#appsec

TL;DR In December 2025, Cline — an AI coding assistant with over 5 million users — gave an...

✓ Human-authored analysis; AI used for formatting and proofreading. In 2018 Spencer Gietzen at...

Your AI Agent's Memory Is Now an Attack Surface, and Nobody Designed for That One email....

Hook An AI coding CLI that uploads your entire Git history — commit logs, secrets, and all...

Agents don’t just “generate text”. They read files, browse, call tools, and remember things. That breaks classic AppSec threat models. Here’s the agent-native one—and the mitigations you can actually ship.

Your feed is full of it right now. An agent one-shots a $10,000 website. Sixty sub-agents swarm a...

Hook A public GitHub issue, a hidden instruction, and one word changed in a prompt was...

The story matters, but maybe not for the reason the headline wants you to think "First...

📢 I have some exciting news: I'm launching a new series called the Secure Code Review Challenge....

OWASP Top 10 risks are not new threats — they are the old threats that keep working because teams keep making the same mistakes. The 2021 list (still the curren

I built a web front end for an Nmap-based port scanner: a FastAPI backend, a React dashboard,...

The 2025 Verizon DBIR has a number that should change how you think about security training...