# AppSec Newsletter 0006

Bom dia champs! Chegamos a mais uma edição da nossa newsletter!

### Links

* \[artigo\] [A Guide to Threat Modelling for Developers](https://martinfowler.com/articles/agile-threat-modelling.html)
    
* \[artigo\] [Smashing the state machine: the true potential of web race conditions](https://portswigger.net/research/smashing-the-state-machine)
    
* \[curso - youtube\] [OWASP API Security Top 10 Course – Secure Your Web Apps (by Corey Ball)](https://www.youtube.com/watch?app=desktop&v=YYe0FdfdgDU&si=GPq5mfWtLbb6PjoQ)
    
* \[artigo\] [Infisical Open Source SecretOps: Apply it using GitOps approach](https://mrdevops.medium.com/infisical-open-source-secretops-apply-it-using-gitops-approach-245f57fcd67e)
    
* \[artigo\] [Proxying Burp Traffic through VPS using SOCKS Proxy](https://busk3r.medium.com/proxying-burp-traffic-through-vps-using-socks-proxy-b9abcc671aed)
    

### Vagas

* \[Google\] [Senior Strategic Security Consultant, Mandiant](https://www.linkedin.com/jobs/view/3707383477/?alternateChannel=search&refId=kFkk%2Bn9j7uPdAtiG0rS10g%3D%3D&trackingId=bOaP4JKscARqqZk1KKSe6Q%3D%3D)
    
* \[RecargaPay\] [Application Security Specialist](https://www.linkedin.com/jobs/view/3693362857/?alternateChannel=search&refId=iEp7xGF8OSwbJYQlnK3Zyw%3D%3D&trackingId=HQdEaHiL6m%2F4Dv6hHGaKWA%3D%3D&trk=d_flagship3_search_srp_jobs)
    

### **Siga o Guia de AppSec nas redes!**

Site: [**https://www.guiadeappsec.com.br/**  
Youtube](https://www.guiadeappsec.com.br/Youtube): [**https://www.youtube.com/@GuiadeAppSec**  
Twitter](https://www.youtube.com/@GuiadeAppSecTwitter) / X: [**https://twitter.com/guiadeappsec**](https://twitter.com/guiadeappsec)