AppSec Newsletter 0028