AppSec Newsletter 0024

Links

• [site] Periodic Table of DevSecOps Tools | Digital.ai

• [vuln] Understanding GitLab EE/CE Account TakeOver (CVE-2023-7028) • The SecOps Group

• [artigo] Application Security Posture Management | Rapid7 Blog

• [academy] Web LLM attacks | Portswigger

• [artigo] Fuzzing and Bypassing the AWS WAF – Sysdig

• [site] Microsoft Security documentation and training - Security documentation | Microsoft Learn

• [vuln] GHSL-2023-268_GHSL-2023-270: Arbitrary command execution and SQL injection in Nginx-UI | GitHub Security Lab

• [video] Top 7 Smart Contract Security Vulnerabilities @QuickNode (youtube.com)

Siga o Guia de AppSec nas redes!

• Youtube: youtube.com/@GuiadeAppSec

• Twitter / X: twitter.com/guiadeappsec

• Site: guiadeappsec.com.br