Business Logic Vulnerabilities
Are There IDORs Lurking in Your Code? LLMs Are Finding Critical Business Logic Vulns—and They’re Everywhere
Erik Buchanan | | authorization, broken access control, Business Logic Vulnerabilities, idor, llm security
Security teams have always known that insecure direct object references (IDORs) and broken authorization vulnerabilities exist in their codebases. Ask any AppSec leader if they have IDOR issues, and most would readily ...
Security Boulevard
Securing AI-Generated Code in Enterprise Applications: The New Frontier for AppSec TeamsÂ
Bala Thripura Akasam | | AI code governance, AI Generated Code, AI security tools, AI vulnerabilities, AI-assisted development, Application Security, Business Logic Vulnerabilities, code provenance, DAST, developer training, DevSecOps, Fuzz Testing, LLM risks, logic flaws, runtime instrumentation, SAST, secure AI usage, Secure Coding, Secure SDLC, security copilots, shadow code, shift left, software assurance, think-wide
AI-generated code is reshaping software development and introducing new security risks. Organizations must strengthen governance, expand testing and train developers to ensure AI-assisted coding remains secure and compliant ...
Security Boulevard
Autonomous Hacking? This Startup May Have Just Changed Penetration Testing Forever
Tom Eston | | AI, AI agent, AI in Cybersecurity, Autonomous Agents, Autonomous Hacking, bug bounty, Business Logic Vulnerabilities, Cyber Security, cyber threat, Cybersecurity, Cybersecurity Startup, Data Privacy, Digital Privacy, Episodes, Future of Pen Testing, hackerone, Information Security, Infosec, Low-Hanging Fruit, Marketing in Security, Offensive Security, Pen Testing Technology, Penetration Testing, Podcast, Podcasts, Privacy, Risk Severity, security, Security Research, Security Teams, technical details, technology, web app security, Weekly Edition, XBOW
In this episode, we explore the revolutionary concept of autonomous penetration testing with a discussion into Cybersecurity startup XBOW’s recent breakthrough. XBOW claims to have topped HackerOne’s leaderboard using a fully autonomous ...

