Tag feed

#application-security

287 posts53 followers

Explore Hashnode

Alternatives

Trending tags this week

VWVictor Wariboko-Westcybersage.hashnode.dev1d ago · 5 min read

7 Security Mistakes Junior Developers Make (And How to Fix Them)

Security is not exactly taught in the same way syntax and frameworks are. Most junior developers learn it the hard way: after a bug is reported, a client sends an angry email or a 3 a.m Slack message

0

SSunnycybersecurity-learning.hashnode.dev3d ago · 16 min read

TryHackMe OWASP Top 10 2025: Application Design Flaws Beginner-Friendly Learning Guide

Introduction I recently completed the OWASP Top 10 2025: Application Design Flaws room on TryHackMe as part of my ongoing cybersecurity learning journey. The OWASP Top 10 is an important resource for

0

MSManu Shuklaecorpit.hashnode.dev5d ago · 15 min read

Node.js 25 permission model: scope --allow-net and --allow-fs for production (2026)

Node.js 25 permission model: scope --allow-net and --allow-fs for production (2026) Summary. Node.js added a process permission model in v20.0.0 (April 2023), and Node.js 25.0.0, released on 15 Octobe

0

MNMilan Nikicsecuritydepth.hashnode.dev6d ago · 16 min read

File Upload Vulnerabilities: Security Architect's Perspective (Part 2)

Part 1 covered the technical implementation of secure file upload handling in Java and Spring. It went through content validation with Apache Tika, path traversal defenses, generated filenames, image

0

HSHarshal Shahdelvingwithharshal.hashnode.devJul 26 · 6 min read

AI Agent Security: Threats, Risks, and Best Practices for Autonomous AI Systems

As AI evolves from simple chatbots to autonomous agents capable of making decisions and interacting with enterprise systems, security must evolve too. This article explores AI Agent architecture, atta

0

MNMilan Nikicsecuritydepth.hashnode.devJul 20 · 22 min read

File Upload Vulnerabilities in Java and Spring: Secure Coding Patterns

Build web apps long enough and file uploads become unavoidable. Profile pictures. PDF invoices. CSV imports. Resume uploads. Log bundles for support. Every time an application lets users send bytes an

0

HSHarshal Shahdelvingwithharshal.hashnode.devJul 19 · 7 min read

AI Threat Modeling: A Complete Guide to Securing AI Applications

As AI applications become increasingly integrated into business operations, securing them is no longer optional. Traditional security approaches alone are not enough. Organizations must understand the

0

Rrathsararr-cyber.hashnode.devJul 19 · 8 min read

I Built What I Thought Was a Secure App. Here's Everything I Got Wrong.

During the final year of my undergraduate studies, my team submitted a cloud-based banking application as part of our Network and Cloud Security coursework. We had competition. Two other teams were bu

0

PKPatrick Kearnsfullstackcity.comJul 17 · 12 min read

Building SSRF-Resistant HTTP Clients in .NET

Applications increasingly accept URLs from outside their own code. A webhook tester calls an endpoint supplied by a customer. An image service downloads a remote avatar. A document pipeline retrieves

0

YPYogeshwar Peelaexploitnotes.hashnode.devJul 18 · 4 min read

FAM CTF : The Vault Door Writeup

Summary NexaVault is a mock internal dashboard app that gates an "Admin Vault" panel behind a role claim in a JWT. The app issues a user-role token on login, stored in the nx_access cookie, and trusts

0

#application-security

Search Hashnode

#application-security

Explore Hashnode

Trending tags this week

7 Security Mistakes Junior Developers Make (And How to Fix Them)

TryHackMe OWASP Top 10 2025: Application Design Flaws Beginner-Friendly Learning Guide

Node.js 25 permission model: scope --allow-net and --allow-fs for production (2026)

File Upload Vulnerabilities: Security Architect's Perspective (Part 2)

AI Agent Security: Threats, Risks, and Best Practices for Autonomous AI Systems

File Upload Vulnerabilities in Java and Spring: Secure Coding Patterns

AI Threat Modeling: A Complete Guide to Securing AI Applications

I Built What I Thought Was a Secure App. Here's Everything I Got Wrong.

Building SSRF-Resistant HTTP Clients in .NET

FAM CTF : The Vault Door Writeup