Appsec Village

Firmware Binary Analysis: The Complete Guide

Firmware Binary Analysis: The Complete Guide

Unpacking, entropy analysis, CVE correlation, and secret extraction.  If you are securing embedded devices, analyzing the compiled firmware image is a mandatory capability. Check out Finite State's complete practitioner's guide...

Firmware Binary Analysis: The Complete Guide

Unpacking, entropy analysis, CVE correlation, and secret extraction.  If you are securing embedded devices, analyzing the compiled firmware image is a mandatory capability. Check out Finite State's complete practitioner's guide...

Anatomy of a Bad Skill

Anatomy of a Bad Skill

AI coding agents can now install skills. That's great for productivity, but also great for attackers. In this demo, Chainguard's Patrick Smyth walks through real specimens of malicious agent skills....

Anatomy of a Bad Skill

AI coding agents can now install skills. That's great for productivity, but also great for attackers. In this demo, Chainguard's Patrick Smyth walks through real specimens of malicious agent skills....

State of Security Vibe-Coded Apps

State of Security Vibe-Coded Apps

Vibe coding democratizes app development — but it also democratizes insecure deployments. When non-technical users build production apps with AI and ship them without review, the failure modes are predictable:...

State of Security Vibe-Coded Apps

Vibe coding democratizes app development — but it also democratizes insecure deployments. When non-technical users build production apps with AI and ship them without review, the failure modes are predictable:...

State of Cyber

State of Cyber

Most cybersecurity reports are hard to get through. Long, dense, and not that useful when you actually need answers. Symbiotic Security built something different: State of Cyber. A simple place...

State of Cyber

Most cybersecurity reports are hard to get through. Long, dense, and not that useful when you actually need answers. Symbiotic Security built something different: State of Cyber. A simple place...

AI in Production: The 2026 Runtime Execution Report

AI in Production: The 2026 Runtime Execution Re...

Code review can tell you what AI was supposed to do. It can't tell you what it's actually doing in production. The 2026 Runtime Execution Report from OLIGO Security digs...

AI in Production: The 2026 Runtime Execution Re...

Code review can tell you what AI was supposed to do. It can't tell you what it's actually doing in production. The 2026 Runtime Execution Report from OLIGO Security digs...

LLM Application Security: Governing AI-Driven Risk Across the Software Lifecycle

LLM Application Security: Governing AI-Driven R...

What does application security look like when AI is generating the code? In LLM Application Security: Governing AI-Driven Risk Across the Software Lifecycle, Checkmarx Zero explores how AI is reshaping...

LLM Application Security: Governing AI-Driven R...

What does application security look like when AI is generating the code? In LLM Application Security: Governing AI-Driven Risk Across the Software Lifecycle, Checkmarx Zero explores how AI is reshaping...