Appsec

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Cor E

Jun 9

The Miasma Worm: How AI Coding Agents Became a Supply Chain Attack Surface

#security #ai #devops #appsec

5 min read

Arashad Dodhiya

Jun 8

The Invisible Breach: Why Modern Web Frameworks Aren't Immune to LFI

#security #webdev #appsec #cybersecurity

8 min read

Cor E

Jun 6

OpenAI Built a Lockdown Mode Because Tool-Based Data Exfiltration Is Real — Here's What Catches It Earlier

#security #llm #appsec #cybersecurity

5 min read

Michael Oladele

Jun 4

Python’s Private Variables Aren't Private: An AppSec Reality Check

#python #appsec

2 min read

Cor E

Jun 4

Notification Hijacking: How WhatsApp and Slack Content Could Weaponize Google Gemini

#security #ai #llm #appsec

5 min read

Cor E

Jun 4

Hidden in Plain Sight: How Notification Prompt Injection Can Hijack Your AI Assistant

#security #ai #appsec #cybersecurity

4 min read

Cor E

Jun 1

How Meta's AI Support Bot Got Tricked Into Hijacking Instagram Accounts

#security #ai #llm #appsec

5 min read

Cor E

Jun 1

When Your Background AI Agent Becomes a C2 Server

#security #llm #appsec #cybersecurity

4 min read

Obot AI

Jun 1

Dangerous MCP OAuth Shortcuts are Ruining Security

#mcp #appsec #oauth #security

1 min read

Mohamed AboElKheir

May 26

GitHub RCE (CVE-2026-3854) - Deep Dive & Lessons Learned

#appsec #security #cybersecurity #design

8 min read

Jon Rose

May 26

The Business Context Problem: Why Vulnerability Severity Scores Lie

#security #cloud #devops #appsec

4 min read

Cor E

May 25

RAMPART Tests Your AI Agents in Dev. What Catches Malicious Tool Calls in Production?

#security #ai #llm #appsec

5 min read

Faith Sithole

May 21

The Ghost Platforms That Broke Our Payment Rails and How We Unchained Ourselves

#webdev #programming #security #appsec

3 min read

Faith Sithole

May 21

Platform Lockdowns Will Doom Your Business

#webdev #programming #security #appsec

2 min read

Faith Sithole

May 20

The Egregious Cost of Compliance: One Platform's Overly Broad Restrictions

#webdev #programming #security #appsec

2 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# appsec

The Miasma Worm: How AI Coding Agents Became a Supply Chain Attack Surface

The Invisible Breach: Why Modern Web Frameworks Aren't Immune to LFI

OpenAI Built a Lockdown Mode Because Tool-Based Data Exfiltration Is Real — Here's What Catches It Earlier

Python’s Private Variables Aren't Private: An AppSec Reality Check

Notification Hijacking: How WhatsApp and Slack Content Could Weaponize Google Gemini

Hidden in Plain Sight: How Notification Prompt Injection Can Hijack Your AI Assistant

How Meta's AI Support Bot Got Tricked Into Hijacking Instagram Accounts

When Your Background AI Agent Becomes a C2 Server

Dangerous MCP OAuth Shortcuts are Ruining Security

GitHub RCE (CVE-2026-3854) - Deep Dive & Lessons Learned

The Business Context Problem: Why Vulnerability Severity Scores Lie

RAMPART Tests Your AI Agents in Dev. What Catches Malicious Tool Calls in Production?

The Ghost Platforms That Broke Our Payment Rails and How We Unchained Ourselves

Platform Lockdowns Will Doom Your Business

The Egregious Cost of Compliance: One Platform's Overly Broad Restrictions