Category index

Cyber Security

4276 articles

4276 ARTICLES

FEATURED REPORT

ORM 6.15.0, AI Safety Guardrails for Destructive Commands & More

Protect your DB from AI mishaps with Prisma ORM v6.15.0—new safety guardrails, ESM-first client updates & better Postgres tooling.

BY —

MIN READ 1 MIN READ

EXPLORE north_east

ORM 6.15.0, AI Safety Guardrails for Destructive Commands & More

CYBERSECURITY

Secrets Found. Owners Identified. Issues Fixed.

Wiz closes the loop on exposed secrets with blast radius context, ownership intelligence, and actionable, AI-powered fixes.

1 MIN READ arrow_forward

CYBERSECURITY

Inline Style Exfiltration: leaking data with chained CSS conditionals

I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: Someone asked if you c

1 MIN READ arrow_forward

CYBERSECURITY

Unpacking the 2025 Gartner Market Guide for CNAPP

From siloed tools to a unified platform: Key takeaways from Gartner’s new CNAPP report.

1 MIN READ arrow_forward

CYBERSECURITY

A new type of long-lived key on AWS: Bedrock API keys

New AWS Bedrock keys simplify authentication while raising security considerations.

1 MIN READ arrow_forward

CYBERSECURITY

Guest Post: Resiliency by Design and the Importance of Internal Developer Platforms

Gaurav Saxena, a Director of Engineering at an automotive company, talks through how internal developer platforms are an important part of resiliency by design.

1 MIN READ arrow_forward

CYBERSECURITY

Prioritize with Snyk’s Open Source Vulnerability Experience

Discover Snyk’s new default view, grouping vulnerabilities by library and fix versions to help you prioritize and remediate open source vulnerabilities more efficiently.

1 MIN READ arrow_forward

CYBERSECURITY

This Shit is Hard: Hardening glibc

Chainguard uses compiler flags to be proactive in the security of our products. See how our compiler flag usage helped us catch a complex bug in glibc.

1 MIN READ arrow_forward

CYBERSECURITY

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

Sometimes people think they’ve found HTTP request smuggling, when they’re actually just observing HTTP keep-alive or pipelining. This is usually a false positive, but sometimes there’s actually a real

1 MIN READ arrow_forward