Curated security research, vulnerabilities, advisories and tools for practitioners.

#appsec

Security coverage tagged appsec. (Page 6)

151.

XSS without HTML: Client-Side Template Injection with AngularJS

research | 2025-12-17 15:21 | portswigger.net | Original ↗ | .md | #appsec | #web-security | #xss

152.

[New Audit] ZIGChain launches DualDefense Contest With Up to $75,000 on HackenProof

blog | 2025-12-19 11:47 | hackenproof.com | Original ↗ | .md | #bug-bounty | #appsec | #announcement

153.

React & Next.js DoS Vulnerability (CVE-2025-55184): What You Need to Fix After React2Shell

vulnerability | High | 2025-12-12 00:00 | CVE-2025-55184 | aikido.dev | Original ↗ | .md | #appsec | #vulnerability-research | #denial-of-service

154.

SAST in the IDE is now free: Moving SAST to where development actually happens

blog | 2025-12-15 00:00 | aikido.dev | Original ↗ | .md | #appsec | #devsecops | #sast

155.

Burp On Tour 2025: bringing the AppSec community together around the world

blog | 2025-12-12 11:34 | portswigger.net | Original ↗ | .md | #ai-security | #appsec | #burp-suite

156.

DAST without disruption: Burp Suite DAST winter update 2025

blog | 2025-12-11 13:09 | portswigger.net | Original ↗ | .md | #appsec | #burp-suite | #portswigger

157.

Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysis

blog | 2025-12-11 12:00 | blog.trailofbits.com | Original ↗ | .md | #appsec | #vulnerability-research | #security-research

158.

Orthanc 1.12.9 User Impersonation

research | 2025-12-09 00:53 | CVE-2025-15581 | projectblack.io | Original ↗ | .md | #appsec | #vulnerability-research | #vulnerability

159.

How to detect React2Shell with Burp Suite

blog | 2025-12-05 13:53 | portswigger.net | Original ↗ | .md | #rce | #appsec | #burp-suite

160.

Introducing Wiz SAST: Where Code Risk Meets Cloud Context

blog | 2025-12-02 18:30 | wiz.io | Original ↗ | .md | #cloud | #appsec | #sast

161.

[New Audit] TraderBros launches DualDefense Contest With Up to $8,000 on HackenProof

blog | 2025-12-01 10:41 | hackenproof.com | Original ↗ | .md | #bug-bounty | #appsec | #announcement

162.

Prompt Injection Isn't a Vulnerability

research | 2025-11-24 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #bug-bounty | #appsec

163.

[New Audit] Panini America launches DualDefense Contest With Up to $18,000 on HackenProof

blog | 2025-11-24 14:08 | hackenproof.com | Original ↗ | .md | #bug-bounty | #appsec | #announcement

164.

CORS Security: Beyond Basic Configuration

blog | 2025-11-21 00:00 | aikido.dev | Original ↗ | .md | #appsec | #browser-security | #web-security

165.

The Security Imperative: Trust, Speed, and Integral Defense

blog | 2025-11-11 17:58 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #appsec

166.

AI Code Review Should Operate Like an Engineer

blog | 2025-11-10 16:26 | hackerone.com | Original ↗ | .md | #ai-security | #appsec | #devsecops

167.

The Foundation Modern AppSec Is Still Missing: Code to Cloud, Rebuilt the Right Way

blog | 2025-10-17 12:30 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #appsec

168.

Wiz Research Discovers One in Five Organizations Exposed to Systemic Risks in Vibe-Coded Applications - Here's How to Secure Them

blog | 2025-09-18 18:37 | wiz.io | Original ↗ | .md | #cloud-security | #appsec | #authentication

169.

Wiz Recognized as a Leader in the 2025 IDC MarketScape for ASPM

blog | 2025-09-09 19:52 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #cloud-security

170.

Top Vibe-Coding Security Risks

blog | 2025-08-29 00:00 | netlas.io | Original ↗ | .md | #ai-security | #appsec | #llm

171.

Secrets Found. Owners Identified. Issues Fixed.

blog | 2025-08-26 14:08 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #cloud-security

172.

Unpacking the 2025 Gartner Market Guide for CNAPP

blog | 2025-08-25 12:00 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #appsec

173.

How HackerOne Uses AI to Triage, Prioritize, and Validate Code Scanner Findings at Scale

blog | 2025-08-21 16:57 | hackerone.com | Original ↗ | .md | #ai-security | #appsec | #sast

174.

What Security Should Look Like When Built for Developers

blog | 2025-08-12 19:37 | wiz.io | Original ↗ | .md | #cloud-security | #appsec | #devsecops

175.

HTTP/1.1 Must Die: What This Means for AppSec Leadership

blog | 2025-08-06 22:23 | portswigger.net | Original ↗ | .md | #appsec | #request-smuggling | #http1-must-die

176.

What Is AI Penetration Testing? A Guide to Autonomous Security Testing

blog | 2025-07-25 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #cloud | #agentic-ai

177.

ASPM Tools: Essential Features & How to Evaluate Vendors

blog | 2025-07-24 00:00 | aikido.dev | Original ↗ | .md | #cloud | #appsec | #vulnerability-management

178.

The UK’s New Software Security Code of Practice and How JFrog Can Help

blog | 2025-07-16 11:10 | jfrog.com | Original ↗ | .md | #appsec | #compliance | #jfrog

179.

Why AppSec and CloudSec Belong Together in the Age of AI

blog | 2025-07-10 12:00 | wiz.io | Original ↗ | .md | #ai-security | #cloud-security | #appsec

180.

Detecting Authorization Flaws in Java Spring via Source Code Review (SCR)

blog | 2025-07-09 00:00 | netspi.com | Original ↗ | .md | #appsec | #access-control | #java

← Previous More →