Original Post: A deep dive into Semgrep Supply Chain The content discusses the goals and challenges of an Application Security (AppSec) supply chain program, focusing on minimizing exploitability and dealing with numerous dependencies and advisories.… Read More »Exploring the Nuances of Semgrep Supply Chain: A Comprehensive Analysis
Original Post: Resetting Broken Password Advice The blog post discusses the outdated advice on periodically changing passwords, inspired by recent infographics seen on LinkedIn. The author argues that this practice, once relevant during the early… Read More »Fixing Common Password Reset Issues: A Step-by-Step Guide
Original Post: Enhancing Security with AI: Revolutionizing Protection in the Digital Era The content discusses the transformative role of Artificial Intelligence (AI) and Machine Learning (ML) in cybersecurity, emphasizing their ability to address industry challenges… Read More »Transforming Digital Security: The Power of AI-Driven Protection
Original Post: Certified Appsec Practitioner (CAP) Review 2024 | by Selvakumar | Jun, 2024 The content provides an overview of the Certified Appsec Practitioner (CAP) exam, an entry-level certification for assessing knowledge of application security… Read More »2024 CAP Certification Review: Insights & Key Takeaways by Selvakumar
Original Post: Powerfully autofixing code with Semgrep’s new AST-based approach The blog post discusses why AST-based autofix is superior to text-based autofix and how Semgrep’s implementation of AST-based autofix enhances correctness. Semgrep, a code searching… Read More »Revolutionizing Code Repair: Semgrep’s Advanced AST-Based Autofix Explained
Original Post: Cryptocurrency Exchange Scams The author recounts their experience with a cryptocurrency scam that began with a suspicious Twitter DM. Initially aware it could be a scam, they created an anonymous email via Fastmail… Read More »Beware: How to Spot and Avoid Cryptocurrency Exchange Scams
Original Post: The Importance of Bot Management in Your Marketing Strategy The blog emphasizes the importance of a comprehensive bot management solution for marketing teams to tackle the challenges posed by bot traffic and protect… Read More »Maximizing Marketing Success: Why Effective Bot Management is Crucial
Original Post: How I Found a Simple IDOR Bug That Exposed Sensitive Data | by dra0x0 | Jun, 2024 The content describes Insecure Direct Object Reference (IDOR), a security vulnerability that occurs when an application… Read More »Unveiling Sensitive Data: A Tale of Discovering a Simple IDOR Bug
Original Post: Building an enterprise-ready, scalable security program using Semgrep The content discusses the challenges of building a scalable security program for detecting issues in application code. It highlights Semgrep, an open-source static analysis tool,… Read More »Creating an Enterprise-Ready, Scalable Security Program with Semgrep: A Step-by-Step Guide
Original Post: The Poor State of Security Tools The author expresses frustration over the poor quality of many security tools available today, citing personal experiences as evidence. They describe being unable to use their work… Read More »Addressing the Gaps: Improving the Effectiveness of Security Tools