In LSCBench's importer case, 33 agent-written checks passed while hidden hostile-input tests failed. Test valid imports AND rejected object construction; a larger happy-path suite cannot substitute for that boundary. #SecureCoding
Learn how to write more secure code, reduce risks, and build applications designed with security in mind from the start. Give your development team the skills to make security a priority at every stage!
#Cybersecurity#SecureCoding#SoftwareDevelopment
Learn how to write more secure code, reduce risks, and build applications designed with security in mind from the start. Give your development team the skills to make security a priority at every stage!
#Cybersecurity#SecureCoding#SoftwareDevelopment
🔐 Want to lock down your .NET app like Fort Knox? 🏰 Dive into this @ThePracticalDev step-by-step on Google Auth integration and make your login flow smarter, safer, and sleeker. Your users (and your future self) will thank you!💡
#SecureCoding
Your AI agent's instructions are NOT the same as its permissions.
I think this is one of the most important distinctions developers need to understand as we start integrating agents into our daily work.
You might ask an agent to write some code. Sure.
But can it also:
1/5
Because Claude always embarrasses me during class! 🙈
I share the full story in the latest episode of DevSec Station, along with what happened when my students and I threat modeled it.
🎧 What Can Your AI Agent Actually Do?
Watch on YouTube:
4/5
Also available on your favourite podcast app. 💕
The lesson? Design your security controls around an agent's effective capabilities, not just your expectations of its behaviour.
#AppSec#AIAgents#SecureCoding#DevSecStation
5/5
If you are thinking of purchasing my new book, Alice and Bob Learn Secure Coding, as a favor to me, please consider buying it on or before February 5th. 🙏
#appsec#securecoding
Did you know?
Our annual "The State of Developer-Driven Security Survey 2022" revealed that alarmingly 86% of #developers don't view Application Security as a top priority.
Learn more about our findings on our whitepaper:
#securecoding#DevSecOps#AppSec
I just completed the Driverless Cab Booking App challenge on Code Review Lab! 🚀
Created a YouTube video to show you my trial & error phase before I solved it:
Check it out and let me know what you think! #SecureCoding#ProductSecurity
🚨 AI-generated code can pass every demo and still expose customer data.
Broken access controls, SQL injection, leaked secrets, and insecure dependencies are real risks.
Explore 7 vulnerabilities, examples, and fixes.
🔗
#AISecurity#SecureCoding
Do you have what it takes to be a Secure Code Warrior? Your mission, should you choose to accept it, is to test your secure coding skills right now. Are you game? #securecoding#gamifiedtraining#appsec#DevSecOps#DevOps
We’re proud to announce our partnership with the Google Developer Groups.
Together, we’re strengthening cybersecurity in the developer ecosystem—driving secure coding practices from review to deployment.
#CyberSecurity#SecureCoding#DevSecOps#GDG
SA News #Thread | Does AI Speed Up Coding?
1. AI Coding Tools: Time-Saving Miracle or Mirage?
A recent MIT study tested coders using GitHub Copilot. Result? AI-assisted users completed tasks ~55% faster, but only when tasks were well-defined and repetitive. For open-ended or complex logic? Gains dropped.
#AIcoding#DevProductivity#MITResearch
3. Experienced Development Sometimes Slowed Down
Surprisingly, seasoned programmers took longer when reviewing or fixing AI’s inaccurate suggestions. Critical thinking overruled speed. AI didn’t always “think” like them, requiring rewrites.
#CodeReview#AIinWorkplace#DevInsights
4. Code Quality vs Code Speed
Yes, AI helps write more code quickly, but not always better code. The study found AI-written code had a higher chance of being inefficient or insecure if used blindly. Review remains essential.
#CleanCode#SecureCoding#AIDevTools
I just completed the P2P Money Transfer challenge on Code Review Lab! 🚀 Highly recommended for improving code quality and best practices! #CodeReviewLab#CodeReview#SecureCoding
Win a $100 Amazon gift card! Let us know which #AppSec or #DevSecOps influencer you would like to hear at our Secure Coding Virtual Summit, and we’ll select one lucky winner! You have until February 16, 8am EST, to enter to win.
#securecoding#opensource
Stop Trusting Input: 3 RULES
Thank you to ThreatLocker for sponsoring this video and my trip to Black Hat USA 2025.
#securecoding#threatlocker#blackhat
SSRF check: resolve the host, check the address, then connect to that address. Checking the string and connecting later are two different decisions. A redirect or DNS answer fits between them. #SecureCoding#AppSec
Switch to your preferred language with SecureFlag’s translation feature, now supporting 32 languages 🌐
Teams can read labs and knowledge base articles in their own language.
Learn how to set a language and start training:
#AppSec#SecureCoding