Topic

#Security

166 articles on Security — news, releases, guides and analysis from the SourceFeed engine.

Article 8h ago 1

Domas Turns DRAM Scrambling Into a Skeleton Key

A single register poke rewires physical addresses so every fence built above the memory controller quietly falls apart.

Lenn Voss

Demystifying iOS Device Fingerprinting with Loupe

Mysk's open-source tool exposes the public APIs that native iOS apps use to quietly track and identify users.

Article · 1mo ago3

Why Developers Still Fail to Understand CORS

CORS is not a server firewall, but a browser-enforced relaxation of the Same-Origin Policy designed to protect users.

Article · 1mo ago2

Linux 7.2 Kills strncpy: The Six-Year War on a Broken API

After 362 patches, the Linux kernel has completely excised strncpy, cementing strscpy as the modern standard for safe string copying.

Article · 1mo ago0

GPS Spoofing at Scale Demands Zero Trust Location

As continental-scale signal tampering corrupts GNSS reliability, developers must treat location data as an untrusted input.

Article · 1mo ago0

Why Agentic Code Audits Are Redefining AppSec for Lean Teams

Aikido's new Code Audit uses reasoning models to bridge the gap between pattern-matching SAST and expensive manual pentests.

Article · 1mo ago0

Zero-Touch OAuth: Securing the MCP Enterprise Agent Stack

The Enterprise-Managed Authorization extension replaces manual consent prompts with centralized, identity-driven token exchange for AI agents.

Article · 1mo ago2

The SQLite App Server: Why Datasette Apps Changes the Game

By embedding sandboxed HTML/JS apps directly alongside SQLite databases, Datasette becomes a secure, zero-maintenance internal tool platform.

Article · 1mo ago1

Defend Your LLM App Against Prompt Injection and Jailbreaks

Build a practical two-layer defense—regex heuristics plus an ML classifier—and an output guardrail that blocks attacks before they reach your model or your users.

Tutorial · 1mo ago0

Sliding-Window Rate Limiting for FastAPI with Redis

Protect your Python API from hammering and credential-stuffing with a per-IP and per-token rate limiter backed by Redis — before you ship to production.

Tutorial · 1mo ago0

Why JWTs Are a Security Anti-Pattern for Sessions

Relying on stateless JSON Web Tokens for persistent user sessions introduces severe security risks and architectural complexity.

Article · 1mo ago0

Why CVE Counts Misrepresent Rust and C/C++ Security

Comparing vulnerability counts ignores how the two language ecosystems define the boundary between library bugs and caller misuse.

Article · 1mo ago0

How a Fake LinkedIn Job Offer Delivered a Node Backdoor

Attackers are using stolen identities and malicious npm lifecycle scripts to target developers during the recruitment process.

Article · 1mo ago4

Replace Long-Lived AWS Credentials with GitHub Actions OIDC

Configure IAM and GitHub Actions to exchange short-lived, automatically-expiring AWS credentials on every workflow run — no stored access keys, no rotation toil.

Tutorial · 1mo ago0

Curl Pauses Vulnerability Report Intake for July 2026

The project's HackerOne form and security inbox go dark for a month, pushing coordinated disclosure plans into August.

News · 1mo ago2

Sophisticated AUR Malware Waves Expose Container and Pipeline Risks

A second wave of obfuscated malware targeting Arch Linux's user repository highlights the danger of unpinned, automated builds.

Article · 1mo ago3