The UK Online Safety Bill Becomes Law, What Does It Mean?
A deep dive into Deno and its comparison with Node.js
XSS on the Oauth callback URL with CSP bypass leading to zero-click account takeover
How To Secure Your Web App With HTTP Headers — Smashing Magazine
Content Security Policy, Your Future Best Friend — Smashing Magazine
Top 10 Cyber Security Threats 2023
Salt Labs | Oh-Auth - Abusing OAuth to take over millions of accounts
Securing Rails Applications — Ruby on Rails Guides
Security implications of cross-origin resource sharing (CORS) in Node.js | Snyk
Securing Your Node.js Apps by Analyzing Real-World Command Injection Examples
Session management security: Best practices for protecting user sessions | Snyk
How to Hack APIs in 2021 by Hakluke and Farah Hawa | Detectify Labs
The 10 Types of Authorization
Shamir Secret Sharing
Mastodon and Lemmy are turning into tiny DDoS botnets
Behind the Scenes of y2z.travel’s A+ Security Ranking and Compliance with PCIDSS, HIPAA, and NIST
Ethical Hacking 101 Workshop
CSS Fingerprint
Google Bard is a glorious reinvention of black-hat SEO spam and keyword-stuffing
Fine-Grained Access Handling And Data Management With Row-Level Security — Smashing Magazine
Sandworm: Keep Your JavaScript Code Secure and Compliant
Salt Labs | Traveling with OAuth - Account Takeover on Booking.com
Software Security Report Finds JavaScript Applications Have Fewer Flaws Than Java and .NET
amark/gun: An open source cybersecurity protocol for syncing decentralized graph data.
◉ Things You Should Do Now
NPM security: preventing supply chain attacks
FallibleInc/security-guide-for-developers: Security Guide for Developers (实用性开发人员安全须知)
Appcanary - Everything you need to know about HTTP security headers
security.txt
s0md3v/XSStrike: Most advanced XSS scanner.