# AppSec Newsletter 0024

### Links

* \[site\] [Periodic Table of DevSecOps Tools | Digital.ai](https://digital.ai/learn/devsecops-periodic-table/)
    
* \[vuln\] [Understanding GitLab EE/CE Account TakeOver (CVE-2023-7028) • The SecOps Group](https://secops.group/understanding-gitlab-ee-ce-account-takeover-cve-2023-7028/)
    
* \[artigo\] [Application Security Posture Management | Rapid7 Blog](https://www.rapid7.com/blog/post/2024/01/16/application-security-posture-management/)
    
* \[academy\] [Web LLM attacks | Portswigger](https://portswigger.net/web-security/llm-attack)
    
* \[artigo\] [Fuzzing and Bypassing the AWS WAF – Sysdig](https://sysdig.com/blog/fuzzing-and-bypassing-the-aws-waf/)
    
* \[site\] [Microsoft Security documentation and training - Security documentation | Microsoft Learn](https://learn.microsoft.com/en-us/security/)
    
* \[vuln\] [GHSL-2023-268\_GHSL-2023-270: Arbitrary command execution and SQL injection in Nginx-UI | GitHub Security Lab](https://securitylab.github.com/advisories/GHSL-2023-268_GHSL-2023-270_NginxUI/)
    
* \[video\] [Top 7 Smart Contract Security Vulnerabilities @QuickNode (youtube.com)](https://www.youtube.com/watch?v=wHFO8D2tU4o)
    

### **Siga o Guia de AppSec nas redes!**

* Youtube: [**youtube.com/@GuiadeAppSec**](http://youtube.com/@GuiadeAppSec)
    
* Twitter / X: [**twitter.com/guiadeappsec**](http://youtube.com/@GuiadeAppSec)
    
* Site: [**guiadeappsec.com.br**](http://youtube.com/@GuiadeAppSec)