# Application Security Roundup - September

DevFeed: [Application Security Roundup - September](<https://devfeed.tech/articles/application-security-roundup-september-36686.md>)

Original publisher: [Read original article](<https://shostack.org/blog/appsec-roundup-sept/>)

Author: Adam

Published: 2022-09-30T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [DevSecOps](<https://devfeed.tech/topics/devsecops.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [pip](<https://devfeed.tech/topics/pip.md>), [PyPI](<https://devfeed.tech/topics/pypi.md>), [Python](<https://devfeed.tech/topics/python.md>), [PyTorch](<https://devfeed.tech/topics/pytorch.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [appsec](<https://devfeed.tech/tags/appsec.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [pypi](<https://devfeed.tech/tags/pypi.md>), [python](<https://devfeed.tech/tags/python.md>), [pytorch](<https://devfeed.tech/tags/pytorch.md>), [security](<https://devfeed.tech/tags/security.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>)

## AI overview

A monthly application security roundup covering access-control failures, STRIDE, DevSecOps, attack trees, software supply-chain attacks, customer-service risks, PyPI package installation behavior, PyTorch loading behavior, and cryptography.

## Source excerpt

Interesting appsec posts: machine learning, performance, and C4