Aug 15, 2025
•
11 min read
Application Security sits in a space where theory meets reality, with all of the associated baggage.
Aug 1, 2025
9 min read
Manual Source Code Review, AI Slop in Bug Bounties, AppSec Authorization
Jul 18, 2025
Effective technology and security sales involve understanding a client's origin story.
Jul 10, 2025
10 min read
Too much choice for authentication controls results in additional risk, while placing trust in browser AI Agents can result in unintended exploitation, exposure, or more.
Jun 23, 2025
Keeping up with the changing security landscape due to AI
Jun 13, 2025
7 min read
Open Source Dependency Threats
Jun 6, 2025
The One True Secure Framework, Secure Code Best Practices
May 23, 2025
79 min read
Authenticating Open Source Developers
May 19, 2025
8 min read
EasyJSON, Software Dependencies, Breaches
May 11, 2025
14 min read
Secure-by-Default, Vibe Coding, and Going Back to Basics
Apr 25, 2025
Intentionally-Vulnerable MCP Server, Hallucinating Software Packages
Apr 18, 2025
Model Context Protocol, A2A, NHI Authentication