Common webhook security mistakes (raw body, replay attacks, timing attacks)

Zero Trust Security Model A Modern Approach To Cybersecurity

Web Security: The Modern Browser Model

interviewed for a security engineer intern role, did amazing, now stuck waiting.

Seeking feedback: Open-source CLI to statically analyze Dockerfiles for security and performance issues

Built an AWS perimeter security scanner in Go — feedback welcome

Leveraging Rust as the Security Core for a Multi-chain Mobile Vault (UniFFI + KMP + Hardware Enclaves)

tirith: a preexec shell hook for terminal command security analysis, written in Rust

There were BGP anomalies during the Venezuela blackout

Claude Cowork exfiltrates files

County pays $600k to pentesters it arrested for assessing courthouse security

White House Scraps 'Burdensome' Software Security Rules

Overrun with AI slop, cURL scraps bug bounties to ensure "intact mental health"

Signal creator Moxie Marlinspike wants to do for AI what he did for messaging

The end of the curl bug-bounty

Runjak.codes: An adversarial coding test

zlib-rs: a stable API and 30M downloads

"a bootstrap chain for NixOS which builds the whole system from a small hand-auditable binary seed"

Infotainment, EV Charger Exploits Earn $1M at Pwn2Own Automotive 2026

The Malloc Maleficarum (2005)

How Safe is the Rust Ecosystem? A Deep Dive into crates.io

Secure Boot, TPM and Anti-Cheat Engines

A field guide to sandboxes for AI

Never-before-seen Linux malware is "more advanced than typical"

Rust at Scale: An Added Layer of Security for WhatsApp

Nike Says It's Investigating Possible Data Breach

Reverse engineering my cloud-connected e-scooter and finding the master key to unlock all scooters

MS confirms it will give the FBI your Windows PC data encryption key if asked

Achieving a 0-CVE OS for VMs: The End of Traditional Patching

StackWarp security vulnerability that exploits a synchronization bug AMD Zen 1–5

More →