Application Security
Rietta's application security posts cover secure API tokens, breach prevention talks, and prioritizing appsec work as companies grow.
Subscribe to Application Security posts via RSS
10/30/2026
Reported SSH Backdoor in Claude Code Extension Served Through Cursor
by Frank Rietta
Phorion reports a tampered Claude Code extension, version 2.1.313, served via the Cursor marketplace planted an SSH key. Here is how to check if you were hit.
Read More: Reported SSH Backdoor in Claude Code Extension Served Through Cursor
10/20/2026
Built an App with AI? Get a Security Review Before Launch
by Frank Rietta
Non-developers now build working custom apps with AI assistants. A few hours of expert whiteboard review before launch can save a lot of grief later.
Read More: Built an App with AI? Get a Security Review Before Launch
09/16/2026
Non-Repudiation in Cybersecurity
by Frank Rietta
Non-repudiation is a foundational security property among the five pillars of Information Assurance. It is at natural odds with Privacy and must be balanced.
09/14/2026
RubyGems Open Source Supply Chain Security and OpenAI
by Frank Rietta
OpenAI agents attacked RubyGems in May 2026. Why automated attackers have collapsed the window to patch a critical CVE from weeks to hours.
Read More: RubyGems Open Source Supply Chain Security and OpenAI
07/25/2026
The Five Pillars of Information Security (And Why We Audit Accessibility)
by Frank Rietta
The five pillars of information assurance: confidentiality, integrity, availability, authentication, and non-repudiation, and why accessibility is part of it.
Read More: The Five Pillars of Information Security (And Why We Audit Accessibility)
05/14/2024
UUID as a secure API token for API RESTful endpoints? (Video)
by Frank Rietta
Video excerpt about the role of UUIDs as a security identifier for REST API and how to use them more securely if you must.
Read More: UUID as a secure API token for API RESTful endpoints? (Video)
11/28/2023
An Honest Conversation About Cyber Security (Video)
by Frank Rietta
I recently sat down with Jeremy Duvall of 7Factor Software to discuss Cyber Security and application developers. Enjoy this video!
Read More: An Honest Conversation About Cyber Security (Video)
09/27/2023
Prioritizing cybersecurity (Pluralsight)
by Frank Rietta
The structure and siloing of a large enterprise organization can thwart security efforts. Here is a tip on how to overcome.
04/04/2023
How to win the race with hackers when new vulnerabilities are publicly disclosed!
by Frank Rietta
Keeping web apps up-to-date prevents data breaches. Use automated testing of custom software to patch quickly after a vulnerability is publicly disclosed.
Read More: How to win the race with hackers when new vulnerabilities are publicly disclosed!
04/01/2020
Snowfroc 2020 - Application Security and Development
by Chris Davis
Application security is important to an entire company, but what practical steps can we take on a development team to keep applications secure?
Read More: Snowfroc 2020 - Application Security and Development