Liran Tal

After three years of silence, a new jQuery prototype pollution vulnerability emerges once again

April 15, 2019

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

April 4, 2019

Introducing experimental integrity policies to Node.js

March 21, 2019

What is package lock json and how a lockfile works for yarn and npm packages?

March 14, 2019

Open source maintainers want to be secure, but 70% lack skills

February 26, 2019

Top ten most popular docker images each contain at least 30 vulnerabilities

February 26, 2019

ReDoS vulnerabilities in npm spikes by 143% and XSS continues to grow

February 26, 2019

88% increase in application library vulnerabilities over two years

February 26, 2019

81% believe developers should own security, but they aren’t well-equipped

February 26, 2019

78% of vulnerabilities are found in indirect dependencies, making remediation complex

February 26, 2019

10 npm Security Best Practices

February 19, 2019

A serious security flaw in runC can result in root privilege escalation in Docker and Kubernetes

February 13, 2019