AI Vulnerability Finding sch )Nov 2, 2026 657 ai , vulnerabilities , metrics Compromised eMudhra Certificates: Update Your JetBrains IDEs, Resharper, .NET Tools, Toolbox App, and Gateway Now ily /jet )Oct 30, 2026 656 certificates , jetbrains , code-editors The PHP Incident mik /ore )Oct 28, 2026 655 php CVE-2026-111181: Denial of Service in Body-Parser exp )Oct 28, 2026 654 express , vulnerabilities The Most Vulnerable Week in Internet History… fir )Oct 23, 2026 653 videos , php , gitlab , ai , certificates AI Is Unearthing Internet’s Hidden Flaws—and More Outages May Follow str )Oct 23, 2026 652 web , ai Building an Isolated Preview for AI-Generated HTML fro )Oct 22, 2026 651 html , ai , testing DeadTag: How Forgotten Website Tags Became a Delivery Network for iPhone Spyware sco )Oct 22, 2026 650 embed-code , analytics , iphone There Isn’t an Easy Exploit for This PHP Vulnerability Oct 21, 2026 649 php , vulnerabilities The State of AI Security: Threats, Tools, and Skills Gaps mik /ore )Oct 21, 2026 648 surveys , metrics , ai PHP Warns It Plans to Release 2 Emergency Patches Imminently dan /ars )Oct 21, 2026 647 php Today’s PHP Security Release, and How We’re Strengthening PHP Security the )Oct 21, 2026 646 php Websites Taken Down Across Europe as Critical Cyber-Security Update Issued joe )Oct 21, 2026 645 php Chinese AI Writes Weaker Code for Beijing’s Adversaries. We Fixed It. A Qwen3-Coder Case Study Oct 21, 2026 644 ai , qwen , alibaba , case-studies Eight Bits of Trust; eMudhra’s CA Keys Cracked in Milliseconds sco )Oct 20, 2026 643 certificates Delete All CVEs nod )Oct 15, 2026 642 videos , ai , foss Exposing AdFection cit )Oct 15, 2026 641 monetization , privacy , politics Cyber Resilience for Application Developers aki /nod )Oct 15, 2026 640 videos , legal , resilience Getting Ahead of Supply-Chain Attacks in 2026 nod )Oct 15, 2026 639 videos , npm , malware Hackers Hijacked 1,900 GitHub Accounts—Then They Went After 30,000 Repos Oct 15, 2026 638 github Wednesday, October 21, 2026 Security Releases nod )Oct 14, 2026 637 release-notes , nodejs Secure Cookies With “SameSite”: Lax, Strict, and Cross-Site Rules Oct 8, 2026 636 cookies , examples , express , nextjs , django , checklists , debugging Upcoming Next.js Security Update for Upstream Vulnerabilities Oct 8, 2026 635 nextjs Testing an Iframe’s “postMessage” Handler fro )Oct 7, 2026 634 iframes , javascript How Abliterated Models Can Get You Pwned pro )Oct 6, 2026 633 ai Zeroization: Wiping Can Make Things Worse jed )Oct 6, 2026 632 cryptography , c Security Headers Check: How to Find and Fix Missing HTTP Security Headers sit )Oct 1, 2026 631 how-tos , http-headers , http , dev-tools , csp , cookies , nginx There’s a New Way to Break RSA That’s Faster Than Anything We’ve Seen Before dan /ars )Sep 24, 2026 630 cryptography Stage-Only npm Tokens for Safer Automation Sep 18, 2026 629 npm , automation The AI Threat Is Real, It Just Isn’t the One in the Headlines rob )Sep 18, 2026 628 ai , outlooks , anthropic , openai An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang agr /wir )Sep 18, 2026 627 google Introducing secure-eval-worker mco /pla )Sep 17, 2026 626 introductions , nodejs , libraries , javascript , permissions Anthropic’s Misuse Report, Condensed to 117 Findings dan )Sep 14, 2026 625 anthropic , claude , ai , ai-agents Website Audit Guide: What to Check Across Six Areas, From Security to Integrations sit )Sep 13, 2026 624 guides , auditing , seo , content , ai , accessibility , performance The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library soa )Sep 12, 2026 623 v8 , javascript , time Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364) f5l )Sep 11, 2026 622 vite npm Extends Recovery-Code Security Holds to All Accounts Sep 9, 2026 621 npm A Developer’s Practical Guide to Integrating AI Tools in Modern Web Development Sep 8, 2026 620 guides , ai , tooling OpenAI Agents Hijacked German Website Before Hugging Face Hack, Report Claims zsk )Sep 4, 2026 619 openai , ai Your Next OpenAI API Timeout Might Not Be a Timeout at All Sep 2, 2026 618 openai , ai Aaron D. Campbell on Navigating WordPress Security in the AI Era aar +)Sep 2, 2026 617 podcasts , interviews , wordpress , ai Vibe-Coded Apps Are the New Shadow IT Sep 1, 2026 616 vibe-coding , ai , tooling Ensuring Code Compliance in Public Sector Software Projects jet )Sep 1, 2026 615 compliance , privacy , auditing , qodana Good Riddance, TeamPCP. Now for the Hard Part. Aug 27, 2026 614 OpenAI Agents Hacked Hugging Face in 700-Strong Swarm, Tried to Cover Tracks: Investigations str )Aug 27, 2026 613 openai , hugging-face , ai AI Checks AI: OpenAI Promises More Control After Attack on Hugging Face mho /hei )Aug 19, 2026 612 ai , openai , hugging-face The Pulse: Grok’s CLI Caught Uploading All Your Local Files to the Cloud ger )Aug 19, 2026 611 ai Why “rel="noopener"” Is Obsolete for Links Aug 17, 2026 610 html , links , privacy Triaging the AI Horde mco )Aug 9, 2026 609 ai , processes CSS: The Bomb Inside Your Inbox gaz /por )Aug 6, 2026 608 css , html , csp , email Web Security Is Too Hard eri )Aug 4, 2026 607 cloudflare , case-studies Major Shai Hulud Campaign Strikes npm Again, Affecting keyv and 400+ Packages Aug 4, 2026 606 npm , dependencies Stronger With Every Update: How We’re Making Chrome and the Web Safer in the AI Era Jul 30, 2026 605 chrome , browsers , ai Amazon Identifies North Korean Hacker Group Behind Open-Source Supply Chain Attacks Jul 29, 2026 604 foss , amazon Maciek Palmowski on Testing Secure WordPress Hosting: Does the Marketing Match Reality? pal +)Jul 29, 2026 603 podcasts , interviews , wordpress , hosting The Secure Way to Release an npm Package in 2026 sit +/evi )Jul 28, 2026 602 dependencies , npm , configuration npm Publish-Time Malware Scanning and Dual-Use Metadata Jul 28, 2026 601 npm , dependencies Disrupting Supply Chain Attacks on npm and GitHub Actions gre +)Jul 28, 2026 600 npm , github-actions , link-lists Local-First AI Coding Workflow for Security-Conscious Teams age )Jul 28, 2026 599 ai , processes Monday, July 27, 2026 Security Releases nod )Jul 21, 2026 598 release-notes , nodejs Weaponizing and Defending the React Flight Protocol: Deserialization Sinks in