Sign in

Application Security Feed

@appsecfeed.bsky.social
47 followers 1 following 288 posts

⚠️ Bot Account ⚠️ Follow for my hand-curated application security feed. Contains multiple newsletters, blogs, HackerNews feeds, and more. 💬 Run by @alp1n3.dev. Reach out with any suggestions for improvement!

PostsRepliesMedia
Application Security Feed @appsecfeed.bsky.social · 20/01/2026
🗞️ cURL stopped HackerOne bug bounty program due to excessive slop reports 🔗 github.com/curl/curl/pull/20312
001
Application Security Feed @appsecfeed.bsky.social · 20/01/2026
🗞️ How we mitigated a vulnerability in Cloudflare’s ACME validation logic 🔗 blog.cloudflare.com/acme-path-vulne…
010
Application Security Feed @appsecfeed.bsky.social · 20/01/2026
🗞️ OWASP PTK add-on for ZAP is now released 🔗 www.zaproxy.org/blog/2026-01-19-owa…
000
Application Security Feed @appsecfeed.bsky.social · 19/01/2026
🗞️ Research Worth Reading Week 03/2026 🔗 pentesterlab.com/blog/research-wort…
001
Application Security Feed @appsecfeed.bsky.social · 19/01/2026
🗞️ Scaling developer content production at Snyk 🔗 developerrelations.com/case-studies…
000
Application Security Feed @appsecfeed.bsky.social · 19/01/2026
🗞️ CVEFinder – Fast CVE lookup with product-level mapping 🔗 news.ycombinator.com/item?id=466769…
000
Application Security Feed @appsecfeed.bsky.social · 18/01/2026
🗞️ CVE-2026-0915: GNU C Library Fixes a Security Issue Present Since 1996 🔗 www.phoronix.com/news/Glibc-Securit…
000
Application Security Feed @appsecfeed.bsky.social · 18/01/2026
🗞️ Crypto holder loses $283 million to scammer impersonating wallet support 🔗 web3isgoinggreat.com/single/trezor-…
000
Application Security Feed @appsecfeed.bsky.social · 17/01/2026
🗞️ 🎓️ Vulnerable U | #151 🔗 www.vulnu.com/p/vulnerable-u-151
000
Application Security Feed @appsecfeed.bsky.social · 16/01/2026
🗞️ New Vulnerability in n8n – CVE-2026-21858 🔗 www.schneier.com/blog/archives/2026…
002
Application Security Feed @appsecfeed.bsky.social · 16/01/2026
🗞️ Analysis of ServiceNow's AI Vulnerability (85% of Fortune 500 Affected) 🔗 opena2a.org/blogs/servicenow-ai-vul…
000
Application Security Feed @appsecfeed.bsky.social · 16/01/2026
🗞️ WinBoat: Drive by Client RCE and Sandbox Escape 🔗 hack.do/posts/winboat-guest-service…
000
Application Security Feed @appsecfeed.bsky.social · 16/01/2026
🗞️ StackWarp Vulnerability 🔗 stackwarpattack.com
000
Application Security Feed @appsecfeed.bsky.social · 16/01/2026
🗞️ Last Week in AppSec for 15. January 2026 🔗 checkmarx.com/zero-post/last-week-i…
000
Application Security Feed @appsecfeed.bsky.social · 16/01/2026
🗞️ [tl;dr sec] #311 - Slack's Security Agents, Cloud-Native Detection Engineering, Trail of Bits' Claude Skills 🔗 tldrsec.com/p/tldr-sec-311
000
Application Security Feed @appsecfeed.bsky.social · 15/01/2026
🗞️ Building the Talent Engine Behind TRM's Mission to Protect Billions | TRM Blog 🔗 www.trmlabs.com/resources/blog/buil…
000
Application Security Feed @appsecfeed.bsky.social · 15/01/2026
🗞️ Community-powered security with AI: an open source framework for security research 🔗 github.blog/security/community-powe…
010
Application Security Feed @appsecfeed.bsky.social · 15/01/2026
🗞️ Curl to end Bug Bounty program due to overwhelming number of AI submissions 🔗 github.com/curl/curl-www/pull/538
000
Application Security Feed @appsecfeed.bsky.social · 15/01/2026
🗞️ Determinate Secure Packages: Nixpkgs with SBOMs, FIPS, and SLA'd CVE Patching 🔗 determinate.systems/blog/determinat…
000
Application Security Feed @appsecfeed.bsky.social · 15/01/2026
🗞️ $250K+ XSS in Meta Conversion API Leading to Zero-Click Account Takeover 🔗 ysamm.com/uncategorized/2025/01/13/…
001
Application Security Feed @appsecfeed.bsky.social · 15/01/2026
🗞️ DoS Vulnerability in Node.js for React, Next.js, and APM Users 🔗 nodejs.org/en/blog/vulnerability/ja…
000
Application Security Feed @appsecfeed.bsky.social · 15/01/2026
🗞️ Stop trusting torch.load() – I built a tool to scan AI models for RCE 🔗 github.com/ArseniiBrazhnyk/Veritens…
000
Application Security Feed @appsecfeed.bsky.social · 15/01/2026
🗞️ Blacksmith – AI Powered Penetration Testing 🔗 github.com/yohannesgk/blacksmith
000
Application Security Feed @appsecfeed.bsky.social · 14/01/2026
🗞️ Former NYC Mayor Eric Adams accused of rug pull as NYC Token crashes 🔗 web3isgoinggreat.com/single/nyc-tok…
000
Application Security Feed @appsecfeed.bsky.social · 14/01/2026
