DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your S3 bucket is encrypted at rest. It is not encrypted in transit by default.
bala_paranj_059d338e44e7e profile

Your S3 bucket is encrypted at rest. It is not encrypted in transit by default.

#security #aws #cloud #appsec
Comments
5 min read
The Line of Code That Makes Every Encryption Unique — Even With the Same Password
bijan53c profile

The Line of Code That Makes Every Encryption Unique — Even With the Same Password

#cryptography #python #appsec #softwareengineering
Comments 1
3 min read
Salesbleed Isn't a Salesforce Bug. It's What Happens When Agents Trust Their Inputs
coridev profile

Salesbleed Isn't a Salesforce Bug. It's What Happens When Agents Trust Their Inputs

#security #ai #llm #appsec
1
Comments 1
3 min read
When Your AI Agent Bypasses a Government Firewall and Nobody Notices for Three Months
coridev profile

When Your AI Agent Bypasses a Government Firewall and Nobody Notices for Three Months

#security #ai #appsec #cybersecurity
2
Comments
6 min read
Open-Sourcing Code Doesn't Undo Encrypting the Evidence
coridev profile

Open-Sourcing Code Doesn't Undo Encrypting the Evidence

#security #ai #appsec #cybersecurity
1
Comments
3 min read
An Undocumented Preference File Is All It Took to Hijack an AI Assistant
coridev profile

An Undocumented Preference File Is All It Took to Hijack an AI Assistant

#security #ai #cybersecurity #appsec
1
Comments
3 min read
Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked
thefluxread profile

Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked

#aisafety #appsec #bugbounty #claudeai
Comments
4 min read
Source Code in a Public Bucket: When .git/ Survives Deployment
bala_paranj_059d338e44e7e profile

Source Code in a Public Bucket: When .git/ Survives Deployment

#security #aws #cloud #appsec
Comments 3
7 min read
One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In
coridev profile

One Extension, Five Browsers, Zero Malicious Code: The Agent Hijack Nobody Priced In

#security #ai #llm #appsec
1
Comments
3 min read
Your AI Agent Isn't Broken. It's Doing Exactly What You Trained It To Do
coridev profile

Your AI Agent Isn't Broken. It's Doing Exactly What You Trained It To Do

#security #ai #appsec #devops
1
Comments 1
3 min read
When an Upload Form Becomes a Foothold: Broad S3 Write Scope
bala_paranj_059d338e44e7e profile

When an Upload Form Becomes a Foothold: Broad S3 Write Scope

#security #aws #cloud #appsec
Comments 2
7 min read
AWS S3 Bucket Security: Find the Secrets Hiding Outside Git
dwayne_mcdaniel profile

AWS S3 Bucket Security: Find the Secrets Hiding Outside Git

#aws #security #appsec #cloud
Comments
8 min read
AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection
dwayne_mcdaniel profile

AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

#security #ai #appsec #devsecops
Comments
10 min read
Suffix Matching Is Not Authorization: Lessons from CVE-2026-49869 in Kestra
jeffreyciend profile

Suffix Matching Is Not Authorization: Lessons from CVE-2026-49869 in Kestra

#security #authentication #appsec #kestra
Comments
3 min read
The Bucket You Deleted Is Still in Your DNS: S3 Bucket Takeover at Bime
bala_paranj_059d338e44e7e profile

The Bucket You Deleted Is Still in Your DNS: S3 Bucket Takeover at Bime

#security #aws #cloud #appsec
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.