React2Shell: Critical RCE in React Server Components and Next.js (CVE-2025-55182, CVE-2025-66478)
Second wave of Shai-Hulud npm worm compromises the global software supply chain
Is the CISO role becoming unsustainable?
OWASP Top 10 update for 2025: Two decades of AppSec
Broken object-level authorization (BOLA) API vulnerability explained
Cloud-native DAST: Securing apps in Kubernetes, serverless, and microservices
API security best practices for modern architectures
The hidden cost of fragmented AppSec: Why enterprises need ASPM
Shadow API governance: Policies and guardrails
