DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The AI endpoint that charges you money when somebody abuses it

The AI endpoint that charges you money when somebody abuses it

Comments 1
5 min read
📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

Comments
10 min read
Secure Code Review: How It Differs From Everyday Code Review, With a 2026 Checklist

Secure Code Review: How It Differs From Everyday Code Review, With a 2026 Checklist

Comments
10 min read
How GitGuardian Secures the Credential Layer: From Discovery to Remediation

How GitGuardian Secures the Credential Layer: From Discovery to Remediation

Comments
16 min read
Stored Prompt Injection Through the API Gateway: The Attack Lives in the Gap Between Two Authorized Calls

Stored Prompt Injection Through the API Gateway: The Attack Lives in the Gap Between Two Authorized Calls

1
Comments
5 min read
Threat modeling a feature in 20 minutes

Threat modeling a feature in 20 minutes

Comments
1 min read
🗂️ Path Traversal: Why Your ../ Filter Fails (and the Fix That Holds)

🗂️ Path Traversal: Why Your ../ Filter Fails (and the Fix That Holds)

Comments
8 min read
A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

3
Comments 1
5 min read
Notes from triaging forty SSRF reports

Notes from triaging forty SSRF reports

Comments
1 min read
Find the Vulnerability Hiding Between the Features

Find the Vulnerability Hiding Between the Features

Comments
4 min read
Railway October 2026 Incident: Treat Every Environment Variable as Exposed

Railway October 2026 Incident: Treat Every Environment Variable as Exposed

1
Comments
2 min read
JANISSARY 7.3.0: F1 0.921, reproducible in one command

JANISSARY 7.3.0: F1 0.921, reproducible in one command

Comments
3 min read
Responding to php2shell When You Don't Know Your Secrets

Responding to php2shell When You Don't Know Your Secrets

1
Comments
7 min read
What a Youden index of 77 actually means on the OWASP Benchmark

What a Youden index of 77 actually means on the OWASP Benchmark

Comments
1 min read
AI-automated attacks are forcing application security to automate defense

AI-automated attacks are forcing application security to automate defense

Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.