better appsec

Application, Cloud, Product, & AI Security driven content and expertise for your pursuit of better. Created by @jameschiapet

[better appsec @betterappsec]

6 years have come and gone so fast! We'd like you to join us on a reflection of the work that went into the 120,000+ words created with the help of nearly 70 practitioners in the field.

https://t.co/UicQA7ZEFe

#cybersecurity #applicationsecurity #appsec #artificialintelligence

[better appsec @betterappsec]

The authorization issue with agentic AI systems is still one of the biggest challenges we know. This post is about how we are thinking about the problem and some potential solutions.

https://t.co/0cfF0kRMBt

#cybersecurity #applicationsecurity #appsec #artificialintelligence

[better appsec @betterappsec]

Want to cut risk, win over Developers, and finally prove AppSec’s value? Check out this post to see how the "one vulnerability at a time" campaign model can help.

https://t.co/WFh4W5rHdA

#cybersecurity #applicationsecurity #appsec #artificialintelligence #SoftwareEngineering

[better appsec @betterappsec]

Here is our take on how AI and LLMs are changing Application Security (AppSec) products, such as SAST and DAST, for the better.

https://t.co/DJsomRmaol

#applicationsecurity #appsec #cybersecurity #LLMs #ArtificialIntelligence #Software

[better appsec @betterappsec]

Our new post tries to unravel the App & Cloud Security product market with support from the community.

https://t.co/P0I4HgWnlq

#applicationsecurity #appsec #cybersecurity #ai #cloudsec #cloudsecurity

[better appsec @betterappsec]

A look at how Artificial Intelligence (AI) products and features are driving scale for both Application Security (AppSec) and broader Cyber teams.

https://t.co/YnBrMpqu6X

#appsec #applicationsecurity #cybersecurity #ai #artificialintelligence

[better appsec @betterappsec]

Keshav Malik takes you through how JWTs are used in modern web applications!

#appsec #applicationsecurity #jwt #authentication #softwaredevelopment #oauth2 #cybersecurity

https://t.co/9gg9ycKMD0

[better appsec @betterappsec]

Without data, many companies would be irrelevant. It’s their ticket to success and protecting it in the cloud should be a first order problem.

https://t.co/9ET1rbc8P9

#cloudsecurity #applicationsecurity #CyberSecurity #aws #informationsecurity

[better appsec @betterappsec]

Vulnerability Elimination is a process that requires patience and consistent effort. This post could hopefully help you in your journey.

https://t.co/h78knC9HQW

#applicationsecurity #appsec #cloudsecurity #cybersecurity #sdlc #softwaredevelopment #securityoperations

[better appsec @betterappsec]

Here is our take on how Gen AI tools can start to help scale Application Security's code analysis and threat modeling workflows.

https://t.co/gdtuDgTR0s

#applicationsecurity #appsec #artificialintelligence #sdlc #cybersecurity #cloudsecurity #cloudsec #Software

[Crash Override @crashappsec]

Thanks for all the kind messages about https://t.co/p80ooyJpsw this week. Lovely to hear such positive feedback about we have done so far and plan to do in the future. Happy Friday!

[Clint Gibler @clintgibler]

✏️ Announcing: Chalk

A new OSS tool that aims to make it easy to trace apps from source code to production

It can be used for SBOMs, code provenance, to be SLSA level 2 compliant, to create a real-time application inventory, and more

By @crashappsec

https://t.co/HWDYPI63lp

[better appsec @betterappsec]

A lot of collaboration went into this, and we hope it serves an intro to our journey of using AI tools to further scale cybersecurity.

#CyberSecurity #applicationsecurity #cloudsecurity
#ArtificialIntelligence #SoftwareEngineering

https://t.co/Yvr0V2rJgs

[better appsec @betterappsec]

Technical Program Management (TPM) is key to a mature Application and Cloud Security program. It paves the way for secure-by-design operational efficiency.

https://t.co/jcRBclOP1O

#cybersecurity #applicationsecurity #cloudsecurity #leadership #appsec #cloudsec

[Marco Lancini @lancinimarco]

Today, I came across an interesting article that describes the best practices for organizational units when using AWS Organizations.

The article proposes recommended foundational OUs, which I have summarised at https://t.co/hkFrXyCQ8G

[better appsec @betterappsec]

A guide to structuring a secure code review process and why it’s important for every Application & Cloud Security team to have one.

https://t.co/Nm6Ram5SkJ

#applicationsecurity #cloudsecurity #cybersecurity #appsec #cloudsec #softwaredevelopment #sdlc

[Clint Gibler @clintgibler]

💪 How to Achieve Application & Cloud Security Resilience

* Security scanning types
* Where to perform comprehensive vs targeted scans
* Building a high quality detection set
* The art of root cause analysis
* Useful metrics

By @jameschiapet #appsec

https://t.co/M2RzpfSy2F

[better appsec @betterappsec]

A guide to building a truly resilient Application and Cloud Security program through automation and data.

https://t.co/7a7DfiZyl5

#cloudsecurity #automation #cybersecurity #applicationsecurity #appsec #cloudsec

[Clint Gibler @clintgibler]

🗒️ A Dive Into Web Application Authentication

@jameschiapet discusses:
* The difference between authentication and authorization
* Why we need MFA
* How "sign in with" works
* SSO
* Passwordless authentication
* API authentication
* Deep links

https://t.co/DfQA6oUHmS

[Clint Gibler @clintgibler]

When assessing web applications, ask:

1. How is CSRF implemented?
2. Is caching implemented?
3. How is info passed between various parts of the system?
4. How do all the pieces of authentication work?
5. Is there documentation?

#bugbounty #bugbountytips

https://t.co/5XkvAn9R3i