<ul>
<li>[vídeo] <a target="_blank" href="https://www.youtube.com/watch?v=J5XV41Lt2RQ">Using IAST to Unlock the Benefits of DevSecOps • Jeff Williams • YOW! 2022</a>
</li>
<li>[artigo] <a target="_blank" href="https://www.openappsec.io/post/how-to-switch-to-a-modsecurity-waf-alternative-before-it-is-eol-in-march-2024?utm_source=linkedin&amp;utm_medium=social&amp;utm_campaign=owasp&amp;utm_content=modsecurity">How to switch to a ModSecurity WAF alternative before it is EOL in March 2024?</a>
</li>
<li>[site] <a target="_blank" href="https://tib3rius.com/interview-questions.html">Web AppSec Interview Questions by Tib3rius</a>
</li>
<li>[framework] <a target="_blank" href="https://csrc.nist.gov/Projects/ssdf">SSDF - Secure Software Development Framework by NIST</a>
</li>
<li>[tutorial] <a target="_blank" href="https://danaepp.com/writing-api-exploits-using-postman-flows">Writing API exploits using Postman Flows by Dana Epp</a>
</li>
<li>[anúncio] <a target="_blank" href="https://proton.me/blog/proton-captcha">Introducing Proton CAPTCHA</a>
</li>
<li>[artigo] <a target="_blank" href="https://www.bleepingcomputer.com/news/microsoft/microsoft-leaks-38tb-of-private-data-via-unsecured-azure-storage/">Microsoft leaks 38TB of private data via unsecured Azure storage</a>
</li>
</ul>
<h3 id="heading-siga-o-guia-de-appsec-nas-redes">Siga o Guia de AppSec nas redes!</h3>
Site: <a target="_blank" href="https://www.guiadeappsec.com.br/%EF%BF%BCYoutube"><a href="https://www.guiadeappsec.com.br/" class="autolinkedURL autolinkedURL-url" target="_blank">guiadeappsec.com.br</a> Youtube</a>: <a target="_blank" href="https://www.youtube.com/@GuiadeAppSec%EF%BF%BCTwitter"><a href="https://www.youtube.com/@GuiadeAppSec" class="autolinkedURL autolinkedURL-url" target="_blank">youtube.com/@GuiadeAppSec</a> Twitter</a> / X: <a target="_blank" href="https://twitter.com/guiadeappsec"><a href="https://twitter.com/guiadeappsec" class="autolinkedURL autolinkedURL-url" target="_blank">twitter.com/guiadeappsec</a></a>

* \[vídeo\] [Using IAST to Unlock the Benefits of DevSecOps • Jeff Williams • YOW! 2022](https://www.youtube.com/watch?v=J5XV41Lt2RQ)
    
* \[artigo\] [How to switch to a ModSecurity WAF alternative before it is EOL in March 2024?](https://www.openappsec.io/post/how-to-switch-to-a-modsecurity-waf-alternative-before-it-is-eol-in-march-2024?utm_source=linkedin&utm_medium=social&utm_campaign=owasp&utm_content=modsecurity)
    
* \[site\] [Web AppSec Interview Questions by Tib3rius](https://tib3rius.com/interview-questions.html)
    
* \[framework\] [SSDF - Secure Software Development Framework by NIST](https://csrc.nist.gov/Projects/ssdf)
    
* \[tutorial\] [Writing API exploits using Postman Flows by Dana Epp](https://danaepp.com/writing-api-exploits-using-postman-flows)
    
* \[anúncio\] [Introducing Proton CAPTCHA](https://proton.me/blog/proton-captcha)
    
* \[artigo\] [Microsoft leaks 38TB of private data via unsecured Azure storage](https://www.bleepingcomputer.com/news/microsoft/microsoft-leaks-38tb-of-private-data-via-unsecured-azure-storage/)
    

### **Siga o Guia de AppSec nas redes!**

Site: [**https://www.guiadeappsec.com.br/**  
Youtube](https://www.guiadeappsec.com.br/%EF%BF%BCYoutube): [**https://www.youtube.com/@GuiadeAppSec**  
Twitter](https://www.youtube.com/@GuiadeAppSec%EF%BF%BCTwitter) / X: [**https://twitter.com/guiadeappsec**](https://twitter.com/guiadeappsec)

AppSec Newsletter 0009

Tornando a vida do security champion um pouco mais fácil a cada dia =)
