CosmicByte·15h agoUnderstanding SQL InjectionSQL injection (SQLi) is one of the oldest vulnerabilities, yet it still shows up in real world apps. After working through a hands-on SQLi…
Bharath Bandari·1d agoI leaked a Vector Database and Reconstructed the Secret From Numbers AlonePart of learning the OWASP Top 10 LLM&Agentic Applications hands-on. Part 1 was prompt injection — this one broke an assumption I didn’t…
InLevel Up CodingbyBrian Jones·Oct 26OWASP Top 10 for Vibe Coders, Part 5: Security Misconfiguration (A02:2025)Your code can be perfectly fine and your app can still be wide open — because of a setting, not a bug.
InAI Risk & GovernancebyZain Ehtesham·Oct 26The Honest Receptionist Problem: Why Your AI Shares What It Was Never Meant ToHave you ever wondered what happens if you ask a chatbot to repeat the word “poem” forever?
InLevel Up CodingbyBrian Jones·Oct 26OWASP Top 10 for Vibe Coders, Part 14: Wrapping Up, and What Comes Next for AI AgentsThirteen articles before this one, ten categories and two supporting posts, one Flask sticker shop taken apart in every direction. This is…
InLevel Up CodingbyBrian Jones·Oct 26OWASP Top 10 for Vibe Coders, Part 8: Insecure Design (A06:2025)No typo. No missing check. The code does exactly what it was built to do — and that’s the whole problem.
InLevel Up CodingbyBrian Jones·Oct 26OWASP Top 10 for Vibe Coders, Part 7: Injection (A05:2025)A search box, a well-placed apostrophe, and your entire database handed over. This is the one that gives security its reputation for…
InLevel Up CodingbyBrian Jones·Oct 26OWASP Top 10 for Vibe Coders, Part 9: Software Supply Chain Failures (A03:2025)You, or your agent, probably wrote a few hundred lines of your app. You’re trusting a few hundred thousand lines you never read at all.
InLevel Up CodingbyBrian Jones·Oct 26OWASP Top 10 for Vibe Coders, Part 1: Why This Series ExistsNot another post about whether you know what a dict is. This is about the stuff that actually gets people hurt — explained for people who…
