⤷ Title: Navigating the SDLC: How Do We Secure the Software Development Lifecycle?
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 12:26:00 GMT
════════════════════════
⌗ Tags: #devsecops #cybersecurity #software_development #application_security #software_testing
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 12:26:00 GMT
════════════════════════
⌗ Tags: #devsecops #cybersecurity #software_development #application_security #software_testing
Medium
Navigating the SDLC: How Do We Secure the Software Development Lifecycle?
As a QA Engineer, I’m used to thinking about where testing fits within the Software Development Lifecycle (SDLC).
⤷ Title: Securing OpenAPI Specifications: Understanding Your API Attack Surface
════════════════════════
𐀪 Author: Alfa
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 18:25:30 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #devops #open_api #api_security
════════════════════════
𐀪 Author: Alfa
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 18:25:30 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #devops #open_api #api_security
Medium
Securing OpenAPI Specifications: Understanding Your API Attack Surface
Most teams treat the OpenAPI file as documentation.
⤷ Title: VirtuProbe Studio: from a proxy plugin to a test automation workbench
════════════════════════
𐀪 Author: Jakub
════════════════════════
ⴵ Time: Thu, 10 Sep 2026 10:36:23 GMT
════════════════════════
⌗ Tags: #test_automation #devops #software_testing #api_development #penetration_testing
════════════════════════
𐀪 Author: Jakub
════════════════════════
ⴵ Time: Thu, 10 Sep 2026 10:36:23 GMT
════════════════════════
⌗ Tags: #test_automation #devops #software_testing #api_development #penetration_testing
Medium
VirtuProbe Studio: from a proxy plugin to a test automation workbench
VirtuProbe began as a plugin for Burp Suite Pro.
⤷ Title: SAST | Software Security | Security Engineer TryHackMe
════════════════════════
𐀪 Author: Aalishaf
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 01:31:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_security #coding #software_testing #tryhackme
════════════════════════
𐀪 Author: Aalishaf
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 01:31:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_security #coding #software_testing #tryhackme
Medium
SAST | Software Security | Security Engineer TryHackMe
Task 2 — Code Review
⤷ Title: #6. Before You Ask QA to Test: Is the Project Ready for Testing?
════════════════════════
𐀪 Author: Usha Pandey : QA Specialist
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 13:54:21 GMT
════════════════════════
⌗ Tags: #selenium #quality_assurance #test_automation #penetration_testing #software_testing
════════════════════════
𐀪 Author: Usha Pandey : QA Specialist
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 13:54:21 GMT
════════════════════════
⌗ Tags: #selenium #quality_assurance #test_automation #penetration_testing #software_testing
Medium
Before You Ask QA to Test: Is the Project Ready for Testing?
One thing I’ve learned as a QA professional is that testing does not begin when QA receives a build.
⤷ Title: I had a lot of fun writing Java client for SMB from scratch
════════════════════════
𐀪 Author: Jakub Stonavsky
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 16:04:18 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #java #reverse_engineering #penetration_testing
════════════════════════
𐀪 Author: Jakub Stonavsky
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 16:04:18 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #java #reverse_engineering #penetration_testing
Medium
I had a lot of fun writing Java client for SMB from scratch
I needed to support SMB protocol in VirtuProbe, and decided to ejnoy another RFC and code my own client library.
⤷ Title: Threat Modelling Through a QA Lens
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Tue, 15 Sep 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #qa #cybersecurity #application_security #threat_modeling #software_testing
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Tue, 15 Sep 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #qa #cybersecurity #application_security #threat_modeling #software_testing
Medium
Threat Modelling Through a QA Lens
As I’ve been learning more about secure software development, I keep coming across concepts that sound rather complicated until I relate…
⤷ Title: Your test cases are in a spreadsheet. Your tests are in IntelliJ. They have stopped agreeing
════════════════════════
𐀪 Author: Muteb Almughyiri
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 03:33:28 GMT
════════════════════════
⌗ Tags: #testing #test_automation #automation_testing #penetration_testing #software_testing
════════════════════════
𐀪 Author: Muteb Almughyiri
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 03:33:28 GMT
════════════════════════
⌗ Tags: #testing #test_automation #automation_testing #penetration_testing #software_testing
Medium
Your test cases are in a spreadsheet. Your tests are in IntelliJ. They have stopped agreeing
A look at Testin, a test case management plugin that keeps both in one place.
⤷ Title: Testin — New IntelliJ plugin to manage your test cases and test runs
════════════════════════
𐀪 Author: Muteb Almughyiri
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 04:18:58 GMT
════════════════════════
⌗ Tags: #testing #penetration_testing #automation_testing #test_automation #software_testing
════════════════════════
𐀪 Author: Muteb Almughyiri
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 04:18:58 GMT
════════════════════════
⌗ Tags: #testing #penetration_testing #automation_testing #test_automation #software_testing
Medium
Testin — New IntelliJ plugin to manage your test cases and test runs
The problem you already have
⤷ Title: STRIDE: A QA Engineer’s Guide (Six Questions That Can Change How We Test Software)
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 12:11:01 GMT
════════════════════════
⌗ Tags: #application_security #software_testing #quality_assurance #threat_modeling #cybersecurity
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 12:11:01 GMT
════════════════════════
⌗ Tags: #application_security #software_testing #quality_assurance #threat_modeling #cybersecurity
Medium
STRIDE: A QA Engineer’s Guide (Six Questions That Can Change How We Test Software)
I’ve recently been exploring threat modelling through a QA lens.
