# AppSec Newsletter 0011

* \[artigo\] [GitLab’s Security Officer on an Easier Path to App Security](https://thenewstack.io/gitlabs-security-officer-on-an-easier-path-to-app-security/)
    
* \[vuln\] [ShellTorch: Multiple Critical Vulnerabilities in PyTorch Model Server (TorchServe) (CVSS 9.9, CVSS 9.8)](https://www.oligo.security/blog/shelltorch-torchserve-ssrf-vulnerability-cve-2023-43654)
    
* \[recomendaçao\] [Top 10 AppSec Experts You Should Follow](https://blog-gitguardian-com.cdn.ampproject.org/c/s/blog.gitguardian.com/top-10-appsec-experts-you-should-follow/amp/)
    
* \[artigo\] [How to build custom scanners for web security research automation](https://portswigger.net/research/how-to-build-custom-scanners-for-web-security-research-automation)
    
* \[tool\] [Postman add-on para o ZAP](https://www.zaproxy.org/blog/2023-09-25-postman-add-on/)
    
* \[curso\] [OWASP SAMM Fundamentals](https://owaspsamm.thinkific.com/courses/samm)
    

### **Siga o Guia de AppSec nas redes!**

* Site: [**guiadeappsec.com**](http://guiadeappsec.com)[**.br**](http://guiadeappsec.com.br/)
    
* Youtube\*\*: [https://www.youtube.com/@GuiadeAppSec](https://www.youtube.com/@GuiadeAppSec)
    
* Twitter / X: [**twitter.com/guiadeappsec**](http://twitter.com/guiadeappsec)