# AppSec Newsletter 0018

E tem vídeo novo no canal! Dessa vez sobre brute-force em tokens de sessão!

%[https://youtu.be/xZPWq303a9o] 

### Links

* \[artigo\] [React XSS Guide: Examples and Prevention](https://www.stackhawk.com/blog/react-xss-guide-examples-and-prevention/)
    
* \[artigo\] [Securing API endpoints using Amazon API Gateway and Amazon VPC Lattice](https://aws.amazon.com/pt/blogs/containers/securing-api-endpoints-using-amazon-api-gateway-and-amazon-vpc-lattice/)
    
* \[artigo\] [Using Gamification to demystify the AI black-box in a Web Application Firewall (WAF) product](https://www.openappsec.io/post/using-gamification-to-demystify-the-ai-black-box-in-a-waf-product?utm_source=twitter&utm_medium=social&utm_campaign=blog&utm_content=ai_blackbox)
    
* \[tool\] [Snyk Apps now GA: An easy, standardized, and secure framework for building custom integrations](https://snyk.io/pt-BR/blog/snyk-apps-ga/)
    
* \[tool\] [SBOM Observer](https://sbom.observer/)
    
* \[tool\] [Introducing CloudFront Security Dashboard, a Unified CDN and Security Experience](https://aws.amazon.com/pt/blogs/networking-and-content-delivery/introducing-cloudfront-security-dashboard-a-unified-cdn-and-security-experience/)
    

### Vagas

* [Grupo Boticário: Pessoa Especialista de AppSec II (DevSecOps) (Segurança Informação)](https://www.linkedin.com/jobs/view/3763811592/?refId=FJlyOj1pMoGF2R4tEEK4IA%3D%3D&trackingId=FJlyOj1pMoGF2R4tEEK4IA%3D%3D)
    

### **Siga o Guia de AppSec nas redes!**

* Youtube: [**youtube.com/@GuiadeAppSec**](http://youtube.com/@GuiadeAppSec)
    
* Twitter / X: [**twitter.com/guiadeappsec**](http://youtube.com/@GuiadeAppSec)
    
* Site: [**guiadeappsec.com.br**](http://youtube.com/@GuiadeAppSec)