Application Security | News, how-tos, features, reviews, and videos
Explore related topics
Whether you are looking for an LLM with more safety guardrails or one completely without them, someone has probably built it.
The scope of an old PDF parsing flaw has been widened to include more Tika modules.
Supply chain risk is unavoidable, but not unmanageable. Proactively prevent supply chain attacks by embedding YARA into developer workflows.
Goal is to steal Tea tokens by inflating package downloads, possibly for profit when the system can be monetized.
There’s more to devops success than flashy technology and the latest agile techniques. Here are 10 critical but often overlooked devops practices experts recommend.
This month’s theme is: Keep an eye on the future but hone your coding craft in the now. Start here, with nine timeless JavaScript coding concepts, a look at Nitro.js—fast becoming the go-to server option for JavaScript and Node—and more.
Responding to recent NPM malware attacks, Chainguard Libraries for JavaScript seeks to address security vulnerabilities in the JavaScript ecosystem.
Tech leaders weigh in on vibe coding: What it is, what it’s not, and how to use it safely in production software.
Attacks on the NX build system and React packages highlight escalating threats to enterprise software development pipelines.
From autonomous vulnerability remediation to real-time scrutiny of AI-generated code, AI is impacting security at every stage of the software development process.
Missing authentication on the Docker Engine management API for Docker Desktop on Windows and Mac allows attackers to break out from containers and potentially execute malicious code on the underlying host system.
The GitHub OAuth attack exposed a security blind spot in the ever-growing web of permissions spanning developers, service accounts, and third-party OAuth apps. Here’s how to address it.
A stack-based approach to IDPs emphasizes reusability, autonomy, and visibility, creating a standardized but flexible system where teams can define and deploy their own devops stack.