Topic

#Security

185 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

AI Didn't Kill JS Obfuscation, It Repriced It

LLMs erased renaming and shred obfuscator.io defaults, but runtime-dependent and polymorphic protection still costs attackers real money.

Ji-ho Choi

AWS Lambda MicroVMs Solve the AI Code Execution Security Problem

A new serverless primitive brings stateful Firecracker sandboxes to developers executing untrusted user and AI code.

Article · 2mos ago1

Unifying Developer Tooling with an OpenAI Gateway for Bedrock

Run local coding assistants and enterprise SDKs against secure AWS models without changing a single line of code.

Article · 2mos ago0

Catch Risky Code Before It Merges: Add Semgrep SAST to Your GitHub Actions Pipeline

Wire Semgrep into GitHub Actions to scan every pull request against OWASP Top 10 rules and a custom rule you write yourself — so a CI failure blocks the merge before risky code reaches main.

Tutorial · 2mos ago0

Agentjacking: How Public Sentry Keys Turn AI Coding Agents Into Trojan Horses

A newly disclosed exploit chain weaponizes public DSNs and the Model Context Protocol to execute arbitrary code on developer machines.

Article · 2mos ago4

Demystifying iOS Device Fingerprinting with Loupe

Mysk's open-source tool exposes the public APIs that native iOS apps use to quietly track and identify users.

Article · 2mos ago3

Why Developers Still Fail to Understand CORS

CORS is not a server firewall, but a browser-enforced relaxation of the Same-Origin Policy designed to protect users.

Article · 2mos ago2

Linux 7.2 Kills strncpy: The Six-Year War on a Broken API

After 362 patches, the Linux kernel has completely excised strncpy, cementing strscpy as the modern standard for safe string copying.

Article · 2mos ago0

GPS Spoofing at Scale Demands Zero Trust Location

As continental-scale signal tampering corrupts GNSS reliability, developers must treat location data as an untrusted input.

Article · 2mos ago0

Why Agentic Code Audits Are Redefining AppSec for Lean Teams

Aikido's new Code Audit uses reasoning models to bridge the gap between pattern-matching SAST and expensive manual pentests.

Article · 2mos ago0

Zero-Touch OAuth: Securing the MCP Enterprise Agent Stack

The Enterprise-Managed Authorization extension replaces manual consent prompts with centralized, identity-driven token exchange for AI agents.

Article · 2mos ago2

The SQLite App Server: Why Datasette Apps Changes the Game

By embedding sandboxed HTML/JS apps directly alongside SQLite databases, Datasette becomes a secure, zero-maintenance internal tool platform.

Article · 2mos ago1

Defend Your LLM App Against Prompt Injection and Jailbreaks

Build a practical two-layer defense—regex heuristics plus an ML classifier—and an output guardrail that blocks attacks before they reach your model or your users.

Tutorial · 2mos ago0

Sliding-Window Rate Limiting for FastAPI with Redis

Protect your Python API from hammering and credential-stuffing with a per-IP and per-token rate limiter backed by Redis — before you ship to production.

Tutorial · 2mos ago0

Why JWTs Are a Security Anti-Pattern for Sessions

Relying on stateless JSON Web Tokens for persistent user sessions introduces severe security risks and architectural complexity.

Article · 2mos ago0

Why CVE Counts Misrepresent Rust and C/C++ Security

Comparing vulnerability counts ignores how the two language ecosystems define the boundary between library bugs and caller misuse.

Article · 2mos ago0