Skip to main content
← All Tags

Security

211 articles in this category (Page 3 of 9)

AI NewsSecurityOpen Source

CodeGuard: AI-Powered Open Source Security Scanner for DevSecOps

CodeGuard is an open-source AI security scanner targeting the 95% of breaches caused by known vulnerabilities, offering free CVE mapping and automated PR scanning.

Read more
AI NewsSecurityPython Development

Building a Secure Local Password Manager with Python and Typer

PMCLI is a local Python-based CLI tool that secures credentials using Fernet symmetric encryption and PBKDF2, storing data in a local JSON vault.

Read more
AI NewsSecuritySoftware Engineering

AI-Generated Object Merges: Preventing CWE-1321 Prototype Pollution in Cursor and Claude Code

Cursor and Claude Code default to for...in object merges, creating CWE-1321 prototype pollution risks based on pre-2019 training data.

Read more
AI NewsDevOpsSecurity

Audit Your Trust Surface: Lessons from the Bitwarden CLI Supply Chain Attack

Checkmarx identified malicious npm packages targeting the Bitwarden CLI ecosystem, highlighting the risk of unverified global CLI tools in production workflows.

Read more
AI NewsNetworkingSecurity

Understanding DPI Evasion and Why HTTPS Traffic Gets Blocked

Learn how Deep Packet Inspection (DPI) uses plaintext SNI metadata to block encrypted HTTPS traffic and how to implement evasion techniques like domain fronting.

Read more
AI NewsSecurityDevelopment

Strategic Use of Multiple Gmail Accounts for Marketing and Workflow Management

Buying PVA Gmail accounts enhances deliverability and security for marketers by leveraging aged accounts with established trust metrics to bypass automated filters.

Read more
AI NewsSecurityDevOps

Mitigating Subdomain Takeover: How to Audit and Secure Dangling DNS Records

Subdomain takeovers exploit dangling DNS records on platforms like Heroku and S3, allowing attackers to bypass CSP and steal cookies via legitimate domains.

Read more
AI NewsAI InfrastructureSecurity

OpenAI Launches GPT-5.4-Cyber: Specialized AI for Verified Security Defenders

OpenAI scales its Trusted Access for Cyber program, introducing GPT-5.4-Cyber to enable binary reverse engineering for thousands of verified defenders.

Read more
AI NewsDevOpsSecurity

Beyond Epistemic Negligence: Lessons from the Vercel 2026 Supply Chain Breach

The April 2026 Vercel incident exposed the critical risks of outsourced threat models and build-time secret exposure in modern CI/CD pipelines.

Read more
AI NewsDevOpsSecurity

Beyond the Vercel 2026 Breach: Reclaiming the Threat Model from Managed Infrastructure

Vercel confirmed a supply chain security incident in April 2026, exposing the dangers of delegating threat models to abstract deployment platforms.

Read more
AI NewsSecurityAI Infrastructure

Building an AI-Powered File Type Detection and Security Pipeline with Magika and OpenAI

Learn to integrate Google's Magika deep-learning file detection with OpenAI's GPT-4o to identify over 100 file labels and detect spoofed extensions with byte-level accuracy.

Read more
AI NewsWeb DevelopmentSecurity

Hardening Next.js 15 Login: Sessions, CSRF, and Timing Attack Defenses

Secure Next.js 15 login flows using SHA-256 session hashing and constant-time bcrypt comparisons to prevent user enumeration and session hijacking.

Read more
AI NewsSecurityPrivacy

Google Blocks 8.3B Policy-Violating Ads in 2025, Launches Android 17 Privacy Overhaul

Google blocked 8.3B ads and suspended 24.9M accounts in 2025 as Android 17 tightened contact and location access, reducing global fraud and abuse.

Read more
AI NewsDevOpsSecurity

Actools: A CLI-Driven Drupal 11 Installer with Automated Security Auditing

Actools is a Drupal 11 installer for Hetzner VPS that uses a 25-check CLI audit tool to verify site security and stack health before deployment.

Read more
AI NewsSecurityArtificial Intelligence

19 Critical AI Red Teaming Tools for Securing Generative Models in 2026

Secure LLMs against prompt injection and data poisoning using 19 essential red teaming tools and frameworks identified for 2026 security workflows.

Read more
AI NewsSecurityDevOps

Building Open-Source Compliance: Solving GRC as an Engineering Problem

ISMS-Core is an open-source GRC platform featuring 317 Python generators and 3,400 cross-framework mappings for automated compliance.

Read more
AI NewsSecuritySoftware Engineering

Building Secure E2EE Network Sync for Linux: A Deep Dive into DotGhostBoard v1.5.1

DotGhostBoard v1.5.1 achieves secure E2EE clipboard sync on Linux using X25519 ECDH and AES-256-GCM, eliminating the need for central servers or cloud storage.

Read more
AI NewsSecurityDevOps

Solving the Secrets Management Tradeoff: Git-Native vs. Centralized Servers

Clef introduces a git-native secrets architecture to eliminate the custody-vs-ops dilemma by removing the central server entirely.

Read more
AI NewsSecurityAI

Analyzing Deepfake Indicators in Redistributed Social Media Video

Technical methodology for verifying suspicious videos after platform recompression using 13 distributed frame samples to identify AI artifacts and metadata loss.

Read more
AI NewsSecurityAutomation

Automating CVE Tracking with Notion, Gemini, and Kestra

Amara Graham demonstrates a CVE tracking system using Kestra, Notion, and Gemini, processing over 1,500 vulnerabilities with automated priority assessment.

Read more
AI NewsDevOpsSecurity

Kubernetes Security Observability: Moving Beyond Metrics and Logs

KubeHA's Security & Config page identifies critical Kubernetes misconfigurations including public exposure and wildcard roles to prevent hidden security gaps.

Read more
AI NewsDevOpsSecurity

Hardening Production SSH: A Practical Guide to Securing Linux Fleets

Secure production servers by disabling password authentication and enforcing Ed25519 keys to eliminate brute-force attack vectors.

Read more
AI NewsSecurityAI

Auditing Claude Code: Security Findings and Containment Strategies

An engineering audit of Claude Code reveals unauthorized shell environment capture and behavioral profiling despite documented security controls.

Read more
AI NewsSecurityDevOps

Engineering Guide to DKIM: Securing Email Integrity with Digital Signatures

DKIM implements cryptographic signing via RFC 6376 to ensure email integrity; modern standards now mandate a minimum 2048-bit RSA key to prevent rejection by major providers.

Read more