Appsec Village
Supply Chain Security Standards, Regulations an...
Tracking SBOM Regulations Is a Full-Time Job. Here's a Shortcut. SBOM and software supply chain regulations are moving fast, and they're not moving together. The EU Cyber Resilience Act is...
Supply Chain Security Standards, Regulations an...
Tracking SBOM Regulations Is a Full-Time Job. Here's a Shortcut. SBOM and software supply chain regulations are moving fast, and they're not moving together. The EU Cyber Resilience Act is...
The Sum of the Parts
Your Scanner Found 1,000 Bugs. Attackers Only Need Three. A hardcoded secret, a directory traversal, a SQL injection — alone, three low/medium tickets. Chained together, a path to full compromise....
The Sum of the Parts
Your Scanner Found 1,000 Bugs. Attackers Only Need Three. A hardcoded secret, a directory traversal, a SQL injection — alone, three low/medium tickets. Chained together, a path to full compromise....
This Shit is Hard: Fixing Python Library Securi...
Patching a CVE in a Python library sounds simple... until you try to do it at scale. Engineer Wesley Wiedenmeier breaks down why backporting security fixes is so much harder...
This Shit is Hard: Fixing Python Library Securi...
Patching a CVE in a Python library sounds simple... until you try to do it at scale. Engineer Wesley Wiedenmeier breaks down why backporting security fixes is so much harder...
Clash of Prompts
Clash of Prompts is the world’s first AI prompt battle royale for secure coding, by Symbiotic Security. You go head to head with other players in real time. Each round,...
Clash of Prompts
Clash of Prompts is the world’s first AI prompt battle royale for secure coding, by Symbiotic Security. You go head to head with other players in real time. Each round,...
Firmware Binary Analysis: The Complete Guide
Unpacking, entropy analysis, CVE correlation, and secret extraction. If you are securing embedded devices, analyzing the compiled firmware image is a mandatory capability. Check out Finite State's complete practitioner's guide...
Firmware Binary Analysis: The Complete Guide
Unpacking, entropy analysis, CVE correlation, and secret extraction. If you are securing embedded devices, analyzing the compiled firmware image is a mandatory capability. Check out Finite State's complete practitioner's guide...
Anatomy of a Bad Skill
AI coding agents can now install skills. That's great for productivity, but also great for attackers. In this demo, Chainguard's Patrick Smyth walks through real specimens of malicious agent skills....
Anatomy of a Bad Skill
AI coding agents can now install skills. That's great for productivity, but also great for attackers. In this demo, Chainguard's Patrick Smyth walks through real specimens of malicious agent skills....