# Application Security Roundup - October and Nov

DevFeed: [Application Security Roundup - October and Nov](<https://devfeed.tech/articles/application-security-roundup-october-and-nov-36685.md>)

Original publisher: [Read original article](<https://shostack.org/blog/appsec-roundup-oct/>)

Author: Adam

Published: 2022-11-30T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Memory Safety](<https://devfeed.tech/topics/memory-safety.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [Package manager](<https://devfeed.tech/topics/package-manager.md>), [PyPI](<https://devfeed.tech/topics/pypi.md>), [Python](<https://devfeed.tech/topics/python.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [memory-safety](<https://devfeed.tech/tags/memory-safety.md>), [pypi](<https://devfeed.tech/tags/pypi.md>), [python](<https://devfeed.tech/tags/python.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

A roundup of application security reading covering proposed liability for insecure technology products, the history of the AppSec industry, Apple's XNU kernel memory-safety work, threat modeling, and automatic code execution during PyPI package downloads.

## Source excerpt

Interesting reads this month include signals from the administration, a history of appsec by one of the originals, and a longread from Apple about kernel memory design.