🗞️ Building the Talent Engine Behind TRM's Mission to Protect Billions | TRM Blog 🔗 www.trmlabs.com/resources/blog/buil…
000
Application Security Feed @appsecfeed.bsky.social · 14/01/2026
🗞️ Exploiting LLM Write Primitives: System Prompt Extraction When Chat Output Is Locked Down 🔗 www.praetorian.com/blog/exploiting-…
001
Application Security Feed @appsecfeed.bsky.social · 14/01/2026
🗞️ Mitigating DoS Vulnerability from Unrecoverable Stack Space Exhaustion 🔗 nodejs.org/en/blog/vulnerability/ja…
000
Application Security Feed @appsecfeed.bsky.social · 14/01/2026
🗞️ Claude Code CVE-2025-66032: Why Allowlists Aren't Enough 🔗 niyikiza.com/posts/cve-2025-66032
001
Application Security Feed @appsecfeed.bsky.social · 13/01/2026
🗞️ Tackling Technical Debt before It Owns Your Roadmap 🔗 www.netspi.com/blog/executive-blog/…
000
Application Security Feed @appsecfeed.bsky.social · 13/01/2026
🗞️ Sift or Get Off the PoC: Vulnerability Research via Information Retrieval 🔗 arxiv.org/abs/2512.06155
000
Application Security Feed @appsecfeed.bsky.social · 13/01/2026
🗞️ CISA orders feds to patch Gogs RCE flaw exploited in zero-day attacks 🔗 www.bleepingcomputer.com/news/secur…
000
Application Security Feed @appsecfeed.bsky.social · 13/01/2026
🗞️ Show HN: Bugbop – a smaller bug bounty platform 🔗 bugbop.com
000
Application Security Feed @appsecfeed.bsky.social · 13/01/2026
🗞️ Truebit exploited for over $26 million 🔗 web3isgoinggreat.com/single/truebit…
000
Application Security Feed @appsecfeed.bsky.social · 13/01/2026
🗞️ TRM Deconflict: A Unified Network for Every Crypto Investigator | TRM Blog 🔗 www.trmlabs.com/resources/blog/trm-…
000
Application Security Feed @appsecfeed.bsky.social · 13/01/2026
🗞️ Lack of isolation in agentic browsers resurfaces old vulnerabilities 🔗 blog.trailofbits.com/2026/01/13/lac…
001
Application Security Feed @appsecfeed.bsky.social · 12/01/2026
🗞️ React Router has XSS Vulnerability · CVE-2025-59057 🔗 github.com/advisories/GHSA-3cgp-3xv…
000
Application Security Feed @appsecfeed.bsky.social · 12/01/2026
🗞️ Silent Rebuilds: Keeping Container CVE Counts Near-Zero 🔗 www.bretfisher.com/silent-rebuilds
000
Application Security Feed @appsecfeed.bsky.social · 10/01/2026
🗞️ Knock-to-Unlock Stripe integration vulnerability 🔗 railsbilling.com/blog/knock-to-unlo…
001
Application Security Feed @appsecfeed.bsky.social · 10/01/2026
🗞️ International Cybercrime Operation Leads to 574 Arrests and USD 3 Million in Recovered Funds | TRM Blog 🔗 www.trmlabs.com/resources/blog/inte…
000
Application Security Feed @appsecfeed.bsky.social · 10/01/2026
🗞️ 🎓️ Vulnerable U | #150 🔗 www.vulnu.com/p/vulnerable-u-150
000
Application Security Feed @appsecfeed.bsky.social · 09/01/2026
🗞️ How We Made Airflow Development 20x Faster | TRM Blog 🔗 www.trmlabs.com/resources/blog/how-…
000
Application Security Feed @appsecfeed.bsky.social · 09/01/2026
🗞️ How Two UK-registered Companies Moved Over a Billion in Stablecoins for the IRGC | TRM Blog 🔗 www.trmlabs.com/resources/blog/how-…
000
Application Security Feed @appsecfeed.bsky.social · 09/01/2026
🗞️ Brew-vulns: CVE scanning for Homebrew 🔗 nesbitt.io/2026/01/08/brew-vulns-cv…
000
Application Security Feed @appsecfeed.bsky.social · 09/01/2026
🗞️ Exploiting deobfuscation in ImunifyAV for code execution (CVE-2025-65530) 🔗 blog.popovs.lv/imunifyav-code-execu…
000
Application Security Feed @appsecfeed.bsky.social · 09/01/2026
🗞️ CVE-2026-21876: Critical Multipart Charset Bypass Fixed in CRS 4.22.0 and 3.3.8 🔗 coreruleset.org/20260106/cve-2026-2…
000
Application Security Feed @appsecfeed.bsky.social · 09/01/2026
🗞️ Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691) 🔗 labs.watchtowr.com/do-smart-people-…
000
Application Security Feed @appsecfeed.bsky.social · 09/01/2026
🗞️ [tl;dr sec] #310 - Vulnerable MCP Labs, Pathfinding.cloud, Prompt Injection Taxonomy 🔗 tldrsec.com/p/tldr-sec-310
011
Application Security Feed @appsecfeed.bsky.social · 09/01/2026
🗞️ Ni8mare – Unauthenticated Remote Code Execution in N8n 🔗 www.cyera.com/research-labs/ni8mare…
001
Application Security Feed @appsecfeed.bsky.social · 08/01/2026
🗞️ OWASP Top: What's changed and why it matters 🔗 about.gitlab.com/blog/2025-owasp-to…
000
Application Security Feed @appsecfeed.bsky.social · 08/01/2026
🗞️ OpenCode AI coding agent hit by critical unauthenticated RCE vulnerability 🔗 github.com/anomalyco/opencode/issue…
011