⤷ Title: Threat Modelling a Web Application With STRIDE
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 12:11:01 GMT
════════════════════════
⌗ Tags: #ai_threat_modeling #software_testing #quality_assurance #application_security #cybersecurity
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 12:11:01 GMT
════════════════════════
⌗ Tags: #ai_threat_modeling #software_testing #quality_assurance #application_security #cybersecurity
Medium
Threat Modelling a Web Application With STRIDE
A Practical QA Security Project
⤷ Title: The Model Is No Longer the Whole AI System.
════════════════════════
𐀪 Author: José. T Guevara
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 17:31:48 GMT
════════════════════════
⌗ Tags: #penetration_testing #software_testing #neural_networks #ai #ai_agent
════════════════════════
𐀪 Author: José. T Guevara
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 17:31:48 GMT
════════════════════════
⌗ Tags: #penetration_testing #software_testing #neural_networks #ai #ai_agent
Medium
The Model Is No Longer the Whole AI System.
What this week’s Deep Learning Weekly tells us about memory, agents, architecture, and evaluation
⤷ Title: Test a Runtime Token Boundary Before an Agent Reaches a Third-Party API
════════════════════════
𐀪 Author: The Review Surface
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #api_security #oauth #ai_agent_security #ai_agent #software_testing
════════════════════════
𐀪 Author: The Review Surface
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #api_security #oauth #ai_agent_security #ai_agent #software_testing
Medium
Test a Runtime Token Boundary Before an Agent Reaches a Third-Party API
A four-case test for project, environment, subject, scope, and provider denials before an agent receives a runtime credential.
⤷ Title: The SBI Data Leak Is a Cybersecurity Wake Up Call for Every Software Team
════════════════════════
𐀪 Author: Appzlogic
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 08:35:17 GMT
════════════════════════
⌗ Tags: #software_development #application_security #cybersecurity #software_testing #data_breach
════════════════════════
𐀪 Author: Appzlogic
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 08:35:17 GMT
════════════════════════
⌗ Tags: #software_development #application_security #cybersecurity #software_testing #data_breach
Medium
The SBI Data Leak Is a Cybersecurity Wake Up Call for Every Software Team
The recent data exposure involving the State Bank of India (SBI) has put an important cybersecurity question back in the spotlight. How…
⤷ Title: What Can QA Engineers Learn from APT28 Attacks to Strengthen Web Application Security?
════════════════════════
𐀪 Author: Irina Zhuravleva
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:58:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #qa #software_testing #web_security
════════════════════════
𐀪 Author: Irina Zhuravleva
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:58:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #qa #software_testing #web_security
Medium
What Can QA Engineers Learn from APT28 Attacks to Strengthen Web Application Security?
Lessons from a real-world cyber espionage campaign and how software testers can turn threat intelligence into practical security testing.
⤷ Title: A VAPT Report Is Not the Finish Line: How to Close Security Findings Properly
════════════════════════
𐀪 Author: PerfectQA
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability_management #penetration_testing #qa #software_testing
════════════════════════
𐀪 Author: PerfectQA
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability_management #penetration_testing #qa #software_testing
Medium
A VAPT Report Is Not the Finish Line: How to Close Security Findings Properly
A vulnerability scan can produce an impressive dashboard within hours. That dashboard does not tell a development team which issues have…
⤷ Title: What Can QA Engineers Learn from APT28 Attacks to Strengthen Web Application Security?
════════════════════════
𐀪 Author: Irina Zhuravleva
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:58:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #qa #software_testing #web_security
════════════════════════
𐀪 Author: Irina Zhuravleva
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:58:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #qa #software_testing #web_security
Medium
What Can QA Engineers Learn from APT28 Attacks to Strengthen Web Application Security?
Lessons from a real-world cyber espionage campaign and how software testers can turn threat intelligence into practical security testing.
⤷ Title: A VAPT Report Is Not the Finish Line: How to Close Security Findings Properly
════════════════════════
𐀪 Author: PerfectQA
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability_management #penetration_testing #qa #software_testing
════════════════════════
𐀪 Author: PerfectQA
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability_management #penetration_testing #qa #software_testing
Medium
A VAPT Report Is Not the Finish Line: How to Close Security Findings Properly
A vulnerability scan can produce an impressive dashboard within hours. That dashboard does not tell a development team which issues have…
⤷ Title: AI Coding Agents Pass Tests, Not Security Checks
════════════════════════
𐀪 Author: Emre Gültekir
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 11:09:03 GMT
════════════════════════
⌗ Tags: #programming #application_security #artificial_intelligence #ai_agent #software_testing
════════════════════════
𐀪 Author: Emre Gültekir
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 11:09:03 GMT
════════════════════════
⌗ Tags: #programming #application_security #artificial_intelligence #ai_agent #software_testing
Medium
A Green Test Only Answers the Question You Asked
Coding agents pass up to 91% of functional tests but only 25% are also secure. Why green tests miss this and how to put attacks in the spec.
⤷ Title: I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 00:00:51 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #application_security #static_analysis #mcps
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 00:00:51 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #application_security #static_analysis #mcps
Medium
I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
In the previous post in this series I built a 10-test harness for the MCP 2026–07–28 authorization rules. A quickstart-style server passed…