AppSec Newsletter 0010

Skip to main content

Guia de AppSec :: Blog

Guia de AppSec :: Blog

Command Palette

Search for a command to run...

AppSec Newsletter 0010

PublishedOctober 2, 2023

•1 min read•View as Markdown

AppSec Newsletter 0010

Ben-Hur Santos Ott

On this page

Links Siga o Guia de AppSec nas redes!

Links

[artigo + video] Technical Introduction to Software Bill of Materials (SBOMs)
[artigo] 5 Best Practices for Securing Your API Gateway
[tool] OWASP Risk Rating Calculator
[tool] dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
[tutorial] New ways to inject system CA certificates in Android 14
[academy] PortSwigger - NoSQL Injection
[vuln] CVE-2023-42793: Critical Authentication Bypass in JetBrains TeamCity CI/CD Servers
[video] Guia De AppSec - Secret Rotation:

https://www.youtube.com/watch?v=1w6uStfemcg

Siga o Guia de AppSec nas redes!

Site: guiadeappsec.com.brYoutube: youtube.com/@GuiadeAppSec
Twitter / X: twitter.com/guiadeappsec

Comments

Join the discussion

No comments yet. Be the first to comment.

More from this blog

AppSec Newsletter 0044

Olá champs! Chegamos a mais uma edição da nossa newsletter! Vídeo novo no canal Você deve ter visto que as últimas semanas foram movimentadas com tantos pacotes NPM sendo comprometidos. No vídeo de hoje vamos falar sobre a estratégia de AppSec para m...

Sep 29, 2025·1 min read

AppSec Newsletter 0044

AppSec Newsletter 0043

Novo vídeo no canal! Se você desenvolve aplicações que recebem um input do usuário e envia ele para uma LLM processar, seja local ou remoto, é importantíssimo que você entenda os riscos que corre nesta integração. https://www.youtube.com/watch?v=O0ZG...

Jun 29, 2025·1 min read

AppSec Newsletter 0043

AppSec Newsletter 0042

Novo video no canal! A essa altura do campeonato você já deve ter ouvido sobre MCP. Bem, vamos entender um pouco mais do que é o protocolo e criar o nosso primeiro: https://www.youtube.com/watch?v=hT72pLOLRaQ Links 🏆 Lakera Gandalf - Prompt Injec...

May 4, 2025·1 min read

AppSec Newsletter 0042

AppSec Newsletter 0041

Links CVE-2025-29927: Next.js Middleware Authorization Bypass - Technical Analysis | Project Discovery GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment...

Mar 24, 2025·1 min read

AppSec Newsletter 0041

AppSec Newsletter 0040

Links 🎖️ Michelle Mesquita| DevSecOps com GitHub Actions Github | Secret scanning expands default pattern support MITRE | QUANTUM COMPUTING: QUANTIFYING THE CURRENT STATE OF THE ART TO ASSESS CYBERSECURITY THREATS CyberSecTools | The Largest Hub...

Feb 9, 2025·1 min read

AppSec Newsletter 0040

G

Guia de AppSec :: Blog

47 posts

Tornando a vida do security champion um pouco mais fácil a cada dia =)

#appsec #application-security #cybersecurity-1 #newsletter

© 2026 Guia de AppSec :: Blog

Members
Archive
Privacy
Terms