RSCs sma )Jul 21, 2026 597 react , components Hackers Are Exploiting Recently Patched WordPress Bugs, Putting Millions of Websites at Risk lor )Jul 20, 2026 596 wordpress , bugs [Hugging Face] Security Incident Disclosure—July 2026 Jul 16, 2026 595 hugging-face , ai Milan Petrović on the Risks of Legacy PHP in WordPress and Why Upgrading Matters for Security nat )Jul 15, 2026 594 podcasts , interviews , php , wordpress , maintenance Now, Defenders Are Embracing the Prompt Injection, Too ars )Jul 13, 2026 593 ai , prompting npm Install-Time Security and GAT bypass2fa Deprecation Jul 8, 2026 592 npm , deprecation You Shouldn’t Trust Trusted Publishing yos )Jul 7, 2026 591 authentication 6 Security Settings Every GitHub Maintainer Should Enable This Week Jul 1, 2026 590 github , configuration , documentation Shipping Post-Quantum Cryptography to Python tra )Jun 30, 2026 589 python , cryptography , foss npm Adds Preventive Account Protection for High-Impact Accounts Jun 25, 2026 588 npm Ignore DNSSEC if You Like MITM Attacks Jun 24, 2026 587 dns Anthropic’s Fable and the State of AI sch )Jun 19, 2026 586 ai , anthropic , foss Blocking Install Scripts Is Not a Silver Bullet uli /nod )Jun 19, 2026 585 npm Reuse Less Software Jun 11, 2026 584 dependencies , processes Upcoming Breaking Changes for npm v12 Jun 9, 2026 583 npm Wednesday, June 17, 2026 Security Releases nod )Jun 9, 2026 582 release-notes , nodejs npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders sar /soc )Jun 9, 2026 581 npm , bugs The Website Specification joo )May 29, 2026 580 websites , documentation , fundamentals , seo , accessibility , ai-agents , performance , privacy , resilience , internationalization The VibeSec Reckoning mfo )May 27, 2026 579 ai , vibe-coding Megalodon: Mass GitHub Repo Backdooring via CI Workflows May 21, 2026 578 github , ci-cd GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension the )May 21, 2026 577 github , vs-code Mini Shai Hulud: Compromised @antv npm Packages Enable CI/CD Credential Theft May 20, 2026 576 npm , dependencies , ci-cd GitHub Hacked—Internal Source Code Repositories Compromised via Employee Device May 20, 2026 575 github Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised May 19, 2026 574 npm , dependencies “The Worst Leak That I’ve Witnessed”: US Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub giz )May 18, 2026 573 passwords , github A Worm Just Ate Its Way Through the npm Registry… fir )May 14, 2026 572 videos , npm , dependencies , tanstack Hardening TanStack After the npm Compromise cru +/tan )May 12, 2026 571 tanstack Hackers Abuse Google Ads and Claude.ai Shared Chats to Distribute macOS Malware May 11, 2026 570 malware , macos , google , claude , ai Weekend at Bernie’s and )May 8, 2026 569 dependencies , foss , metrics Behind the Scenes Hardening Firefox With Claude Mythos Preview fre +/moz )May 7, 2026 568 firefox , browsers , claude , ai Trustworthy JavaScript for the Open Web moz )May 5, 2026 567 javascript , open-web , firefox , browsers The Zero-Days Are Numbered moz )Apr 21, 2026 566 firefox , browsers , ai , anthropic Vercel April 2026 Security Incident Apr 19, 2026 565 vercel AI Will Never Be Ethical or Safe j9t )Apr 14, 2026 564 ai , ethics No One Owes You Supply-Chain Security pur )Apr 11, 2026 563 dependencies , rust Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them Apr 9, 2026 562 wordpress , plugins Adversarial AI: Understanding the Threats to Modern AI Systems jet )Apr 7, 2026 561 ai , concepts Anthropic Debuts Preview of Powerful New AI Model Mythos in New Cybersecurity Initiative Apr 7, 2026 560 anthropic , ai Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign sar /soc )Apr 3, 2026 559 nodejs , foss Post Mortem: Axios npm Supply Chain Compromise Apr 2, 2026 558 axios , npm The Hidden Blast Radius of the Axios Compromise ahm /soc )Apr 1, 2026 557 dependencies , npm , axios Minimum Release Age Is an Underrated Supply Chain Defense dan )Mar 31, 2026 556 dependencies , npm , bun , pnpm , yarn , deno , renovate , dependabot , axios Prevent Claude Code From Accessing .env jad )Mar 30, 2026 555 claude , ai , environments Axios Compromised on npm—Malicious Versions Drop Remote Access Trojan Mar 30, 2026 554 npm , dependencies , axios Node.js Brotli UAF mai )Mar 29, 2026 553 nodejs , permissions , brotli , compression , claude , ai Malicious PyPI Package—LiteLLM Supply Chain Compromise Mar 25, 2026 552 dependencies , vulnerabilities Developing a Minimally HashDoS Resistant, Yet Quickly Reversible Integer Hash for V8 joy /nod )Mar 24, 2026 551 nodejs , hashing Tuesday, March 24, 2026 Security Releases nod )Mar 17, 2026 550 release-notes , nodejs Supply-Chain Attack Using Invisible Code Hits GitHub and Other Repositories dan /ars )Mar 13, 2026 549 github , dependencies OWASP’s Top 10 Ways to Attack LLMs: AI Vulnerabilities Exposed Mar 7, 2026 548 videos , vulnerabilities , ai , owasp A GitHub Issue Title Compromised 4,000 Developer Machines Mar 5, 2026 547 github , ai How to Steal npm Publish Tokens by Opening GitHub Issues nec )Mar 4, 2026 546 npm , github , ai MCP Servers and the Return of the Service Account Problem aem )Mar 2, 2026 545 servers , mcp , ai Security Advisory: Addressing Recent Vulnerabilities in Angular ang )Feb 27, 2026 544 angular An Exploit… in CSS?! css )Feb 25, 2026 543 css Goodbye “innerHTML”, Hello “setHTML”: Stronger XSS Protection in Firefox 148 moz )Feb 24, 2026 542 javascript , methods , xss , firefox , browsers How Fake CAPTCHA Scams Trick You Into Installing Malware mal )Feb 21, 2026 541 captcha , malware Europe Is Ready to Ditch US Tech for Private Alternatives pro )Feb 17, 2026 540 tooling , privacy , metrics WebSocket Penetration Testing: A Complete Guide to CSWSH Feb 9, 2026 539 guides , websockets , testing Node.js Path Traversal: Prevention and Security Guide loi )Feb 2, 2026 538 guides , nodejs Cryptography Usage in Web Standards w3c )Jan 29, 2026 537 standards , cryptography OpenJS Foundation Security Program: Annual Report 2025 ope )Jan 29, 2026 536 openjs A Security Checklist for Your React and Next.js Apps Jan 26, 2026 535 react , nextjs How to Implement Rate Limiting in nginx naw /one )Jan 25, 2026 534 how-tos , servers , nginx , rate-limiting