Two CI/CD vulnerabilities in the nodejs/node GitHub repository exposed Node.js to remote code execution on Jenkins agents and the potential to merge unreviewed code to the main branch of the repository.

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. Please visit the What The Hack website at: https:...

We have discovered a critical vulnerability in the Model Context Protocol (MCP) that allows for

How does your browser know a website is legit? This post simplifies TLS, certificate validation, and the trust chain behind secure connections

By Daniel Heinen

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

Website with the collection of all the cheat sheets of the project.

Question : What is the maximum number of characters an email address can have?

Here we go through some of the essential protocols required for robust API security.

We go through the fundamentals of API security, including best practices and key considerations for developers and businesses.

Website with the collection of all the cheat sheets of the project.

Researchers uncover a new DoS attack vector targeting UDP-based application protocols, potentially endangering hundreds of thousands of hosts.

The following is a true story. Or maybe it’s just based on a true story. Perhaps it’s not true at all.

For at least two years now I have been complaining about the lack of Artificial Intelligence (AI) Security resources. I complain about many…

At Fox-IT (part of NCC Group) identifying servers that host nefarious activities is a critical aspect of our threat intelligence. One approach involves looking for anomalies in responses of HTTP se…

Introduction DevOps has been rapidly evolving in the software development landscape, and from the cornerstone Docker has emerged. Its ability to package applications into portable, scalable containers has taken deployment strategies to the next level. However, with this power, comes the responsibility of securing the containers. In this blog, we dive deep into advanced techniques and best practices for securing Docker containers, ensuring your deployments are not just efficient but also fortified against a variety of cyber threats.

This article outlines cybersecurity challenges such as vendor security and the rise of IoT. Solutions include real-time intelligence and cyber-insurance.

Learn how to write your first policy as code rules in Rego. This Rego tutorial for beginners covers the basics of Rego syntax and using OPA.