The OWASP Top 10 (2025): 10 Ways Developers Are Handing Attackers the Keys
The OWASP Top 10 (2025): 10 Ways Developers Are Handing Attackers the Keys Every major breach you've read about in the last five years? It was probabl…
Tech news from the best sources
The OWASP Top 10 (2025): 10 Ways Developers Are Handing Attackers the Keys Every major breach you've read about in the last five years? It was probabl…
In May 2026 the United States National Security Agency published a Cybersecurity Information notice titled Model Context Protocol (MCP): Security Desi…
There is a moment in every AI coding rollout where the question shifts from "can we make this work" to "what is the worst thing this can do". If you h…
Hey folks 👋 Welcome back. In Part 1 we walked through the 11 attack vectors that shape every decision in this series. If you skipped it, please go rea…
Hi folks👋! In this post I want to share something I wish I had when I started building APIs with Ruby on Rails: a practical guide that takes security …
When most developers want to scan their code for security vulnerabilities, they install Semgrep or Snyk and call it a day. I did the opposite. I built…