Curated security research, vulnerabilities, advisories and tools for practitioners.

#appsec

Security coverage tagged appsec. (Page 5)

121.

Get the Most from Testing Your Applications

blog | 2026-02-04 00:00 | bishopfox.com | original ↗ | #ai-security | #cloud | #appsec

122.

AI Pentesting: Minimum Safety Requirements for Security Testing

blog | 2026-02-03 00:00 | aikido.dev | original ↗ | #ai-security | #appsec | #security-testing

123.

Secure SDLC for Engineering Teams (+ Checklist)

blog | 2026-02-02 00:00 | aikido.dev | original ↗ | #appsec | #devsecops | #developer-security

124.

Tales from the Trace: How Context-Aware AI Redefines Vulnerability Reports

blog | 2026-01-27 13:00 | xbow.com | original ↗ | #ai-security | #appsec | #remediation

125.

The Fragile Lock: Novel Bypasses For SAML Authentication

research | 2026-01-21 10:34 | portswigger.net | original ↗ | #appsec | #ruby | #authentication-bypass

126.

EVerest security audit

research | 2026-01-19 23:00 | blog.quarkslab.com | original ↗ | #appsec | #vulnerability-research | #vulnerability

127.

The 282% ROI of Unified Security

blog | 2026-01-21 13:00 | jfrog.com | original ↗ | #supply-chain | #appsec | #jfrog

128.

Why LLMs Hallucinate Vulnerabilities

research | 2026-01-15 21:33 | xbow.com | original ↗ | #ai-security | #appsec | #llm

129.

[New Audit] Mawari launches DualDefense Contest With Up to $9,000 on HackenProof

blog | 2026-01-15 16:06 | hackenproof.com | original ↗ | #bug-bounty | #appsec | #announcement

130.

Dojo challenge #47 APICrash solution

blog | 2026-01-14 15:19 | yeswehack.com | original ↗ | #appsec | #ctf | #web-security

131.

Your code has vibes, my exploits have receipts

blog | 2026-01-13 13:44 | bugcrowd.com | original ↗ | #ai-security | #bug-bounty | #appsec

132.

SAST vs SCA: Securing the Code You Write and the Code You Depend On

blog | 2026-01-06 00:00 | aikido.dev | original ↗ | #supply-chain | #appsec | #vulnerability-management

133.

IDOR Vulnerabilities Explained: Why They Persist in Modern Applications

blog | 2026-01-02 00:00 | aikido.dev | original ↗ | #appsec | #access-control | #web-security

134.

Blind trust: what is hidden behind the process of creating your PDF file?

research | 2025-12-29 11:57 | swarm.ptsecurity.com | original ↗ | #appsec | #vulnerability-research | #web-security

135.

Why Enterprise and Fortune 500 Companies are Leaving Snyk and Checkmarx for JFrog

blog | 2025-12-31 19:30 | jfrog.com | original ↗ | #supply-chain | #appsec | #jfrog

136.

JFrog vs Checkmarx: An AppSec Solution Comparison

blog | 2025-12-31 15:24 | jfrog.com | original ↗ | #ai-security | #supply-chain | #appsec

137.

Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams

blog | 2025-12-31 13:49 | wiz.io | original ↗ | #cloud-security | #appsec | #security-metrics

138.

JFrog vs Snyk: Why Effective AppSec Must Move Beyond Source Code

blog | 2025-12-30 15:13 | jfrog.com | original ↗ | #supply-chain | #appsec | #jfrog

139.

The Breach You Didn’t Expect: Your AppSec Stack

blog | 2025-12-22 18:52 | jfrog.com | original ↗ | #supply-chain | #appsec | #devsecops

140.

XSS without HTML: Client-Side Template Injection with AngularJS

research | 2025-12-17 15:21 | portswigger.net | original ↗ | #appsec | #web-security | #xss

141.

[New Audit] ZIGChain launches DualDefense Contest With Up to $75,000 on HackenProof

blog | 2025-12-19 11:47 | hackenproof.com | original ↗ | #bug-bounty | #appsec | #announcement

142.

React & Next.js DoS Vulnerability (CVE-2025-55184): What You Need to Fix After React2Shell

vulnerability | High | 2025-12-12 00:00 | CVE-2025-55184 | aikido.dev | original ↗ | #appsec | #vulnerability-research | #denial-of-service

143.

SAST in the IDE is now free: Moving SAST to where development actually happens

blog | 2025-12-15 00:00 | aikido.dev | original ↗ | #appsec | #devsecops | #sast

144.

Burp On Tour 2025: bringing the AppSec community together around the world

blog | 2025-12-12 11:34 | portswigger.net | original ↗ | #ai-security | #appsec | #burp-suite

145.

DAST without disruption: Burp Suite DAST winter update 2025

blog | 2025-12-11 13:09 | portswigger.net | original ↗ | #appsec | #burp-suite | #portswigger

146.

Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysis

blog | 2025-12-11 12:00 | blog.trailofbits.com | original ↗ | #appsec | #vulnerability-research | #security-research

147.

Orthanc 1.12.9 User Impersonation

research | 2025-12-09 00:53 | CVE-2025-15581 | projectblack.io | original ↗ | #appsec | #vulnerability-research | #vulnerability

148.

How to detect React2Shell with Burp Suite

blog | 2025-12-05 13:53 | portswigger.net | original ↗ | #rce | #appsec | #burp-suite

149.

Introducing Wiz SAST: Where Code Risk Meets Cloud Context

blog | 2025-12-02 18:30 | wiz.io | original ↗ | #cloud | #appsec | #sast

150.

[New Audit] TraderBros launches DualDefense Contest With Up to $8,000 on HackenProof

blog | 2025-12-01 10:41 | hackenproof.com | original ↗ | #bug-bounty | #appsec | #announcement

← Previous More →