard Names the Seven Deadly Sins of DevSecOps

#appsec #applicationsecurity #devsecops #newsandviews

1 min read

Fernando Guisso

Apr 2 '20

Conhecendo a OWASP

#owasp #appsec #infosec #security

3

3 min read

Ari Kalfus

Nov 23 '19

How AWS's EC2 Instance Metadata V2 Prevents SSRF

#security #cloud #aws #appsec

8

7 min read

Tanya Janca

Nov 18 '19

The Importance of Inventory

#appsec #infosec #security #inventory

6 min read

Tanya Janca for Microsoft Azure

Oct 2 '19

Pushing Left, Like a Boss - Part 10: Special AppSec Activities and Situations

#security #appsec #beginners

11

2 min read

Tanya Janca for Microsoft Azure

Sep 20 '19

Pushing Left, Like a Boss - Part 7: Code Review and Static Code Analysis

#applicationsecurity #appsec #beginners #security

49

1 min read

Tanya Janca for Microsoft Azure

Sep 19 '19

Pushing Left, Like a Boss - Part 6: Threat Modelling

#applicationsecurity #tutorial #beginners #appsec

18

1 min read

Tanya Janca for Microsoft Azure

Sep 19 '19

Pushing Left, Like a Boss, Part 5.14 Secure Coding Summary

#applicationsecurity #tutorial #beginners #appsec

17

1 min read

Tanya Janca for Microsoft Azure

Sep 16 '19

Pushing Left, Like a Boss — Part 5.13 — HTTPS only

#programming #appsec #beginners #security

18

1 min read

Farman Pirzada

Jul 8 '19

Security Champion

#securitychampion #appsec #infosec #owasp

2 min read

Tanya Janca for Microsoft Azure

May 15 '19

Pushing Left, Like a Boss — Part 5.2 — Use Safe Dependencies

#appsec #tutorial #beginners #security

18 3

1 min read

Eric

May 9 '19

Developers need to stop fearing the InfoSec Mafia

#security #appsec #infosec #applicationsecurity

10

1 min read

Tanya Janca for Microsoft Azure

Apr 16 '19

VAs, Scans and PenTests; not the same thing

#pentest #security #appsec #beginners

29 4

4 min read

Tanya Janca for Microsoft Azure

Apr 17 '19

Pushing Left, Like a Boss! -- Part 3: Secure Design

#design #appsec #beginners #security

15 1

1 min read

Tanya Janca for Microsoft Azure

Mar 30 '19

Pushing Left, Like a Boss: Part 1

#applicationsecurity #appsec #beginners #security

75 5

1 min read

Tanya Janca for OWASP DevSlop

Mar 23 '19

Security Headers for ASP.Net and .Net CORE

#securityheaders #dotnet #infosec #appsec

18

3 min read

Ari Kalfus

Nov 6 '18

Demystifying SOP and CSP, featuring CORS

#security #appsec #webdev

15

11 min read

Scott Arciszewski for Paragon Initiative Enterprises

Jan 31 '18

The Case for Automatic Updates

#security #infosec #appsec

11 1

5 min read

Katie McCaskey for Sonatype

Mar 30 '20

Nexus Vulnerability Scanner: Getting Started with Vulnerability Analysis

#vulnerabilities #security #appsec #applicationsecurity

1 min read

Michael Rossoni

Jan 18 '20

Hacking the SDLC: Win the Minds of your Developers

#appsec #devsecops #sdlc #productsecurity