Second wave of Shai-Hulud npm worm compromises the global software supply chain
How bad is a missing Content-Type header?
Why Predictive Risk Scoring is the smart way to do AI in application security
Google Cloud affected by CVE-2021-30476
How to choose the right application security tools
kntrl integrates Open Policy Agent
4 Ways to Improve AppSec Accountability
What is DevSecOps and how is it evolving?
How you can disable directory listing on your web server—and why you should