Securing npm Is Table Stakes nza +/cha )Jan 21, 2026 533 podcasts , interviews , npm , ai Security vik +/htt )Jan 16, 2026 532 web-almanac , studies , research , metrics , tls , certificates , cookies , csp , http-headers , apis , sanitization , configuration Node.js January 2026 Security Release: What Changed and Why It Matters nod )Jan 14, 2026 531 nodejs Tuesday, January 13, 2026 Security Releases nod )Jan 13, 2026 530 release-notes , nodejs Mitigating Denial-of-Service Vulnerability From Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users mco +/nod )Jan 13, 2026 529 nodejs , vulnerabilities , react , nextjs , tooling , monitoring , performance npm to Implement Staged Publishing After Turbulent Shift Off Classic Tokens sar /soc )Jan 7, 2026 528 npm , dependencies Security Basics for Vibe-Coders owe /pro )Jan 2, 2026 527 fundamentals , vibe-coding , ai Testing Methods: Accessible Authentication (Enhanced) dec )Dec 29, 2025 526 accessibility , testing , wcag , authentication Testing Methods: Accessible Authentication (Minimum) dec )Dec 28, 2025 525 accessibility , testing , wcag , authentication Denial of Service and Source Code Exposure in React Server Components rea )Dec 11, 2025 524 react , components Thursday, December 18, 2025 Security Releases nod )Dec 8, 2025 523 release-notes , nodejs How We’re Protecting Our Newsroom From npm Supply Chain Attacks rya /pnp )Dec 5, 2025 522 npm , dependencies , case-studies No More Tokens—Locking Down npm Publish Workflows zac )Dec 4, 2025 521 npm , dependencies , processes [Next.js] Security Advisory: CVE-2025-66478 seb )Dec 3, 2025 520 nextjs Critical Security Vulnerability in React Server Components rea )Dec 3, 2025 519 react , components Decreasing [Let’s Encrypt] Certificate Lifetimes to 45 Days mat /let )Dec 2, 2025 518 http , certificates , lets-encrypt Taking Down Next.js Servers for 0.0001 Cents a Pop Nov 26, 2025 517 servers , nextjs , vulnerabilities The Shai-Hulud 2.0 npm Worm: Analysis, and What You Need to Know Nov 25, 2025 516 npm , dependencies GitLab Discovers Widespread npm Supply Chain Attack Nov 24, 2025 515 npm , dependencies , gitlab , aws , gcp , azure Automated npm Secret Rotation in GitHub Actions mhe )Nov 16, 2025 514 npm , automation , github-actions What Developers Really Mean by “Bad Code” jet )Nov 12, 2025 513 maintainability , scalability , consistency , quality Introducing the OWASP Top 10:2025 she +/owa )Nov 5, 2025 512 introductions , owasp , vulnerabilities Removing XSLT for a More Secure Browser dro )Oct 29, 2025 511 chromium , chrome , browsers , xsl , web-platform HTTPS by Default jde +)Oct 28, 2025 510 http , chrome , browsers Agentic AI and Security ksi /mfo )Oct 28, 2025 509 ai , architecture Will npm’s New Security Steps Stop Attacks? rev )Oct 28, 2025 508 npm , maintenance , foss Octoverse: A New Developer Joins GitHub Every Second as AI Leads TypeScript to #1 Oct 28, 2025 507 github , metrics , productivity , ai , foss , programming Glassworm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace Oct 18, 2025 506 code-editors , vs-code Improving the Trustworthiness of JavaScript on the Web Oct 16, 2025 505 javascript , web-apps Past Time for Passkeys nor )Oct 15, 2025 504 videos , passkeys , passwords , authentication Secure Coding in JavaScript Oct 15, 2025 503 javascript , frameworks My Conclusions After Using Signed Exchanges on My Website for 2 Years paw )Oct 9, 2025 502 signed-exchanges , performance Lazy-Loading as a Security Measure Oct 6, 2025 501 lazy-loading , angular , react Backend Concepts Every Experienced Developers Must Know Oct 4, 2025 500 concepts , network , concurrency , apis , databases , caching , scalability , observability , architecture Fixing Safari Mixed Content Issues With Vite and mkcert Oct 3, 2025 499 safari , browsers , vite , tooling How Deno Protects Against npm Exploits den )Sep 30, 2025 498 deno , npm Strengthening npm Security: Important Changes to Authentication and Token Management Sep 29, 2025 497 npm How Hackers Use AI to Find Vulnerabilities Faster Sep 25, 2025 496 ai Our Plan for a More Secure npm Supply Chain xco )Sep 22, 2025 495 npm , dependencies , foss CAPTCHA, When Security Takes Precedence Over Accessibility Sep 22, 2025 494 captcha , accessibility npm Security Best Practices Sep 21, 2025 493 npm , provenance , best-practices This May Be the Worst One the )Sep 17, 2025 492 videos , npm , dependencies Ongoing Supply Chain Attack Targets CrowdStrike npm Packages pvd +/soc )Sep 16, 2025 491 npm , dependencies ctrl/tinycolor and 40+ npm Packages Compromised Sep 15, 2025 490 npm , dependencies How Maintainer Burnout Is Causing a Kubernetes Security Disaster Sep 11, 2025 489 kubernetes , maintenance , foss , economics Oh No, Not Again… a Meditation on npm Supply Chain Attacks tan )Sep 9, 2025 488 npm , dependencies , microsoft Anatomy of a Billion-Download npm Supply-Chain Attack Sep 8, 2025 487 npm , dependencies npm Author Qix Compromised via Phishing Email in Major Supply Chain Attack bur +/soc )Sep 8, 2025 486 npm , dependencies CORS Explained: Stop Struggling With Cross-Origin Errors Sep 3, 2025 485 cors , http-headers , http How OpenJS-Hosted Projects Benefit From Security Support ope )Sep 2, 2025 484 openjs , hosting , foss Why You Absolutely Need to Have Automated Dependency Management in Place j9t )Aug 28, 2025 483 dependencies , maintainability , maintenance , automation , tooling What Your Website’s Style Says About You—and How Hackers Can Use It Against You err )Aug 1, 2025 482 css , javascript Hardening Node.js Apps in Production: 8 Layers of Practical Security Jul 29, 2025 481 nodejs , best-practices eslint-config-prettier Compromised: How npm Package With 30 Million Downloads Spread Malware Jul 21, 2025 480 prettier , eslint , npm , malware npm Phishing Email Targets Developers With Typosquatted Domain sar /soc )Jul 18, 2025 479 npm AI Agents Are Creating a New Security Nightmare for Enterprises and Startups Jul 18, 2025 478 ai , apis Tuesday, July 15, 2025 Security Releases nod )Jul 15, 2025 477 release-notes , nodejs Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader soc )Jul 14, 2025 476 npm , dependencies Top 5 Problems With Vibe Coding Jul 1, 2025 475 vibe-coding , ai , maintainability , scalability , debugging , design Dependabot Supports Configuration of a Minimum Package Age Jul 1, 2025 474 dependabot , configuration MCP Security Vulnerabilities and Attack Vectors Jun 27, 2025 473 mcp , ai A New Era of Code Quality Jun 24, 2025 472 quality JWTs Are Not Session Tokens, Stop Using Them Like One Jun 21, 2025 471 json-web-tokens , authentication The Growing Risk of Malicious Browser Extensions soc )Jun 13, 2025 470 browser-extensions Design Patterns for Securing LLM Agents Against Prompt Injections sim )Jun 13, 2025 469 studies , research , ai , prompting , software-design-patterns Escaping “<” and “>” in Attributes—How It Helps Protect Against Mutation XSS sec )Jun 12, 2025 468 html , attributes , xss , escaping , chrome , browsers HTML Spec Change: Escaping “<” and “>” in Attributes sec )Jun 12, 2025 467 html , attributes , escaping , xss Beware of End-of-Life Node.js Versions—Upgrade or Seek Post-EOL Support mco /nod )Jun 6, 2025 466 nodejs , maintenance How to Access Local MCP Servers Through a Secure Tunnel Jun 5, 2025 465 how-tos , mcp , ai , servers , network Docker Launches Hardened Images, Intensifying Secure Container Market May 19, 2025 464 docker Modernizing Security May 17, 2025 463 modernization , processes Securing Your Node.js App From Command Injection May 14, 2025 462 nodejs Passkeys for Normal People tro )May 5, 2025 461 authentication , passkeys , examples , concepts What Is an Encryption Backdoor? int )May 2, 2025 460 encryption , vulnerabilities , concepts npm Targeted by Malware Campaign Mimicking Familiar Library Names soc )May 2, 2025 459 npm , malware , dependencies , link-lists Cybersecurity Leaders Are Staying in the Shadows ste )Apr 26, 2025 458 community , culture Principles for Coding Securely With LLMs sea )Apr 15, 2025 457 ai , principles Threat Actors Misuse Node.js to Deliver Malware and Other Malicious Payloads Apr 15, 2025 456 nodejs , malware TLS Certificate Lifetimes Will Officially Reduce to 47 Days Apr 14, 2025 455 tls , certificates LLMs Can’t Stop Making Up Software Dependencies and Sabotaging Everything tho /the )Apr 12, 2025 454 ai , dependencies , slop Secure a Vue App With OpenID Connect and the BFF Pattern due )Apr 9, 2025 453 vuejs , authentication , backend-for-frontend Teaching Code in the AI Era: Why Fundamentals Still Matter ali )Apr 4, 2025 452 training , ai , programming , vibe-coding , scalability , performance , quality , testing , documentation Stop Using Jenkins in 2025 oso )Apr 1, 2025 451 jenkins , github-actions , ci-cd Node.js Test CI Security Incident nod )Mar 31, 2025 450 nodejs , retrospectives Website Hijack Campaign Now Impacting 150,000 Sites gad )Mar 27, 2025 449 Malware Found on npm Infecting Local Package With Reverse Shell rev )Mar 26, 2025 448 npm , dependencies Five Things Vibe Coders Should Know (From a Software Engineer) Mar 20, 2025 447 vibe-coding , sanitization , rate-limiting GitHub Suffers a Cascading Supply Chain Attack Compromising CI/CD Secrets inf )Mar 19, 2025 446 github , ci-cd How to Prevent WordPress SQL Injection Attacks sma )Mar 13, 2025 445 how-tos , wordpress , sql , databases Lazarus Strikes npm Again With New Wave of Malicious Packages soc )Mar 10, 2025 444 npm , dependencies Updates on CVE for End-of-Life Versions raf /nod )Mar 7, 2025 443 nodejs What Is the OWASP Top 10 and How Can Your Team Benchmark Security? jet )Mar 7, 2025 442 owasp , vulnerabilities , qodana In Tech, What Matters and What Is Dangerous ham )Mar 6, 2025 441 community , foss , open-web How to Protect Your Web Applications From XSS tor /w3c )Mar 6, 2025 440 how-tos , web-apps , xss Secure UX: Building Cybersecurity and Privacy Into the UX Lifecycle uxm )Mar 3, 2025 439 user-experience , processes The Fallacy of Balance: Challenging the Notion of Security and Accessibility as Opposing Objectives deq )Feb 26, 2025 438 videos , accessibility It Is No Longer Safe to Move Our Governments and Societies to US Clouds ber )Feb 23, 2025 437 cloud-computing , privacy , legal How OWASP Helps You Secure Your Full-Stack Web Applications eri /sma )Feb 18, 2025 436 owasp , monitoring , authentication , vulnerabilities , configuration , csrf , cryptography , authorization 10 Common Web Development Mistakes to Avoid Right Now Feb 17, 2025 435 mistakes , mobile , performance , accessibility , seo , navigation , analytics , testing Tightening Every Bolt bag )Feb 8, 2025 434 videos , c , processes , code-reviews , testing On Generative AI Security sch )Feb 5, 2025 433 ai , lessons , microsoft Understanding CORS Errors in Signed Exchanges paw )Jan 31, 2025 432 cors , errors , signed-exchanges Keep Your Node.js Apps Secure With “npx is-my-node-vulnerable” tre )Jan 29, 2025 431 packages , npm , nodejs Node.js EOL Versions CVE Dubbed the “Worst CVE of the Year” by Security Experts sar /soc )Jan 24, 2025 430 nodejs , documentation How I Open-Sourced My Secret Access Tokens From GitHub, Slack, and npm—and Who Actually Cares Jan 24, 2025 429 github , slack , npm Tuesday, January 21, 2025 Security Releases raf /nod )Jan 21, 2025 428 release-notes , nodejs APIs Are Quickly Becoming the Latest Security Battleground (and Nightmare) Jan 14, 2025 427 apis CDN-First Is No Longer a Performance Feature osv )Jan 12, 2025 426 content-delivery , performance , caching , embed-code , privacy The Cyber-Cleanse: Take Back Your Digital Footprint cyb )Jan 1, 2025 425 privacy 15 Principles for Secure Programming rak )Dec 23, 2024 424 principles , validation , testing Important Topics for Frontend Developers to Master in 2025 Dec 21, 2024 423 learning , javascript , typescript , css , frameworks , git , apis , testing , performance , ci-cd , websockets Developer Guide: How to Implement Passkeys Dec 16, 2024 422 guides , how-tos , authentication , passkeys How to Automate OWASP Security Reviews in Your Pull Requests? cod )Dec 16, 2024 421 how-tos , owasp , automation , code-reviews , coderabbit 5 Technical Trends to Help Web Developers Stand Out in 2025 Dec 10, 2024 420 trends , career , javascript , ai , low-and-no-code Avoid Hotlinking Images With “Cross-Origin-Resource-Policy” Nov 27, 2024 419 images Content Security Policy Level 3 mik /w3c )Nov 22, 2024 418 standards , csp Security vik /htt )Nov 11, 2024 417 web-almanac , studies , research , metrics JavaScript Import Attributes (ES2025) tre )Nov 10, 2024 416 javascript Exploring Internet Traffic Shifts and Cyber Attacks During the 2024 US Election Nov 6, 2024 415 traffic Cross-Site WebSocket Hijacking: Understanding and Exploiting CSWSH pen )Nov 5, 2024 414 websockets Securing Your Express REST API With Passport.js Nov 3, 2024 413 nodejs , express , json-web-tokens , apis , rest , tooling SecretLint—a Linter for Preventing Committing Credentials tre )Oct 22, 2024 412 tooling , linting The Importance of UX in Cybersecurity uxm )Oct 21, 2024 411 user-experience , usability Understanding “npm audit” and Fixing Vulnerabilities Oct 21, 2024 410 npm , vulnerabilities , nodejs Top 4 Web Vulnerabilities With Example and Mitigation Oct 21, 2024 409 vulnerabilities , sql , databases , xss , csrf How to Implement Content Security Policy (CSP) Headers for Astro tre )Oct 16, 2024 408 how-tos , http , http-headers , csp , astro , vercel , cloudflare Why Code Security Matters—Even in Hardened Environments Oct 8, 2024 407 vulnerabilities , file-handling , nodejs Database 101: SSL/TLS for Beginners Oct 4, 2024 406 introductions , databases , ssl , tls , authentication Cloudflare Study: 39% of Companies Losing Control of Their IT and Security Environment tre )Oct 3, 2024 405 studies , research , engineering-management NIST Recommends Some Common-Sense Password Rules sch )Sep 27, 2024 404 passwords , guidelines I Finally Understand OAuth Sep 24, 2024 403 authorization , oauth , processes Fake GitHub Site Targeting Developers jul /san )Sep 19, 2024 402 github Hacking Cars in JavaScript (Running Replay Attacks in the Browser With the HackRF) dev )Sep 16, 2024 401 javascript Gaining Access to Anyone’s Browser Without Them Even Visiting a Website Sep 7, 2024 400 arc , browsers , vulnerabilities 10 AI Dangers and Risks and How to Manage Them rin )Sep 3, 2024 399 ai , privacy , sustainability , legal Web Security: Shaping the Secure Web set /w3c )Aug 21, 2024 398 web , w3c 5 Wasm Use Cases for Frontend Development ele /des )Aug 21, 2024 397 guest-posts , webassembly , performance What Is Incident Response? Aug 20, 2024 396 incident-response , overviews The Great npm Garbage Patch Aug 6, 2024 395 dependencies , npm , spam Migrating From Netlify to Cloudflare for AI Bot Protection sia )Aug 6, 2024 394 migrating , netlify , cloudflare , bots , ai Frontend Security Checklist tre )Jul 30, 2024 393 checklists , react Automated Ways to Security Audit Your Website Jul 28, 2024 392 auditing , automation , tooling Secure Node.js Applications From Supply Chain Attacks Jul 25, 2024 391 nodejs , best-practices , dependencies The Pitfalls of In-App Browsers fro )Jul 18, 2024 390 browsers , mobile , privacy , user-experience The Cloud Run Security Gap You Didn’t Know You Had (and How to Fix It) Jul 18, 2024 389 gcp Supply Chain Security in npm—We Can Be Optimistic About the Future Jul 9, 2024 388 npm , dependencies , provenance Script Integrity chr /fro )Jul 5, 2024 387 embed-code , javascript Introducing the MDN HTTP Observatory mdn )Jul 2, 2024 386 introductions , mdn , http Tuesday, July 2, 2024 Security Releases nod )Jul 2, 2024 385 release-notes , nodejs WebAuthn: Enhancing Security With Minimal Effort tbe )Jul 2, 2024 384 authentication , webauthn RegreSSHion: Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server Jul 1, 2024 383 ssh , vulnerabilities Polyfill Supply Chain Attack Embeds Malware in JavaScript CDN Assets Jun 26, 2024 382 malware , vulnerabilities Catching Compromised Cookies sla )Jun 25, 2024 381 cookies , testing Backdoor Slipped Into Multiple WordPress Plugins in Ongoing Supply-Chain Attack dan /ars )Jun 24, 2024 380 wordpress , plugins The Hacking of Culture and the Creation of Socio-Technical Debt sch )Jun 19, 2024 379 culture OAuth Authentication rya )Jun 15, 2024 378 authentication , authorization , oauth What Is Mixed Content? fre )Jun 15, 2024 377 http Researchers Uncover npm Registry Vulnerability to Cache Poisoning and DoS Attacks sar /soc )Jun 15, 2024 376 npm , dependencies , vulnerabilities , caching The Ultimate Guide to Iframes log )Jun 6, 2024 375 guides , iframes , html , javascript How a Single Vulnerability Can Bring Down the JavaScript Ecosystem Jun 3, 2024 374 javascript , npm , dependencies , caching , vulnerabilities JavaScript Security: Simple Practices to Secure Your Frontend May 15, 2024 373 javascript , dependencies , csp “target=_blank” Implies “rel=noopener” ste )May 12, 2024 372 links , html , attributes Manifesto for a Humane Web mic )May 10, 2024 371 websites , manifestos , web , principles , accessibility , dei , sustainability , user-experience Securing Client-Side JavaScript May 5, 2024 370 javascript , graceful-degradation Poor Express Authentication Patterns in Node.js and How to Avoid Them May 3, 2024 369 express , nodejs , authentication Passkeys: A Shattered Dream fir )Apr 26, 2024 368 authentication , passkeys Using Legitimate GitHub URLs for Malware sch )Apr 22, 2024 367 malware , github When Security and Accessibility Clash: Why Are Banking Applications So Inaccessible? nic )Apr 17, 2024 366 accessibility Open Source Security (OpenSSF) and OpenJS Foundations Issue Alert for Social Engineering Takeovers of Open Source Projects rgi /ope )Apr 15, 2024 365 foss , openjs Wednesday, April 10, 2024 Security Releases raf /nod )Apr 10, 2024 364 release-notes , nodejs Node.js Secure Coding: Mitigate and Weaponize Code Injection Vulnerabilities Apr 8, 2024 363 books , nodejs , vulnerabilities The Free Software Commons jen )Apr 5, 2024 362 foss , community The V8 Sandbox Apr 4, 2024 361 v8 Using JSON Web Tokens With Node.js Apr 3, 2024 360 json-web-tokens , nodejs , authentication Wednesday, April 3, 2024 Security Releases nod )Apr 3, 2024 359 release-notes , nodejs Building a Digital Fortress: How to Strengthen DNS Against DDoS Attacks? Apr 3, 2024 358 dns In-App Browsers Are Still a Privacy, Security, and Choice Problem tho /the )Mar 27, 2024 357 browsers , mobile , privacy CORS Finally Explained—Simply Mar 24, 2024 356 csrf , cors , concepts How Does Single Sign-On (SSO) Work? mil )Mar 24, 2024 355 authentication How npm Install Scripts Can Be Weaponized: