Archive
React2shell Leads to Full Microsoft 365 SharePoint compromise: How One Server Exploit Exposed an Entire Tenant
The Shai-Hulud Worm: Dissecting the Self-Spreading Malware Attack on the NPM Ecosystem
From Grep to Taint Analysis: The Evolution of Static Code Scanning
The Nx Supply Chain Attack: When AI Becomes an Accomplice Attackers
Introduction to Static Application Security Testing (SAST)
Code Smart, Code Safe: Securing AI Suggestions in Modern IDEs
Threat Modeling Case Studies
Boost Your Secure Code Review Efficiency with Git Grep
Why Trusting Git Over Ctrl + Z Matters : Vibe Coding
Slopsquatting: An Emerging Threat to Developers Using AI-Powered IDEs
Not Just Numbers: Why Semantic Versioning (SemVer) Is Your Best Friend in Fixing Vulnerable Dependencies
Safely Exploring Malicious NPM Packages: A Guide to Using Verdaccio for Secure Testing
How to Publish Your First NPM Package: A Simple Beginner's Guide
Automating Multi-Platform Tool Releases Using GitHub Actions
Supply Chain Attack Analysis for NPM Package : llm-oracle
In AWS, how to keep running processes for ssh connections that keeps breaking?