MCP Servers Are the New APIs — And We’re Making the Same Security Mistakes
New npm supply-chain attack self-spreads to steal auth tokens
Introducing OpenAI Privacy Filter
Does SSL/TLS (https) hide the urls being accessed
Cloudflare targets 2029 for full post-quantum security
Build Secure AI Applications | Promptfoo
Switzerland built a secure alternative to BGP. The rest of the world hasn't noticed yet
code-review
Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148 - Mozilla Hacks - the Web developer blog
Canada Computers customers say retailer's website compromised their credit cards
Firehound | Security Operations
When your account gets hacked, the attack probably came from a Fortune 500 data center. A report on why cloud providers don't stop attacks they could easily detect.
Securing Coolify with CrowdSec: A Complete Guide 2025 - hasto.pl
Fia
I've locked myself out of my digital life
Trusted Publishers for All Package Repositories
Our plan for a more secure npm supply chain
SQL injection cheat sheet
Exploiting SQL Injection: a Hands-on Example | Acunetix
What is SQL Injection? Tutorial & Examples | Web Security Academy
Application Level Denial of Service – A Comprehensive Guide
Defending against distributed denial of service (DDoS) attacks – ITSM.80.110 - Canadian Centre for Cyber Security
Famous DDoS attacks | Biggest DDoS attacks
OWASP Top 10 Broken Access Control Explained
Access control vulnerabilities and privilege escalation | Web Security Academy
AppSec 101 - Authentication and Authorization - Preventing the Unpreventable | Qwietᴬᴵ
Casbin · An authorization library that supports access control models like ACL, RBAC, ABAC, ReBAC, BLP, Biba, LBAC, UCON, Priority, RESTful for Golang, Java, C/C++, Node.js, Javascript, PHP, Laravel, Python, .NET (C#), Delphi, Rust, Ruby, Swift (Objective-C), Lua (OpenResty), Dart (Flutter) and Elixir | Casbin
Learn to Hack
Google dork cheatsheet
CWE - Common Weakness Enumeration