# AppSec Newsletter 0009

* \[vídeo\] [Using IAST to Unlock the Benefits of DevSecOps • Jeff Williams • YOW! 2022](https://www.youtube.com/watch?v=J5XV41Lt2RQ)
    
* \[artigo\] [How to switch to a ModSecurity WAF alternative before it is EOL in March 2024?](https://www.openappsec.io/post/how-to-switch-to-a-modsecurity-waf-alternative-before-it-is-eol-in-march-2024?utm_source=linkedin&utm_medium=social&utm_campaign=owasp&utm_content=modsecurity)
    
* \[site\] [Web AppSec Interview Questions by Tib3rius](https://tib3rius.com/interview-questions.html)
    
* \[framework\] [SSDF - Secure Software Development Framework by NIST](https://csrc.nist.gov/Projects/ssdf)
    
* \[tutorial\] [Writing API exploits using Postman Flows by Dana Epp](https://danaepp.com/writing-api-exploits-using-postman-flows)
    
* \[anúncio\] [Introducing Proton CAPTCHA](https://proton.me/blog/proton-captcha)
    
* \[artigo\] [Microsoft leaks 38TB of private data via unsecured Azure storage](https://www.bleepingcomputer.com/news/microsoft/microsoft-leaks-38tb-of-private-data-via-unsecured-azure-storage/)
    

### **Siga o Guia de AppSec nas redes!**

Site: [**https://www.guiadeappsec.com.br/**  
Youtube](https://www.guiadeappsec.com.br/%EF%BF%BCYoutube): [**https://www.youtube.com/@GuiadeAppSec**  
Twitter](https://www.youtube.com/@GuiadeAppSec%EF%BF%BCTwitter) / X: [**https://twitter.com/guiadeappsec**](https://twitter.com/guiadeappsec)