DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Websites Are Learning to Gaslight Bots, and Honestly, Good

Websites Are Learning to Gaslight Bots, and Honestly, Good

1
Comments
3 min read
Your Lambda Has Admin on S3 and Doesn't Know It

Your Lambda Has Admin on S3 and Doesn't Know It

Comments
9 min read
We Gave AI Agents Shell Access, Now We Need AI to Watch Them

We Gave AI Agents Shell Access, Now We Need AI to Watch Them

2
Comments
3 min read
Why Penetration Testing is Important for Application Security: Top 7 Reasons

Why Penetration Testing is Important for Application Security: Top 7 Reasons

Comments
8 min read
What to fix first when everything is critical

What to fix first when everything is critical

Comments
6 min read
The Secure Code Review Challenge — Solution #6: 📥 FileDrop (Username Is User Input Too)

The Secure Code Review Challenge — Solution #6: 📥 FileDrop (Username Is User Input Too)

Comments
13 min read
Your Deny Policy Blocks Six Privesc Paths. There Are Nine.

Your Deny Policy Blocks Six Privesc Paths. There Are Nine.

Comments
8 min read
Why `Resource: bucket/${tenant}/*` is Not Enough

Why `Resource: bucket/${tenant}/*` is Not Enough

Comments
7 min read
Your S3 bucket is encrypted at rest. It is not encrypted in transit by default.

Your S3 bucket is encrypted at rest. It is not encrypted in transit by default.

Comments
5 min read
The Line of Code That Makes Every Encryption Unique — Even With the Same Password

The Line of Code That Makes Every Encryption Unique — Even With the Same Password

Comments 1
3 min read
Salesbleed Isn't a Salesforce Bug. It's What Happens When Agents Trust Their Inputs

Salesbleed Isn't a Salesforce Bug. It's What Happens When Agents Trust Their Inputs

1
Comments 1
3 min read
When Your AI Agent Bypasses a Government Firewall and Nobody Notices for Three Months

When Your AI Agent Bypasses a Government Firewall and Nobody Notices for Three Months

2
Comments
6 min read
An Undocumented Preference File Is All It Took to Hijack an AI Assistant

An Undocumented Preference File Is All It Took to Hijack an AI Assistant

1
Comments
3 min read
Open-Sourcing Code Doesn't Undo Encrypting the Evidence

Open-Sourcing Code Doesn't Undo Encrypting the Evidence

1
Comments
3 min read
Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked

Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.