Curated security research, vulnerabilities, advisories and tools for practitioners.

#appsec

Security coverage tagged appsec. (Page 7)

181.

OWASP: Top 10 Web Application Security Risks

blog | 2025-02-10 00:00 | netlas.io | original ↗ | #appsec | #web-security | #owasp

182.

The complexities of scaling AppSec teams and how to address them in 2025

blog | 2025-01-28 13:08 | portswigger.net | original ↗ | #appsec | #devsecops | #compliance

183.

The Startup's Open-Source Guide to Application Security

blog | 2024-12-23 00:00 | aikido.dev | original ↗ | #cloud | #appsec | #open-source

184.

Authorized Agility: Wiz adds Code Security in the FedRAMP offering (Wiz for Gov)

blog | 2024-12-09 12:00 | wiz.io | original ↗ | #cloud | #supply-chain | #appsec

185.

Balancing Security: When to Leverage Open-Source Tools vs. Commercial Tools

blog | 2024-11-15 00:00 | aikido.dev | original ↗ | #appsec | #vulnerability-management | #open-source

186.

Application Pen Testing: Point-In-Time vs Ongoing Approaches Explained

blog | 2024-11-07 00:00 | bishopfox.com | original ↗ | #appsec | #continuous-testing | #web-security

187.

API Security: The 6 biggest challenges AppSec teams face, and how to solve them.

blog | 2024-09-24 10:01 | portswigger.net | original ↗ | #appsec | #api-security | #survey

188.

Non-Actionable Findings in 3rd-party Security Scanners...and How to Identify Them

blog | 2024-09-16 00:00 | bughunters.google.com | original ↗ | #bug-bounty | #appsec | #false-positive

189.

Wiz Code: Experience True ASPM With Code-to-Cloud Context

blog | 2024-09-12 16:11 | wiz.io | original ↗ | #cloud | #cloud-security | #appsec

190.

Introducing Wiz Code: transform your AppSec with Wiz

blog | 2024-09-10 12:50 | wiz.io | original ↗ | #cloud | #supply-chain | #cloud-security

191.

Racing against time: An introduction to race conditions

blog | 2024-08-21 15:00 | bugcrowd.com | original ↗ | #bug-bounty | #appsec | #web-security

192.

Why we’re stoked to partner with Laravel

blog | 2024-07-08 00:00 | aikido.dev | original ↗ | #appsec | #php | #partnership

193.

DIY guide: ‘Build vs buy’ your OSS code scanning and app security toolkit

blog | 2024-06-11 00:00 | aikido.dev | original ↗ | #appsec | #devsecops | #open-source

194.

Top 10 app security problems and how to protect yourself

blog | 2024-05-28 00:00 | aikido.dev | original ↗ | #appsec | #vulnerability-management | #secure-coding

195.

Security@: The Top 3 Bug Bounty Lessons From Security Leaders

blog | 2024-05-20 16:33 | hackerone.com | original ↗ | #bug-bounty | #appsec | #vulnerability-management

196.

We just raised our $17 million Series A

blog | 2024-05-02 00:00 | aikido.dev | original ↗ | #appsec | #developer-security | #aikido

197.

HackerOne’s In-Depth Approach to Vulnerability Triage and Validation

vulnerability | 2024-03-14 16:00 | hackerone.com | original ↗ | #bug-bounty | #appsec | #vdp

198.

Secure your blockchain project from the start

blog | 2024-03-13 13:00 | blog.trailofbits.com | original ↗ | #web3 | #appsec | #smart-contracts

199.

Shift Left is Dead: A Post Mortem

blog | 2024-03-13 16:12 | hackerone.com | original ↗ | #appsec | #devsecops | #security-culture

200.

Ensuring Mobile Application Security with Expo

blog | 2024-02-15 02:29 | hackerone.com | original ↗ | #appsec | #network-security | #mobile-security

201.

Common Security Issues in Implementing OAuth 2.0 and How to Mitigate Them

blog | 2024-02-12 01:30 | hackerone.com | original ↗ | #appsec | #web-security | #authentication

202.

iOS App Secret Management: Best Practices for Keeping Your Data Secure

blog | 2024-02-09 08:37 | hackerone.com | original ↗ | #appsec | #secrets-management | #mobile-security

203.

NestJS vs Express: A Comparative Analysis for Secure and Efficient Web Development

blog | 2024-02-07 03:05 | hackerone.com | original ↗ | #appsec | #typescript | #nodejs

204.

Certificate Pinning: Enhancing Client-Side Security

blog | 2024-02-01 02:54 | hackerone.com | original ↗ | #appsec | #mobile-security | #tls

205.

Catching OpenSSL misuse using CodeQL

blog | 2023-12-22 14:00 | blog.trailofbits.com | original ↗ | #appsec | #cryptography | #c

206.

Code Reviewer Spotlight: Matt Buzanowski

blog | 2023-12-05 10:13 | hackerone.com | original ↗ | #appsec | #code-review | #secure-coding

207.

Integrating Generative AI into Your Application: A Security Perspective

blog | 2023-12-05 05:08 | hackerone.com | original ↗ | #ai-security | #appsec | #llm

208.

Golang's Improper Error Handling: A Subtle Path to Security Vulnerabilities

blog | 2023-11-30 03:41 | hackerone.com | original ↗ | #appsec | #authentication-bypass | #secure-coding

209.

Tackling the Goliath: Effective Strategies for Reviewing Large Codebases

blog | 2023-11-29 07:06 | hackerone.com | original ↗ | #appsec | #code-review | #security-audit

210.

Mercado Libre’s Journey to a Public Bug Bounty Program

blog | 2023-11-28 17:21 | hackerone.com | original ↗ | #bug-bounty | #appsec | #crowdsourced-security

← Previous More →