Topic

#Security

185 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

AI Didn't Kill JS Obfuscation, It Repriced It

LLMs erased renaming and shred obfuscator.io defaults, but runtime-dependent and polymorphic protection still costs attackers real money.

Ji-ho Choi

Stop GitHub Copilot From Sabotaging Your Terraform Security

AI autocompletions silently introduce insecure IaC patterns that pass local validation but fail in production.

Article · 2mos ago2

Dynamic Database Credentials with HashiCorp Vault: AppRole Auth and Short-Lived Postgres Secrets

Stop hardcoding database passwords. Configure Vault's AppRole auth method and database secrets engine to issue per-application, auto-expiring Postgres credentials that your app fetches at runtime and Vault cleans up automatically.

Tutorial · 2mos ago0

The MCP Security Blind Spot in AI Coding Assistants

A high-severity flaw in Amazon Q Developer highlights how repository-carried configuration files are turning simple git clones into cloud compromises.

Article · 2mos ago0

Miasma Proves Trusted Publishing Can Backfire Spectacularly

The self-propagating Miasma worm exploits GitHub Actions OIDC and phantom build files to turn security standards against developers.

Article · 2mos ago0

Akrites Bets Open Source Security on Secrecy and Speed

A Linux Foundation coalition wants to patch the commons before AI-assisted attackers can, but the model trades transparency for a head start.

News · 2mos ago1

Prompt Injection Is the Least of Your AI Security Problems

Real-world attacks reveal that while frontier models can resist linguistic trickery, your glue code and infrastructure are wide open.

Article · 2mos ago1

The Client-Side Illusion: Lessons from the J&J Web App Vulnerabilities

Relying on frontend SSO flows without backend token validation is a recipe for trivial administrative takeovers.

Article · 2mos ago0

The AI Auditing Wave and the End of Battle-Tested Code

As AI-driven vulnerability discovery systematically strips latent bugs from curl, developers must rethink their dependency patching strategies.

Article · 2mos ago1

The distillation attack no API can fully block

Anthropic's 28.8-million-query accusation against Alibaba exposes an uncomfortable truth: when you sell model outputs, you sell the training data too.

Article · 2mos ago4

Minimus Goes Free to Commoditize Hardened Container Images

By removing the registration wall, Minimus challenges Chainguard and shifts the container security focus from scanning to stripping bloat.

Article · 2mos ago2

Audit Your Software Supply Chain: Generate an SBOM with Syft and Gate CI on a Grype Vulnerability Scan

Wire Syft and Grype into your pipeline to produce a machine-readable SBOM and break the build the moment a high-severity CVE appears in your dependencies.

Tutorial · 2mos ago0

Detect and Alert on Suspicious Container Behavior at Runtime with Falco

Deploy Falco on Kubernetes via Helm, write custom rules for real attack patterns, and route live alerts to Slack through Falco Sidekick.

Tutorial · 2mos ago0

Vulnerability Reports Lost Their Privilege. Now What?

Cheap LLM bug-hunting has collapsed the signal-to-noise of disclosures, and the old etiquette of coordinated reporting no longer pays for itself.

Article · 2mos ago3

Cryptographic Trust Over Tracking: Inside the PACT Protocol

Cloudflare and major browsers propose Private Access Control Tokens to replace invasive bot detection with anonymous cryptographic proof.

Article · 2mos ago0

OpenAI's GPT-5.5-Cyber is a bet on patching, not finding

The benchmark bump is noise; the gated access, maintainer program and vendor channel are the real moves.

News · 2mos ago2