#appsec

🚨 AI Is Already Inside Your SDLC. Can Security Keep Up?

🖼️

0Read More

🚨 AI Is Already Inside Your SDLC. Can Security Keep Up?

DEV Community·Maria·6 months ago

#JElJTNcd

#ai #cybersecurity #owasp #devops #appsec

AI is rapidly transforming software development, from copilots and AI-generated code to autonomous...

15s

AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

🖼️

0Read More

AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

DEV Community·Mohamed AboElKheir·6 months ago

#usqY9mru

#category #appsec #security #code #relevant

From Dev.to - security: AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

15s

Yes! It’s time to party!

Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

🖼️

0Read More

Yes! It’s time to party! Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

DEV Community·Johan Sydseter·6 months ago

#Q1QwNUr5

#ai #security #appsec #gamedev #hide

From Dev.to - ai: Yes! It’s time to party! Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

15s

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

🖼️

0Read More

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

DEV Community·Patience Mpofu·6 months ago

#MOg6lqgR

#security #career #webdev #appsec #code

From Dev.to - security: What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

15s

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

🖼️

0Read More

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

DEV Community·Patience Mpofu·6 months ago

#88Tu0KN4

#appsec #devops #suppression #false #confidence

From Dev.to - security: False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

15s

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

🖼️

0Read More

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

DEV Community·Patience Mpofu·6 months ago

#5kh6vazH

#rule #security #appsec #rules #confidence

Every SAST tool ships with a default ruleset. And every default ruleset has gaps. Sometimes the gap...

15s

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

🖼️

0Read More

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

DEV Community·Patience Mpofu·6 months ago

#Ifs2Z4UA

#appsec #security #tutorial #confidence #regex

When I set out to write detection rules for my SAST tool, I didn't start with a list of regex...

15s

Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

🖼️

0Read More

Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

DEV Community·GitHubOpenSource·6 months ago

#718jYs5e

#ai #penetration #web #appsec #shannon

From Dev.to - appsec: Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

15s

SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

🖼️

0Read More

SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

DEV Community·Dwayne McDaniel·6 months ago

#IuSelpob

#security #devops #appsec #code #trust

Denver likes a good origin story. The city still keeps a marker for Louis Ballast and the Humpty...

15s

🖼️

0Read More

Your Backend Trusts Your App Too Much

DEV Community·Vaibhav Shakya·6 months ago

#hfaPvJ2u

#backendsecurity #systemdesign #appsec #requests #validation

Most systems assume: “Requests coming from our app are safe.” That assumption breaks...

15s

0Read More

Transition from Dev to ProdSec / Appsec later to AI sec

Reddit r/cybersecurity·u/MathematicianNo8975·6 months ago

#KHETGdhI

#security #transition #prodsec #appsec #later

Hi all, I am currently working as senior software engineer with 10 YOE. I have partnered with Security team in many of my projects review. I do find the role very interesting.…

15s

Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

🖼️

0Read More

Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

DEV Community·Sonu Kapoor·6 months ago

#f09c4w2W

#v1100 #appsec #security #lite #developer

From Dev.to - security: Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

15s

If Your Security Scanner Can't See Attack Chains, You're Flying Blind

🖼️

0Read More

If Your Security Scanner Can't See Attack Chains, You're Flying Blind

DEV Community·Eldor Zufarov·6 months ago

#JQBc1AdG

#we #devsecops #appsec #cybersecurity #chain

A direct message for security professionals and decision-makers at SaaS startups, fintech companies,...

15s

What AppSec Engineers Actually Do (and Why It Matters)

🖼️

0Read More

What AppSec Engineers Actually Do (and Why It Matters)

DEV Community·Mohamed AboElKheir·6 months ago

#Fno8GgIb

#appsec #security #cybersecurity #design #tools

Imagine a team building a simple feature: an endpoint to let users download their invoices. The...

15s

The New Wave of Accessibility-Service Malware Explained

🖼️

0Read More

The New Wave of Accessibility-Service Malware Explained

DEV Community·Vaibhav Shakya·6 months ago

#n7QbvGdS

#cybersecurity #android #appsec #systemdesign #fintech

Accessibility Services were designed for assistive use cases. But today, they represent a sensitive trust boundary in Android systems. Once enabled by the user, an accessibility service can: Observe UI changes Read parts of screen content Attempt…

15s

SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS

🖼️

0Read More

SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS

DEV Community·Mark0·6 months ago

#ND4C6JZs

#cybersecurity #infosec #vulnerability #appsec #ai

SEC Consult has disclosed a security vulnerability in Kiuwan SAST (on-premise and cloud versions) regarding the improper enforcement of locked accounts when using Single Sign-On (SSO).…

15s

Menu

🚨 AI Is Already Inside Your SDLC. Can Security Keep Up?

AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

Yes! It’s time to party! Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

Your Backend Trusts Your App Too Much

Transition from Dev to ProdSec / Appsec later to AI sec

Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

If Your Security Scanner Can't See Attack Chains, You're Flying Blind

What AppSec Engineers Actually Do (and Why It Matters)

The New Wave of Accessibility-Service Malware Explained

SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS