Shibuya Ward cancels New Year countdown event; security to be tightened

Sectigo’s Wrongful Revocation of RustDesk’s EV Certificate: A Concerning Precedent for the Software Security Ecosystem

Small Language Models Create New Security Risks

Feedback on my authentication starter template - Security & Architecture review

Help wanted: Making sqd safe for production use (Go/security)

Mcpwn: Security scanner for MCP servers (pure Python, zero dependencies)

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM

Memory Safety for Skeptics

6 years after too much crypto

US Congressional Budget Office Hit By Suspected Foreign Cyberattack

Notes by djb on using Fil-C

We should all be using dependency cooldowns

Someone Is Trying To 'Hack' People Through Apple Podcasts

Fun-reliable side-channels for cross-container communication

PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats

Stop Hacklore – An Open Letter

Landlock-Ing Linux

Is anyone using Project Hummingbird?

US banks scramble to assess data theft after hackers breach financial tech firm

Releasing Packages with a Valet Key: npm, PyPI, and beyond

Announcing Magika 1.0: now faster, smarter, and rebuilt in Rust

Hacker Conference Installed a Literal Antivirus Monitoring System

Google Says Hackers Stole Data From Over 200 Companies Following Gainsight Breach

Inside a global campaign hijacking open-source project identities

Stop Putting Your Passwords into Random Websites (Yes, Seriously, You Are the PR

Leak of identity of anonymous reviewers, authors, and area chairs on OpenReview

Shai-Hulud Returns: Over 300 NPM Packages Infected

Gen Z Officially Worse At Passwords Than 80-Year-Olds

Practical Security in Production

ML-KEM Mythbusting

More →