Application SecurityYou should be using HTTP Strict Transport Security (HSTS) headers in your Node.js serverDecember 29, 2022
Application SecurityBuilding an application security battle plan: Home Alone editionDecember 20, 2022
Open Source SecurityExploring the Spring Security authorization bypass (CVE-2022-31692)December 16, 2022
Vulnerability InsightsUnsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)December 14, 2022
Application SecurityAWS re:Invent 2022: How Neiman Marcus transitioned to developer-first securityDecember 12, 2022