cloud.killer social

#appsec

In the cloud.killer community.

Members can post here. Sign in with pit.world: the one account for every *.pit.world site.

@bsidesde.bsky.social network
Your LLM says it found a vulnerability. Can you prove it's exploitable? Build the pipeline that tells you. #appsec #AI #BSidesDE events.humanitix.com/security-bsi...
1 image (open on the network to see)
From the AT Protocol network, via atproto.africa, jetstream2.us-east.bsky.network, jetstream1.us-west.bsky.network · view on bsky.app
@opsmatters.com network
The latest update for #Zenity includes "You Can't Secure the Homegrown #AI Agents You Don't Know You Have" and "Resilience by Design: Architecting Agentic Systems to Fail Safely, Not Catastrophically".

#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
From the AT Protocol network, via atproto.africa, jetstream2.us-east.bsky.network, jetstream1.us-west.bsky.network · view on bsky.app
@abbilabs.bsky.social network
Shipping Stripe on a vibe-coded app?

Does the webhook handler call constructEvent on the raw body?

If not, a stranger can fake a successful payment.

Curious how you test that path.

#Stripe #vibecoding #AppSec #SaaS #webdev #buildinpublic #AI #devtools