# Application Security Roundup - January

DevFeed: [Application Security Roundup - January](<https://devfeed.tech/articles/application-security-roundup-january-36678.md>)

Original publisher: [Read original article](<https://shostack.org/blog/appsec-roundup-jan-2023/>)

Author: Adam

Published: 2023-01-30T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [incident](<https://devfeed.tech/topics/incident.md>), [CircleCI](<https://devfeed.tech/topics/circleci.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>)

Tags: [ai-assistants](<https://devfeed.tech/tags/ai-assistants.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [article](<https://devfeed.tech/tags/article.md>), [circleci](<https://devfeed.tech/tags/circleci.md>), [incident](<https://devfeed.tech/tags/incident.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

An application security roundup covering threat modeling, security incident retrospectives involving CircleCI and Uber, research on AI assistants and insecure code, sociotechnical harms, vulnerability remediation under the CFAA, and the history of attack trees.

## Source excerpt

So many interesting articles from AI to an organizatoion of socio-technical harms, fascinating incident reports about Uber and Circle CI and some history of attack trees.