Learn XSS at a depth that you can explain it to anyone, and understand the diversity of attack that exists across the set of XSS vectors.
Just like DevOps is integrated into every developer’s job, so is security.
OAuth 2.0 Threat Model Pentesting Checklist
OAuth 2.0 is used everywhere, and many developers and security people aren’t aware of the depth of threat that exists.
A deep dive into how we investigate and secure GitLab packages
Solving the software supply chain security issues requires a coordinated and organizationally wide approach.
5. Modern Static Analysis: how the best tools empower creativity
If you haven’t evaluated semgrep as a tool for inclusion in your application security program, it’s time.