A Real-World Example of a Harmful npm Package eth )Mar 3, 2024 354 npm , dependencies , examples Preventing SQL Injection Attacks in Node.js Feb 20, 2024 353 nodejs , databases , sql Frontend Application Security: Tips and Tricks Feb 16, 2024 352 web-apps , xss , csrf , authentication , dependencies , csp , validation , tips-and-tricks Wednesday, February 14, 2024 Security Releases raf +/nod )Feb 14, 2024 351 release-notes , nodejs How to Boost WordPress Security and Protect Your SEO Ranking Feb 12, 2024 350 how-tos , wordpress , seo Malicious npm Package Masquerades as Noblox.js, Targeting Roblox Users for Data Theft sar /soc )Feb 6, 2024 349 npm , dependencies Practice Safe DSD With “setHTMLUnsafe” (It’s Complicated) jar /van )Jan 31, 2024 348 html , dom , shadow-dom , apis Tuesday, February 6, 2024 Security Releases raf /nod )Jan 30, 2024 347 release-notes , nodejs JWT vs. Session Authentication Jan 25, 2024 346 authentication , json-web-tokens , comparisons GitHub, npm Registry Abused to Host SSH Key-Stealing Malware Jan 24, 2024 345 github , npm , malware , foss Navigating JavaScript Security: Recompiling Firefox to Bypass Anti-Debugger Techniques gli )Jan 20, 2024 344 javascript , debugging , firefox , browsers Deceptive Deprecation: The Truth About npm Deprecated Packages Jan 18, 2024 343 deprecation , npm , dependencies , research Safely Accessing the DOM With Angular SSR Jan 17, 2024 342 dom , javascript , angular , server-side-rendering Node.js Security Progress Report—Progress on Permission Model, Fuzzer, and Connections With Community ope )Jan 16, 2024 341 nodejs I Hate CORS Jan 14, 2024 340 videos , cors Secure Your Code: Auto-Fix Vulnerabilities With Dependabot (GitHub Tutorial) Jan 14, 2024 339 videos , dependencies , dependabot Building Multiple Progressive Web Apps on the Same Domain Jan 4, 2024 338 videos , web-apps , progressive-web-apps , architecture Session-Based vs. Token-Based Authentication: Which Is Better? Dec 23, 2023 337 authentication , json-web-tokens , comparisons 10 Best Practices for Secure Code Review of Node.js Code Dec 20, 2023 336 best-practices , code-reviews , nodejs Security Headers Using “<meta>” sap /mat )Dec 7, 2023 335 csp , html Blind CSS Exfiltration: Exfiltrate Unknown Web Pages Dec 5, 2023 334 css Mastering Cryptography Fundamentals With Node’s “crypto” Module Nov 11, 2023 333 cryptography , nodejs Secure Code Review Tips to Defend Against Vulnerable Node.js Code Nov 8, 2023 332 nodejs , code-reviews Understanding CORS Nov 4, 2023 331 cors What the !#@% Is a Passkey? eff )Oct 26, 2023 330 passkeys Secret Scanning Scans Public npm Packages Oct 26, 2023 329 npm , dependencies Local HTTPS for Next.js 13.5 ami )Oct 10, 2023 328 testing , http , nextjs Understanding XSS Attacks Oct 5, 2023 327 xss A Comprehensive Guide to the Dangers of Regular Expressions in JavaScript phi )Sep 28, 2023 326 guides , javascript , regex SSH Keys Stolen by Stream of Malicious PyPI and npm Packages ble )Sep 27, 2023 325 ssh , dependencies , npm Best Practices for Securing Node.js Applications in Production Sep 27, 2023 324 best-practices , nodejs npm Provenance General Availability Sep 26, 2023 323 npm , provenance The WebP 0-Day Sep 21, 2023 322 webp , google , apple Open Source Trends to Look for in 2024 Sep 21, 2023 321 foss , trends , outlooks , ai Securing Your Node.js Apps by Analyzing Real-World Command Injection Examples Sep 15, 2023 320 nodejs , history , examples How to Implement SSL/TLS Pinning in Node.js Aug 29, 2023 319 how-tos , ssl , tls , nodejs A More Intelligent and Secure Web ple /w3c )Aug 24, 2023 318 videos , w3c , standards , web , web-platform Demystifying CORS: Understanding How Cross-Origin Resource Sharing Works Aug 18, 2023 317 cors , javascript Towards HTTPS by Default jde )Aug 16, 2023 316 browsers , chrome , http , tls Sophisticated, Highly-Targeted Attacks Continue to Plague npm Aug 12, 2023 315 npm An Update on Chrome Security Updates—Shipping Security Fixes to You Faster Aug 8, 2023 314 browsers , chrome SECURITY.md: Should I Have It? mry /ecl )Jul 31, 2023 313 documentation Tuesday, August 8, 2023 Security Releases raf /nod )Jul 31, 2023 312 release-notes , nodejs Publishing With npm Provenance From Private Source Repositories Is No Longer Supported Jul 26, 2023 311 npm , provenance , foss Social Engineering Campaign Targeting Tech Employees Spreading Through npm Malware soc )Jul 25, 2023 310 malware , npm Securing the Web Forward: Addressing Developer Concerns in Web Security tor /w3c )Jul 24, 2023 309 web , surveys Encoding: A Brief History and Its Role in Cybersecurity Jul 19, 2023 308 encoding , unicode , history User Input Sanitization and Validation: Securing Your App Jul 19, 2023 307 sanitization , validation , conformance Node.js Security Progress Report—17 Reports Closed ope )Jul 17, 2023 306 nodejs The Importance of Verifying Webhook Signatures Jun 29, 2023 305 webhooks The Massive Bug at the Heart of the npm Ecosystem dar /vlt )Jun 27, 2023 304 npm , dependencies , bugs All You Need to Know About CORS and CORS Errors Jun 23, 2023 303 cors , errors Understanding Authorization Before Authentication: Enhancing Web API Security Jun 23, 2023 302 authorization , authentication , apis , comparisons An Introduction to Command Injection Vulnerabilities in Node.js and JavaScript Jun 23, 2023 301 introductions , vulnerabilities , nodejs , javascript Django: A Security Improvement Coming to “format_html()” ada )Jun 15, 2023 300 django , html Tuesday, June 20, 2023 Security Releases raf /nod )Jun 13, 2023 299 release-notes , nodejs security.txt Now Mandatory for Dutch Government Websites May 31, 2023 298 legal File Upload Security and Malware Protection aus )May 23, 2023 297 malware , file-handling , edge-computing Security Implications of HTTP Response Headers May 3, 2023 296 http , http-headers Automating Dependency Updates: The Big Debate Apr 21, 2023 295 dependencies , automation , ci-cd The Case Against Automatic Dependency Updates ben )Apr 21, 2023 294 dependencies , automation , ci-cd , maintenance Generating Provenance Statements Apr 19, 2023 293 npm , provenance Introducing npm Package Provenance Apr 19, 2023 292 introductions , npm , provenance , foss 8 Best Tools for