# AppSec Newsletter 0004

E chegamos a mais uma edição da nossa newsletter semanal!

* \[video\] [Gamifying Security by Github](https://www.youtube.com/watch?v=HbhnZSPqT5k)
    
* \[tool\] [Nuclei Templates Editor](https://templates.nuclei.sh/) (coooom IA óbvio)
    
* \[artigo\] [Demystifying DREAD and STRIDE Threat Modeling for Kubernetes Security](https://www.practical-devsecops.com/demystifying-dread-and-stride-threat-modeling-for-kubernetes-security/) by Practical DevSecOps
    
* \[webinar\] [PCI Compliance for API Security](https://www.crowdcast.io/c/apisecu-pcidss-apisecurity?utm_source=au&utm_medium=bnr) by APIsec University
    
* \[artigo\] [What's new for security in Kubernetes 1.28](https://securitylabs.datadoghq.com/articles/whats-new-for-security-in-kubernetes-128/) by Datadog
    
* \[artigo\] [VS Code’s Token Security: Keeping Your Secrets… Not So Secretly](https://cycode.com/blog/exposing-vscode-secrets/) by cycode
    
* \[artigo\] [What's New in CVSS v4](https://www.rapid7.com/blog/post/2023/08/14/whats-new-in-cvss-v4/) by Rapid7
    

---

### Siga o Guia de AppSec nas redes!

Youtube: [https://www.youtube.com/@GuiadeAppSec](https://www.youtube.com/@GuiadeAppSec)

Twitter / X: [https://twitter.com/guiadeappsec](https://twitter.com/guiadeappsec)

Site: [https://www.guiadeappsec.com.br/](https://www.guiadeappsec.com.br/)