DevSec Selection | DevSec Blog

April 6, 2025

DevSec Selection #28 – Auth Bypass in Next.js, IngressNightmare K8s RCE, TRAIL Threat Modeling

March 19, 2025

DevSec Selection #27 – Wiz Acquired, tj-actions/changed-files GitHub Action Compromised, Useful Open-Source Tools

March 4, 2025

DevSec Selection #26 – Identifying Security Bugs with AI, Semgrep Rules for Detecting Malicious Code and WhoAMI

February 15, 2025

DevSec Selection #25 – Top 10 Web Hacking Techniques of 2024, Secure by Design in Google, All PortSwigger Solutions

January 31, 2025

DevSec Selection #24 – DeepSeek Database Leak, OSV-Scanner v2, Opengrep

January 15, 2025

DevSec Selection #23 – Security AI Agent, Malicious NPM Packages Targeting Cursor, 2024 CVE Review

December 13, 2024

DevSec Selection #22 – Google Password Heist, Supply-Chain Firewall, Vanir and Kubernetes Goat

December 1, 2024

DevSec Selection #21 – WordPress Critical Authentication Bypass, Comparison of Enterprise SAST/DAST and Google Dorks for Bug Bounty

November 14, 2024

DevSec Selection #20 – Top Routinely Exploited Vulnerabilities in 2023 and Promising Open-source Tools

November 3, 2024

DevSec Selection #19 – Swiss Army Knife for DevSecOps, DEF CON 32 Talks, Okta Authentication Vulnerability

October 18, 2024

DevSec Selection #18 – Bug Bounty Hunting Resources, Vulnerability Prioritization, Time-to-Exploit Trends

October 2, 2024

DevSec Selection #17 – Worst Place to Leave Your Secrets, Hacking Kia, DevSec Selection Insights

September 18, 2024

DevSec Selection #16 – PyPI Revival Hijack, DORA, GitLab Critical Patch

September 5, 2024

DevSec Selection #15 – Fake GitHub Stars, SQL Injection at Airport, and Worst Workplace Security Practices

August 18, 2024

DevSec Selection #14 – CORS, ArtiPACKED Race Condition, 1Password CVE

August 1, 2024

DevSec Selection #13 – Malicious Packages Distributed, Security Automation and Prompt Airlines

July 20, 2024

DevSec Selection #12 – CrowdStrike Global BSOD, Worst Supply Chain Attack Prevented

July 4, 2024

DevSec Selection #11 – RegreSSHion, API Rate Limiting, OWASP Quiz

June 21, 2024

DevSec Selection #10 – Mandiant Snowflake Research, 10 Years of GitHub BugBounty

June 9, 2024

DevSec Selection #9 – API Security Champion, LLM TOP 10, Santander Breach

May 22, 2024

DevSec Selection #8 – SAST with AI, Git RCE, Semgrep for K8s

May 8, 2024

DevSec Selection #7 – EPSS, Dependency Confusion, GitLab Security Notes

April 25, 2024

DevSec Selection #6 – State of DevSecOps, OpenAI Security Bots

April 11, 2024

DevSec Selection #5 – XZ Backdoor, Damn Vulnerable RESTaurant

March 28, 2024

DevSec Selection #4 – SCA Comparison, Nuclei, Python for Security