Cryptography and Encryption sta )Apr 18, 2023 291 link-lists , tooling , comparisons , cryptography , encryption , privacy Dissecting npm Malware: Five Packages and Their Evil Install Scripts Apr 15, 2023 290 npm , malware Passkeys: What the Heck and Why? css )Apr 12, 2023 289 passkeys Senior Engineering Strategies for Advanced React and TypeScript tec )Mar 25, 2023 288 strategies , react , typescript , architecture , testing , performance , accessibility , maintenance Cryptographically Protecting Your SPA Mar 17, 2023 287 single-page-apps , cryptography Without Accessibility, There Is No Privacy or Security lev )Feb 28, 2023 286 accessibility , privacy Tips for Handling Dependabot, CodeQL, and Secret Scanning Alerts Feb 28, 2023 285 alerting , dependabot , tips-and-tricks SSL Certificates Explained Feb 20, 2023 284 videos , certificates , ssl , protocols How to Password-Protect a Static HTML Page With No JS ede )Feb 20, 2023 283 how-tos , css , fonts Quick Tip: How to Hash a Password in PHP Feb 14, 2023 282 how-tos , php , passwords , tips-and-tricks Sandboxing JavaScript Code hea )Feb 12, 2023 281 javascript Avoiding the Success Trap: Toward Policy for Open-Source Software as Infrastructure atl )Feb 8, 2023 280 foss , infrastructure , policies , concepts Unlocking Security Updates for Transitive Dependencies With npm Jan 19, 2023 279 npm , dependencies , maintenance 7 Required Steps to Secure Your Iframes Security Jan 4, 2023 278 iframes , xss , html , http-headers , csp Conditional API Responses for JavaScript vs. HTML Forms aus )Jan 3, 2023 277 javascript , html , forms , comparisons Why Do We Need Authorization and Authentication? Dec 30, 2022 276 authorization , authentication The Top 10 Security Vulnerabilities for Web Applications Dec 20, 2022 275 vulnerabilities , web-apps Leaked a Secret? Check Your GitHub Alerts… for Free Dec 15, 2022 274 github DOM Clobbering fre /mat )Dec 12, 2022 273 dom New npm Features for Secure Publishing and Safe Consumption Dec 6, 2022 272 npm , dependencies Using SRI to Protect From Malicious JavaScript mat )Dec 3, 2022 271 javascript WordPress Versions 3.7–4.0 No Longer Get Security Updates sar )Nov 30, 2022 270 wordpress “Not Secure” Warning for IE Mode eri )Nov 16, 2022 269 browsers , edge , internet-explorer Node.js Security Best Practices nod )Nov 10, 2022 268 nodejs , best-practices npm Security: Preventing Supply Chain Attacks Nov 7, 2022 267 npm , dependencies Secure JavaScript URL Validation Oct 17, 2022 266 javascript , validation , urls Create a Passkey for Passwordless Logins age )Oct 12, 2022 265 authentication , passkeys Designing a Secure API Oct 4, 2022 264 software-design , apis Phylum Detects Active Typosquatting Campaign Targeting npm Developers Oct 2, 2022 263 npm , dependencies Security htt )Sep 26, 2022 262 web-almanac , studies , research , metrics Continue Using .env Files as Usual Sep 24, 2022 261 environments Quick Reminder: HTML5 “required” and “pattern” Are Not a Security Feature cod )Sep 22, 2022 260 html , forms Stop Using .env Files Now Sep 19, 2022 259 environments Debunking Myths About HTTPS Sep 18, 2022 258 http , myths Secure Your Node.js App With JSON Web Tokens app )Sep 14, 2022 257 nodejs , json-web-tokens Dependabot Unlocks Transitive Dependencies for npm Projects Sep 7, 2022 256 dependencies , npm , dependabot JavaScript Bugs Aplenty in Node.js Ecosystem—Found Automatically Aug 30, 2022 255 studies , research , nodejs , javascript , dependencies , quality , bugs Introducing Even More Security Enhancements to npm Jul 26, 2022 254 introductions , npm Top 5 npm Vulnerability Scanners Jul 20, 2022 253 npm , vulnerabilities , tooling What Is Passwordless Authentication and How to Implement It Jul 18, 2022 252 authentication , passwords GA4 Is Being Blocked by Content Security Policy Jun 25, 2022 251 csp , metrics , google Please Remove That .git Folder Jun 22, 2022 250 git Should I Have Separate GitHub Accounts for Personal and Professional Projects? Jun 14, 2022 249 discussions , github , career Understanding CSRF Attacks zel )May 29, 2022 248 csrf npm Security Update: Attack Campaign Using Stolen OAuth Tokens May 26, 2022 247 oauth , version-control , npm Snyk Finds 200+ Malicious npm Packages, Including Cobalt Strike Dependency Confusion Attacks May 24, 2022 246 javascript , npm , dependencies Unexpectedly HTTPS? eri )May 16, 2022 245 http How to Respond to Growing Supply Chain Security Risks? Apr 3, 2022 244 how-tos , dependencies , nodejs , npm The Web Is for Everyone: Our Vision for the Evolution of the Web moz )Mar 23, 2022 243 web , outlooks , privacy , accessibility , performance , user-experience Using HTTPS in Your Development Environment Mar 7, 2022 242 http , environments How to Prevent SQL Injection Attacks in Node.js Mar 3, 2022 241 how-tos , nodejs , databases , sql Can You Get Pwned With CSS? Feb 23, 2022 240 css How to Fix Your Security Vulnerabilities With npm Override Feb 23, 2022 239 how-tos , vulnerabilities , npm , dependencies Never, Ever, Ever Use Pixelation for Redacting Text Feb 15, 2022 238 content , images , obfuscation Accessibly Insecure Jan 31, 2022 237 accessibility Lessons Learned From Publishing a Content Security Policy Dec 14, 2021 236 lessons , csp Ain’t No Party Like a Third Party css )Dec 3, 2021 235 dependencies , embed-code Security htt )Dec 1, 2021 234 web-almanac , studies , research , metrics GitHub’s Commitment to npm Ecosystem Security Nov 15, 2021 233 github , npm Understanding and Implementing OAuth2 in Node.js hon )Oct 18, 2021 232 nodejs , authorization , oauth How to Win at CORS jaf )Oct 12, 2021 231 how-tos , cors , html , http The Options for Password-Revealing Inputs chr /css )Oct 6, 2021 230 html , css , passwords , usability npm Security Best Practices owa )Aug 3, 2021 229 npm , best-practices Encoding Data for POST Requests jaf )Jun 30, 2021 228 javascript , encoding NPM Global Audit Jun 16, 2021 227 packages , npm , quality , auditing Understanding and Preventing Common Security Vulnerabilities Jun 15, 2021 226 vulnerabilities Open Source Insights Jun 3, 2021 225 websites , foss , dependencies , licensing I Learned to Love the Same-Origin Policy eee /css )Dec 17, 2020 224 cors TLS and mTLS Demystified Dec 9, 2020 