Topic

#Security

57 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

The Supreme Court Just Broke Your Transatlantic Data Flows

The loss of FTC independence invalidates the core of the EU-US Data Privacy Framework, forcing immediate architectural changes.

Emeka Okafor

Why Agentic Code Audits Are Redefining AppSec for Lean Teams

Aikido's new Code Audit uses reasoning models to bridge the gap between pattern-matching SAST and expensive manual pentests.

Article · 1w ago0

Zero-Touch OAuth: Securing the MCP Enterprise Agent Stack

The Enterprise-Managed Authorization extension replaces manual consent prompts with centralized, identity-driven token exchange for AI agents.

Article · 1w ago2

The SQLite App Server: Why Datasette Apps Changes the Game

By embedding sandboxed HTML/JS apps directly alongside SQLite databases, Datasette becomes a secure, zero-maintenance internal tool platform.

Article · 1w ago1

Defend Your LLM App Against Prompt Injection and Jailbreaks

Build a practical two-layer defense—regex heuristics plus an ML classifier—and an output guardrail that blocks attacks before they reach your model or your users.

Tutorial · 1w ago0

Sliding-Window Rate Limiting for FastAPI with Redis

Protect your Python API from hammering and credential-stuffing with a per-IP and per-token rate limiter backed by Redis — before you ship to production.

Tutorial · 1w ago0

Why JWTs Are a Security Anti-Pattern for Sessions

Relying on stateless JSON Web Tokens for persistent user sessions introduces severe security risks and architectural complexity.

Article · 2w ago0

Why CVE Counts Misrepresent Rust and C/C++ Security

Comparing vulnerability counts ignores how the two language ecosystems define the boundary between library bugs and caller misuse.

Article · 2w ago0

How a Fake LinkedIn Job Offer Delivered a Node Backdoor

Attackers are using stolen identities and malicious npm lifecycle scripts to target developers during the recruitment process.

Article · 2w ago4

Replace Long-Lived AWS Credentials with GitHub Actions OIDC

Configure IAM and GitHub Actions to exchange short-lived, automatically-expiring AWS credentials on every workflow run — no stored access keys, no rotation toil.

Tutorial · 2w ago0

Curl Pauses Vulnerability Report Intake for July 2026

The project's HackerOne form and security inbox go dark for a month, pushing coordinated disclosure plans into August.

News · 2w ago2

Sophisticated AUR Malware Waves Expose Container and Pipeline Risks

A second wave of obfuscated malware targeting Arch Linux's user repository highlights the danger of unpinned, automated builds.

Article · 2w ago3

Harden a Fresh Linux VPS in 30 Minutes: SSH Keys, UFW, and Fail2ban

Lock down a brand-new Ubuntu 22.04 server before you deploy anything: disable password logins, firewall every unused port, and auto-ban brute-force attackers.

Tutorial · 2w ago0