@shehackspurple.bsky.socialSeason 2 of DevSec Station is about AI, agents, application security, and building systems that can survive being surprised.
🎧 Episode 1: **Your AI Worked 59 Times. What About the 60th?**
Listen or watch here: https://twp.ai/9Obuiw
@xojo.comYour query defines the operation. Your user supplies the value. Keep that boundary clear with Xojo’s parameterized queries.
https://documentation.xojo.com/api/databases/database.html#database-selectsql
@shehackspurple.bsky.social
@potato.software@shehackspurple.bsky.social
@hacks.grSnyk Code ranks first among 10 tools in a review that values helping teams fix issues over generating more alerts.
A useful distinction—but the ranking comes f…
https://en.hacks.gr/snyk-code-stin-koryfi-tis-listas-me-10-ergaleia-elegchoy-asfaleias-kodika/
@shehackspurple.bsky.socialI'm curious what other AppSec and AI practitioners think (that's you).
What security controls do you see as essential for AI agents? And what are we still not sure about? What are your 'may haves'?
Article: https://twp.ai/9Obx3f
@shehackspurple.bsky.socialWho should be responsible when an autonomous agent goes rogue?
🎥 Watch here: https://twp.ai/9Obi3l
@dcstateofthestack.bsky.socialSecurity review becomes more useful when the threat model leads the way. Mohamed AboElKheir presents a methodology for applying AI without losing the security context that matters.
dcstateofthestack.org
#AppSec #SecureCoding #AI