223 tls , protocols Is Edge Computing Secure? Here Are 4 Security Risks to Be Aware Of Dec 9, 2020 222 edge-computing Best Practices for Inclusive Textual Websites Nov 23, 2020 221 performance , accessibility , best-practices Clickjacking Attacks and How to Prevent Them Oct 30, 2020 220 how-tos How to Safely Use GitHub Actions in Organizations nza )Jul 21, 2020 219 how-tos , github-actions What Is mTLS and How Does It Work? Apr 30, 2020 218 Mutual TLS: Stuff You Should Know Mar 19, 2020 217 tls , protocols Don’t Try to Sanitize Input—Escape Output Feb 27, 2020 216 sanitization , escaping Encrypting DNS Query Bad for Performance? erw )Feb 20, 2020 215 performance , dns , http , encryption Apple Joins FIDO Alliance, Commits to Getting Rid of Passwords sjv /zdn )Feb 12, 2020 214 apple , fido , passwords , authentication How to Automatically Update Your JavaScript Dependencies spa /clo )Jan 30, 2020 213 how-tos , javascript , dependencies , automation , processes What SSL Is, and Which Certificate Type Is Right for You Jan 29, 2020 212 ssl , certificates , privacy , concepts Usability and Security; Better Together 24w )Dec 22, 2019 211 usability , user-experience Server-Side Includes (SSI) Injection owa )Dec 4, 2019 210 ssi How Internet Security Works: TLS, SSL, and CA osd )Nov 18, 2019 209 tls , ssl , protocols , certificates Security and Privacy for Our Times luk /w3c )Sep 11, 2019 208 privacy , web-platform Web Feature Developers Told to Dial Up Attention on Privacy and Security rip )Sep 11, 2019 207 w3c , privacy , web-platform CSS Security Vulnerabilities chr /css )Sep 9, 2019 206 css , privacy , vulnerabilities Understanding Subresource Integrity dre /sma )Apr 9, 2019 205 hashing , embed-code W3C Strategic Highlights: Web for All (Security, Privacy, Identity) w3c )Mar 18, 2019 204 w3c , privacy , authentication Guide to Web Authentication Jan 24, 2019 203 websites , authentication , webauthn , javascript It’s Beginning to Look a Lot Like XSSmas 24w )Dec 17, 2018 202 vulnerabilities , csrf , xss Protecting Your Site With Feature Policy sma )Dec 12, 2018 201 http-headers , http AWS Security Guide: 7 Best Practices to Avoid Security Risks wom )Oct 31, 2018 200 guides , aws , best-practices WebAuthn, FIDO2 Infuse Browsers, Platforms With Strong Authentication dar )Sep 19, 2018 199 w3c , fido , authentication , webauthn , browsers In Your Face, Passwords: Big Three Browsers All Adopt Authentication API Aug 1, 2018 198 authentication , webauthn , apis , edge , chrome , firefox , browsers HTTPS Is Easy tro )Jun 27, 2018 197 websites , http WordPress Security as a Process sma )Jun 21, 2018 196 wordpress , processes Making Your Website Faster and Safer With Cloudflare Jun 12, 2018 195 performance , caching , cloudflare Validating Dependencies in the Project With npm-check and depcheck Jun 1, 2018 194 dependencies , maintenance , auditing , tooling , npm Third Party CSS Is Not Safe jaf )Feb 27, 2018 193 html , css , embed-code Attackers Can Steal Sensitive Data by Abusing CSS—CSS Exfil Vulnerability Feb 7, 2018 192 css , csp Building Secure JavaScript Applications Jan 18, 2018 191 javascript , xss , csrf , json-web-tokens , passwords Creating Secure Password Resets With JSON Web Tokens sma )Nov 9, 2017 190 passwords , json-web-tokens , nodejs Rate Limiting With nginx Jun 12, 2017 189 servers , nginx , rate-limiting The Complete Guide to Switching From HTTP to HTTPS sma )Jun 12, 2017 188 guides , http How (Not) to Control Your CDN mno )Jun 7, 2017 187 content-delivery , caching , http How to Secure WordPress With SSL May 10, 2017 186 how-tos , wordpress , ssl Encrypting IP Addresses ber )May 7, 2017 185 ip , network , privacy , encryption How to Secure Your Web App With HTTP Headers sma )Apr 3, 2017 184 how-tos , web-apps , http , http-headers , csp Just Another HTTPS Nudge chr /css )Mar 3, 2017 183 http On EME in HTML5 tim /w3c )Feb 28, 2017 182 eme , drm , html , legal , standards , w3c What Is HTTPS and SSL, and Why Your Ecommerce Website Badly Needs Them Both Feb 9, 2017 181 http , ssl , ecommerce Using SSH Securely ann )Jan 24, 2017 180 ssh More Than 300 Federal Gov Websites Fail to Meet Domain Encryption Deadline Jan 4, 2017 179 http , tls , protocols , encryption Content Security Policy Level 2 mik +/w3c )Dec 15, 2016 178 standards , csp A Checklist for Website Reviews hcr )Dec 5, 2016 177 checklists , performance , browsers , seo , accessibility Content Security Policy, Your Future Best Friend sma )Sep 12, 2016 176 csp , link-lists A Refined Content Security Policy web )Aug 5, 2016 175 html , csp , webkit , safari , browsers The Performance Benefits of “rel=noopener” jaf )Jul 21, 2016 174 html , links , performance Web Platform Security Boundaries ann )Jun 24, 2016 173 web-platform Subresource Integrity dev +/w3c )Jun 23, 2016 172 hashing , html , standards npm Fails to Restrict the Actions of Malicious npm Packages Mar 26, 2016 171 npm , vulnerabilities About “rel=noopener” mat )Mar 16, 2016 170 links , html , attributes W3C Looks to Secure the Web sdt )Feb 17, 2016 169 w3c , authentication Distribution Packages Considered Insecure Feb 13, 2016 168 dependencies , unix-like The Current State of Web Security (An Interview With Anselm Hannemann) hel +/css )Jan 18, 2016 167 interviews , http , ssl , tls , encryption , cloudflare , lets-encrypt Eliminating Known Vulnerabilities With Snyk sma )Jan 13, 2016 166 vulnerabilities , tooling 10 Web Predictions for 2016 cra )Jan 6, 2016 165 web , outlooks , site-generators , browsers , css , mobile , performance , webassembly , seo HSTS and “Let’s Encrypt” tka )Jan 4, 2016 164 http , http-headers , ssl , lets-encrypt An in-Depth Look at CORS Dec 17, 2015 163 cors , javascript , php Indexing HTTPS Pages by Default Dec 17, 2015 162 google , search , indexing , http Why Passwordless Authentication Works cra )Nov 10, 2015 161 authentication , passwords Backdooring Your JavaScript Using Minifier Bugs Aug 24, 2015 160 javascript , minification , examples Introduction to TLS and SSL ope )Aug 22, 2015 159 introductions , tls , ssl , protocols , certificates A Simple Developer Error Is Exposing Private Information on Thousands of Websites owe )Jul 27, 2015 158 version-control , git , mistakes , vulnerabilities 