Topic

#Application Security

9 articles on Application Security — news, releases, guides and analysis from the SourceFeed engine.

The Repository Ownership Gap: How GitHub Solved Its Own Metadata Sprawl

Why CODEOWNERS and service catalogs aren't enough to secure and manage thousands of repositories at enterprise scale.

Signature malleability allows attackers to alter verified commit hashes without breaking their cryptographic signatures or possessing private keys.

How to use lightweight, graph-based threat modeling to expose architectural flaws before writing a single line of code.

Microsoft's removal of 119 Edge extensions exposes how threat actors bypass static analysis by weaponizing ordinary asset files.

A failed social engineering attack on a crates.io maintainer reveals highly stealthy local execution techniques.

Attackers are dropping standalone Node.js runtimes into user space to bypass security controls and run persistent implants.

Active puzzles no longer stop modern bots, forcing developers to shift to passive, cryptographic, and behavioral defense layers.

Autonomous security agents found decades-old memory safety flaws in the widely deployed media processing library, prompting urgent updates.

A security researcher's experiment with PyCharm's local AI autocompletion raises tough questions about responsibility and vulnerability disclosure.