We Make Python Safer Than Ever
Explore efforts to enhance Python's security, including PyPI audits, improved practices, and community involvement. Learn about challenges, progress, and future plans for a safer ecosystem.
Making Python Safer Than Ever
Explore Python ecosystem security improvements, best practices for library maintainers and users, and PSF's efforts to enhance safety in the open-source supply chain.
CVSS v4 - A Better Version of an Imperfect Solution for Vulnerability Scoring
Explore CVSS v4's role in vulnerability risk management, its challenges, and potential improvements for effective cybersecurity prioritization and assessment.
Securing the Future
Explore the evolution of application security and learn strategies to build secure, future-proof technology. Gain insights into emerging trends and best practices for safeguarding tomorrow's innovations.
Application Security from Start to Finish
Comprehensive guide to integrating security throughout the development process, covering secure environments, dependency management, vulnerability scanning, and advanced testing techniques.
Sandboxing .NET Assemblies for Fun, Profit and of Course Security
Explore techniques for sandboxing third-party .NET libraries to enhance application security. Learn to create restricted environments, limiting functionality and improving overall security posture.
Security Minded Development
Learn essential security practices for software development, covering vulnerability prevention, safe data handling, and error management to create more robust and dependable systems.
Privacy, Consent and Security Within Modern Applications
Explore privacy regulations, consent management, and security considerations in modern app development, focusing on data handling, user trust, and regulatory compliance.
Knockout Win Against TCC - New Ways to Bypass Your MacOS Privacy Mechanisms
Explore techniques to bypass MacOS privacy mechanisms, including vulnerabilities in TCC framework, code injections, and system tool abuse. Compare security improvements between Monterey and Big Sur.
Go With the Flow - Enforcing Program Behavior Through Syscall Sequences and Origins
Explore syscall-flow-integrity protection (SFIP) to enhance application security by limiting control flow across user-to-kernel transfers, addressing vulnerabilities in complex software systems.
Sandboxing a Linux Application
Explore Linux application isolation techniques, including namespaces and filters, to create secure sandboxes for safe code evaluation and system protection.
An Acronym-Free Introduction to Software Supply Chain Security
Explore principles and practices for securing software supply chains without jargon. Learn about open-source projects, standards, and common terms to enhance your understanding of this rapidly evolving field.
AppSec and Microservices
Explore microservices security with Sam Newman, covering attack vectors, prevention tools, and real-world breach examples to enhance your application's protection strategies.
What is a CDN and Why Developers Should Care About Using One
Explore CDN benefits, challenges, and developer-focused solutions. Learn how Fastly's unique architecture enhances application security, acceleration, and developer experience.
What is Rugged All About?
Explore the concept of Rugged software development, focusing on building secure and resilient systems that can withstand real-world challenges and threats.
Practical Microservice Security
Explore microservice security challenges and solutions, covering authentication, authorization, API protection, and best practices for building secure distributed systems.
Secure Coding Patterns
Learn essential secure coding practices and patterns to build trust-centric applications. Discover how to integrate security into your development process for robust, resilient software.
SKF Keeper Project - There Is No Right or Wrong, Only Fun and Boring
Explore secure software development with SKF Keeper, an open-source platform offering defensive coding, offensive testing, and infra security tracks. Learn to prevent vulnerabilities and elevate AppSec maturity.
A 1.5MB Java Container App? Yes You Can!
Optimize Java container apps to 1.5MB using GraalVM Native Image, musl libc, and lightweight containers. Achieve faster startup, lower resource usage, and enhanced security for cloud-native deployments.
Don't Hack the Platform
Explore Java vulnerabilities and lesser-known JVM weaknesses. Learn to guard against potential exploits and enhance code security through practical examples and expert insights.
Deserialization Exploits in Java - Why Should I Care?
Explore Java deserialization vulnerabilities, attack chains, and security issues in JSON, XML, and YAML. Learn mitigation strategies and new Java 17 features to enhance application security.