Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog
Blog

TanStack's CI Published the Malware Itself. SLSA Said the Build Was Fine.

CVE-2026-41940: One Missed Function Call: Inside the 64-Day cPanel Zero-Day

AI Code Review for AppSec Teams: Triage, Not Robot Approval

Secure Code Review Checklist for AI-Generated Pull Requests

Application Security Automation: Fix the Handoff, Not the Alert Count

AI Code Security: The Real Risk of AI-Generated Code Is Plausibility

Vibe Coding Security Risks: The Blast Radius Still Has an Owner

Your Data Warehouse Is Only as Secure as the Analytics Tool Connected to It

Your Observability Stack Just Became an Attack Surface

Claude Code's Deny Rules Stop Working After 50 Commands. The Fix Was Already Written.

North Korea Stole $285M From a DeFi Protocol. The Attack Started With a Handshake.

Microsoft Says It's "By Design." 25,000 Azure API Portals Say It's a Problem.
