Brennenstuhl on Security
Search

Topic 15 entries

AppSec

Secure defaults, platform-level controls and the attacks they have to hold against, from phishing to supply chains.

Application security works best as defaults built into platforms, not as findings handed back to teams. This hub collects the operating-model essays alongside notes on phishing, honeytokens and supply-chain hygiene.

Follow this topic: RSS JSON Feed Markdown

Essays

  1. Guest Lecture at HTW Berlin: AppSec in the Age of Agentic Engineering AppSec for Agentic Engineering
  2. Shift Down: Why Agentic Engineering Demands Platform-Level Security AppSec for Agentic Engineering
  3. Dependency Updates: latest Is Not a Security Strategy AppSec for Agentic Engineering
  4. AppSec in the Age of Agentic Engineering AppSec for Agentic Engineering
  5. Bunny Shield Review: 3 Things Need Improvement
  6. What is Whaling Cyber Awareness? Prevention Tips & Training Whaling
  7. Whaling Phishing: Definition and Prevention Strategies Whaling
  8. Step-Up Authentication: Elevating Security with OpenID Connect (OIDC)
  9. Password Attack Guide: What is Password Spraying?
  10. Honeytoken: Authentication Attack Breach Detection
  11. Weak Crypto, Github SAML Attack & Twitter Security UX

Field guide

  1. How do you protect accounts from stolen credentials? Field Guide
  2. How do attackers take over accounts? Field Guide

Talks and projects

  1. AppSec in the Age of Agentic Engineering Talk