AppSec Newsletter 0037

E chegamos a mais uma edição da nossa newsletter!

Vídeo Novo no canal Guia de AppSec

Links

• 🎖️ Google | If It’s Not Secure, It Should Not Compile: Preventing DOM-Based XSS in Large-Scale Web Development with API Hardening

• AWS | How to build a Security Guardians program to distribute security ownership

• Santander Bootcamp Cibersegurança #2

• FIDO | FIDO Alliance Publishes New Specifications to Promote User Choice and Enhanced UX for Passkeys

• SEMGREP | Easily create custom SAST guardrails with human language and Semgrep Assistant (AI)

• SHIKIDA | Appsec adventures - Blog

• Github | EPSS Scores in the GitHub Advisory Database

• Hacken | Key Discovery in ECDSA: Understanding Implementation and Security Risk

• Tiago Tavares | Processo de Gestão de Vulnerabilidades e Automação para OffSec e AppSec Utilizando Atlassian Jira: Proposta e Tutorial

• Sysdig | Runtime Is The Way

• Mitre-Engenuity | Threat-Informed Defense to Secure AI

Siga o Guia de AppSec nas redes!

• Youtube: youtube.com/@GuiadeAppSec

• Twitter / X: twitter.com/guiadeappsec

• Site: guiadeappsec.com.br