Olá champs! Chegou mais uma edição da nossa AppSec Newsletter!

Links

• Hashcorp muda licença de seus produtos

• New Python URL Parsing Flaw Could Enable Command Execution Attacks

• .NET developers alert: Moq NuGET package exfiltrates user emails from git

• (video) How to Hack ArgoCD to Cluster Administrator (by John Hammond)

• (tool) navginx: navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities

• NIST Drafts Major Update to Its Widely Used Cybersecurity Framework

Vagas

• Mercado Livre: Cyber Security Engineer

• Nova8: Analista de Segurança da Informação Sênior - AppSec