<h3 id="heading-links">Links</h3>
<ul>
<li><p>[artigo + video] <a target="_blank" href="https://www.andrewhoog.com/post/technical-introduction-software-bill-of-materials-sbom/">Technical Introduction to Software Bill of Materials (SBOMs)</a></p>
</li>
<li><p>[artigo] <a target="_blank" href="https://thenewstack.io/5-best-practices-for-securing-your-api-gateway/">5 Best Practices for Securing Your API Gateway</a></p>
</li>
<li><p>[tool] <a target="_blank" href="https://owasp-risk-rating.com/">OWASP Risk Rating Calculator</a></p>
</li>
<li><p>[tool] <a target="_blank" href="https://github.com/goodwithtech/dockle">dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start</a></p>
</li>
<li><p>[tutorial] <a target="_blank" href="https://httptoolkit.com/blog/android-14-install-system-ca-certificate/">New ways to inject system CA certificates in Android 14</a></p>
</li>
<li><p>[academy] <a target="_blank" href="https://portswigger.net/web-security/nosql-injection">PortSwigger - NoSQL Injection</a></p>
</li>
<li><p>[vuln] <a target="_blank" href="https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/">CVE-2023-42793: Critical Authentication Bypass in JetBrains TeamCity CI/CD Servers</a></p>
</li>
<li><p>[video] Guia De AppSec - Secret Rotation:</p>
</li>
</ul>
<div class="embed-wrapper"><div class="embed-loading"><div class="loadingRow"></div><div class="loadingRow"></div></div><a class="embed-card" href="https://www.youtube.com/watch?v=1w6uStfemcg">https://www.youtube.com/watch?v=1w6uStfemcg</a></div>
<p> </p>
<h3 id="heading-siga-o-guia-de-appsec-nas-redes"><strong>Siga o Guia de AppSec nas redes!</strong></h3>
<p>Site: <a target="_blank" href="http://guiadeappsec.com.br"><strong><a href="http://guiadeappsec.com.br" class="autolinkedURL autolinkedURL-url" target="_blank">guiadeappsec.com.br</a></strong></a><strong>Youtube:</strong> <a target="_blank" href="http://youtube.com/@GuiadeAppSec%EF%BF%BCTwitter"><strong><a href="http://youtube.com/@GuiadeAppSec" class="autolinkedURL autolinkedURL-url" target="_blank">youtube.com/@GuiadeAppSec</a><br />Twitter</strong></a> <strong>/ X:</strong> <a target="_blank" href="http://twitter.com/guiadeappsec"><strong><a href="http://twitter.com/guiadeappsec" class="autolinkedURL autolinkedURL-url" target="_blank">twitter.com/guiadeappsec</a></strong></a></p>


### Links

* \[artigo + video\] [Technical Introduction to Software Bill of Materials (SBOMs)](https://www.andrewhoog.com/post/technical-introduction-software-bill-of-materials-sbom/)
    
* \[artigo\] [5 Best Practices for Securing Your API Gateway](https://thenewstack.io/5-best-practices-for-securing-your-api-gateway/)
    
* \[tool\] [OWASP Risk Rating Calculator](https://owasp-risk-rating.com/)
    
* \[tool\] [dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start](https://github.com/goodwithtech/dockle)
    
* \[tutorial\] [New ways to inject system CA certificates in Android 14](https://httptoolkit.com/blog/android-14-install-system-ca-certificate/)
    
* \[academy\] [PortSwigger - NoSQL Injection](https://portswigger.net/web-security/nosql-injection)
    
* \[vuln\] [CVE-2023-42793: Critical Authentication Bypass in JetBrains TeamCity CI/CD Servers](https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/)
    
* \[video\] Guia De AppSec - Secret Rotation:
    

%[https://www.youtube.com/watch?v=1w6uStfemcg] 

### **Siga o Guia de AppSec nas redes!**

Site: [**guiadeappsec.com.br**](http://guiadeappsec.com.br)**Youtube:** [**youtube.com/@GuiadeAppSec  
Twitter**](http://youtube.com/@GuiadeAppSec%EF%BF%BCTwitter) **/ X:** [**twitter.com/guiadeappsec**](http://twitter.com/guiadeappsec)

AppSec Newsletter 0010

Tornando a vida do security champion um pouco mais fácil a cada dia =)
