#appsec

🚨 AI Is Already Inside Your SDLC. Can Security Keep Up?

🖼️

0

🚨 AI Is Already Inside Your SDLC. Can Security Keep Up?

DEV Community·Maria·5 months ago

#JElJTNcd

#ai #cybersecurity #owasp #devops #appsec #generated

AI is rapidly transforming software development, from copilots and AI-generated code to autonomous...

15s

AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

🖼️

0

AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

DEV Community·Mohamed AboElKheir·5 months ago

#usqY9mru

#category #appsec #security #code #relevant #user

From Dev.to - security: AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

15s

Yes! It’s time to party!

Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

🖼️

0

Yes! It’s time to party! Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

DEV Community·Johan Sydseter·5 months ago

#Q1QwNUr5

#ai #security #appsec #gamedev #hide #comment

From Dev.to - ai: Yes! It’s time to party! Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

15s

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

🖼️

0

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

DEV Community·Patience Mpofu·5 months ago

#MOg6lqgR

#security #career #webdev #appsec #code #software

From Dev.to - security: What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

15s

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

🖼️

0

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

DEV Community·Patience Mpofu·5 months ago

#88Tu0KN4

#appsec #devops #suppression #false #confidence #fullscreen

From Dev.to - security: False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

15s

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

🖼️

0

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

DEV Community·Patience Mpofu·5 months ago

#5kh6vazH

#rule #security #appsec #rules #fullscreen #confidence

Every SAST tool ships with a default ruleset. And every default ruleset has gaps. Sometimes the gap...

15s

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

🖼️

0

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

DEV Community·Patience Mpofu·5 months ago

#Ifs2Z4UA

#appsec #security #tutorial #confidence #regex #fullscreen

When I set out to write detection rules for my SAST tool, I didn't start with a list of regex...

15s

Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

🖼️

0

Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

DEV Community·GitHubOpenSource·5 months ago

#718jYs5e

#ai #penetration #web #appsec #shannon #security

From Dev.to - appsec: Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

15s

SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

🖼️

0

SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

DEV Community·Dwayne McDaniel·5 months ago

#IuSelpob

#security #devops #appsec #code #trust #teams

Denver likes a good origin story. The city still keeps a marker for Louis Ballast and the Humpty...

15s

🖼️

0

Your Backend Trusts Your App Too Much

DEV Community·Vaibhav Shakya·5 months ago

#hfaPvJ2u

#backendsecurity #systemdesign #appsec #fullscreen #requests #validation

Most systems assume: “Requests coming from our app are safe.” That assumption breaks...

15s

📰

0

Transition from Dev to ProdSec / Appsec later to AI sec

Reddit r/cybersecurity·u/MathematicianNo8975·5 months ago

#KHETGdhI

#security #transition #prodsec #appsec #later #article

Hi all, I am currently working as senior software engineer with 10 YOE. I have partnered with Security team in many of my projects review. I do find the role very interesting.…

15s

Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

🖼️

0

Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

DEV Community·Sonu Kapoor·5 months ago

#f09c4w2W

#v1100 #appsec #security #lite #developer #owasp

From Dev.to - security: Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

15s

If Your Security Scanner Can't See Attack Chains, You're Flying Blind

🖼️

0

If Your Security Scanner Can't See Attack Chains, You're Flying Blind

DEV Community·Eldor Zufarov·5 months ago

#JQBc1AdG

#we #devsecops #appsec #cybersecurity #chain #security

A direct message for security professionals and decision-makers at SaaS startups, fintech companies,...

15s

What AppSec Engineers Actually Do (and Why It Matters)

🖼️

0

What AppSec Engineers Actually Do (and Why It Matters)

DEV Community·Mohamed AboElKheir·5 months ago

#Fno8GgIb

#appsec #security #cybersecurity #design #tools #review

Imagine a team building a simple feature: an endpoint to let users download their invoices. The...

15s

The New Wave of Accessibility-Service Malware Explained

🖼️

0

The New Wave of Accessibility-Service Malware Explained

DEV Community·Vaibhav Shakya·6 months ago

#n7QbvGdS

#cybersecurity #android #appsec #systemdesign #fintech #accessibility

Accessibility Services were designed for assistive use cases. But today, they represent a sensitive trust boundary in Android systems. Once enabled by the user, an accessibility service can: Observe UI changes Read parts of screen content Attempt…

15s

SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS

🖼️

0

SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS

DEV Community·Mark0·6 months ago

#ND4C6JZs

#cybersecurity #infosec #vulnerability #appsec #ai #kiuwan

SEC Consult has disclosed a security vulnerability in Kiuwan SAST (on-premise and cloud versions) regarding the improper enforcement of locked accounts when using Single Sign-On (SSO).…

15s

Menu

🚨 AI Is Already Inside Your SDLC. Can Security Keep Up?

AI-Powered Security Code Reviews That Actually Work: A Threat-Model-First Methodology

Yes! It’s time to party! Again!! You may ask, but this time we have combined the strength of the OWASP Foundation’s open-source projects. 25 years of accumulated knowledge and wisdom distilled onto 158 playing cards.

What Building a SAST Tool Taught Me About AppSec That 13 Years of Software Engineering Didn't

False Positives in SAST — How I Built Suppression Into My Scanner and Why It Matters

Writing Custom SAST Rules for Vulnerabilities Your Scanner Doesn't Cover

How I Modelled the OWASP Top 10 Into a YAML Rule Engine

Shannon: Your Autonomous AI Pentester for Bulletproof Web Apps!

SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top

Your Backend Trusts Your App Too Much

Transition from Dev to ProdSec / Appsec later to AI sec

Why I Built CVE Lite CLI: Moving From "Security Debt" to Real-Time Scanning

If Your Security Scanner Can't See Attack Chains, You're Flying Blind

What AppSec Engineers Actually Do (and Why It Matters)

The New Wave of Accessibility-Service Malware Explained

SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS