Topic

#Appsec

9 articles on Appsec — news, releases, guides and analysis from the SourceFeed engine.

Article 2w ago 0

Ruby 4.0's New RCE Chain Proves Patching Gadgets Won't Save You

A fresh universal Marshal.load chain works back to Ruby 3.3 — and the real lesson is architectural, not a version bump.

Ji-ho Choi

Ruby's Marshal.load Just Became Unpatchable RCE

A new universal gadget chain anchors on Time and Hash internals the maintainers can't remove without breaking the language.

Article · 2w ago4

Copilot's Word worm survived two Microsoft patches

Microsoft spent 144 days hardening the read side of prompt injection; propagation happens on the write side.

Article · 1mo ago1

The High Price of Vibe Coding

As AI-assisted development drives a massive surge in leaked secrets and architectural flaws, the industry faces a compounding security debt.

Article · 1mo ago0

Alibaba’s Claude Code Ban Exposes the Agentic Security Paradox

As AI coding assistants demand direct terminal access, the line between developer utility and system backdoor is rapidly blurring.

Article · 1mo ago2

npm v12 Kills Auto-Run Scripts: What Developers Must Do

GitHub is finally disabling automatic lifecycle scripts in npm v12, forcing a major shift in dependency security.

Article · 2mos ago1

Why Agentic Code Audits Are Redefining AppSec for Lean Teams

Aikido's new Code Audit uses reasoning models to bridge the gap between pattern-matching SAST and expensive manual pentests.

Article · 2mos ago0

How an Insecure Update Flow Exposed AMD Systems to RCE

A trivial MITM vulnerability in AMD's AutoUpdate tool highlights the risks of ignoring transport security in software updates.

Article · 2mos ago0

Eyes Open, Vulnerabilities Shipping: The AI Code Security Paradox

A Checkmarx survey of 2,350 developers and security leaders finds 70% believe AI-generated code is more vulnerable — and nearly a third ship it to production anyway. The tools exist. The process doesn't.

Article · 2mos ago0