Anshuman Bhartiya

Blog

• The Boring AppSec Podcast S1E08 - Bug Bounties Part 2
  April 22, 2024
• The Boring AppSec Podcast S1E07 - Hiring in Security
  April 15, 2024
• The Boring AppSec Podcast S1E06 - Vulnerability Management
  April 8, 2024
• The Boring AppSec Podcast S1E05 - Threat Modeling
  April 1, 2024
• The Boring AppSec Podcast S1E04 - Running a lean AppSec team
  March 25, 2024
• The Boring AppSec Podcast S1E03 - Bug Bounties
  March 18, 2024
• The Boring AppSec Podcast S1E02 - First Security Hire
  March 11, 2024
• The Boring AppSec Podcast S1E01 - Asset Inventory
  March 4, 2024
• A Guide To Identify Authorization Vulnerabilities At Scale Using Semgrep
  October 5, 2022
• A Guide On Implementing An Effective SAST Workflow
  August 18, 2022
• A Lightweight Approach To Implement Secure Software Development LifeCycle (Secure SDLC)
  August 12, 2022
• Product Security Roadmap
  August 5, 2022
• Building a Product Security program from scratch
  July 25, 2022
• How I ran my first half marathon!
  March 14, 2016
• Ability to send payment requests inspite of being blocked by the recipient
  February 8, 2016
• A CSRF protection bypass technique
  April 30, 2015
• A bug in Facebook that violated my privacy
  December 23, 2014
• Analysis of the BrowserStack breach - A classic example of "Pivoting in the Clouds"
  November 13, 2014
• Security issues with friction-less signup flows
  July 16, 2014
• Performing code review on shell scripts
  September 26, 2013