|
10 Best DevSecOps Platforms for AppSec Teams in 2026
|
Sarah Hartland |
2026-04-02 |
3,061 |
--
|
|
Top Gen AI AppSec Tools in 2026: A Practitioner's Guide
|
Sarah Hartland |
2026-04-02 |
2,460 |
--
|
|
Best DevSecOps Tools for AppSec Teams in 2026
|
Sarah Hartland |
2026-04-02 |
2,639 |
--
|
|
Best Application Security Tools for DevSecOps in 2026
|
Sarah Hartland |
2026-04-02 |
3,595 |
--
|
|
🐱 The Inevitable Feline Takeover: A Serious Analysis
|
Sarah Hartland |
2026-04-02 |
395 |
--
|
|
New research: malware in open source ecosystems surges 14x as attackers hijack trusted packages
|
Andrew Stiefel |
2026-04-01 |
708 |
--
|
|
Axios compromised: hijacked maintainer account pushes malicious npm versions
|
Meenakshi S L |
2026-03-30 |
3,837 |
--
|
|
TeamPCP Strikes Again: Telnyx Compromised Three Days After LiteLLM
|
Kiran Raj |
2026-03-27 |
2,323 |
--
|
|
A Practitioner’s Guide to Responding to the TeamPCP Supply Chain Attacks
|
Malware |
2026-03-27 |
157 |
--
|
|
Top 10 Software Composition Analysis (SCA) Tools in 2026
|
Sarah Hartland |
2026-03-26 |
3,235 |
--
|
|
SolarWinds took a nation-state. The next attack just needs an LLM and $5.
|
Varun Badhwar |
2026-03-26 |
1,311 |
--
|
|
What We Can Learn About GitHub Actions Security from the Trivy Breach
|
Robert Haynes |
2026-03-26 |
1,888 |
--
|
|
Malware Package Firewall: Block Threats Before They Hit Your Code
|
Sarah Hartland |
2026-03-24 |
2,610 |
--
|
|
9 Best SAST Tools in 2026: Top SAST Solutions Compared
|
Sarah Hartland |
2026-03-24 |
3,030 |
--
|
|
TeamPCP Isn't Done: Threat Actor Behind Trivy and KICS Compromises Now Hits LiteLLM's 95 Million Monthly Downloads on PyPI
|
Kiran Raj |
2026-03-24 |
683 |
--
|
|
Best Software Supply Chain Security Tools for AppSec Teams
|
Sarah Hartland |
2026-03-24 |
2,985 |
--
|
|
Software Supply Chain Security: How to Manage Risk at Scale
|
Sarah Hartland |
2026-03-24 |
2,192 |
--
|
|
Cursor Security: How to Secure AI-Generated Code in 2026
|
Sarah Hartland |
2026-03-23 |
2,192 |
--
|
|
Best Software Composition Analysis (SCA) Tools for 2026
|
Sarah Hartland |
2026-03-23 |
2,675 |
--
|
|
Top 8 Aikido Alternatives for Developer Security in 2026
|
Sarah Hartland |
2026-03-23 |
2,568 |
--
|
|
Software Supply Chain Security: Why SCA Alone Falls Short
|
Sarah Hartland |
2026-03-23 |
2,672 |
--
|
|
Top 8 Application Security Platforms: Ranked for 2026
|
Sarah Hartland |
2026-03-23 |
2,565 |
--
|
|
CanisterWorm: Malicious npm Packages Deploy Self-Propagating Supply Chain Worm
|
Henrik Plate |
2026-03-21 |
1,497 |
--
|
|
Best Checkmarx Alternatives & Competitors in 2026
|
Sarah Hartland |
2026-03-20 |
2,374 |
--
|
|
AURI: Security Intelligence for Agentic Software Development
|
AI/ML |
2026-03-19 |
247 |
--
|
|
Top 8 Snyk Alternatives for Security & Engineering Teams
|
Sarah Hartland |
2026-03-19 |
2,384 |
--
|
|
Endor Labs vs Snyk: SCA, SAST, and Containers Compared
|
Sarah Hartland |
2026-03-19 |
2,107 |
--
|
|
Top 10 Semgrep Alternatives for AppSec Teams in 2026
|
Sarah Hartland |
2026-03-18 |
3,217 |
--
|
|
10 Best Application Security Tools for 2026
|
Sarah Hartland |
2026-03-18 |
2,878 |
--
|
|
Best Black Duck Alternatives for SCA With Less Noise
|
Sarah Hartland |
2026-03-18 |
2,329 |
--
|
|
Malicious 'Pyronut' Package Backdoors Telegram Bots with Remote Code Execution
|
Henrik Plate |
2026-03-18 |
2,086 |
--
|
|
npm is serving malware to 134,000 developers, and the maintainer can’t stop it
|
Kiran Raj |
2026-03-18 |
2,277 |
--
|
|
7 Best Application Security Tools for the AI Era (2026)
|
Sarah Hartland |
2026-03-18 |
4,449 |
--
|
|
Top 10 Veracode Alternatives for AppSec Teams in 2026
|
Sarah Hartland |
2026-03-18 |
3,212 |
--
|
|
Best DevSecOps Platform Tools for AppSec Teams in 2026
|
Sarah Hartland |
2026-03-18 |
2,824 |
--
|
|
Endor Labs + Zscaler: Zero Trust Application Security for the AI Era
|
Eli Scherr |
2026-03-17 |
1,151 |
--
|
|
How the EU Cyber Resilience Act (CRA) rewrites the rules of software liability
|
Andrew Stiefel |
2026-03-13 |
1,550 |
--
|
|
Intelligence and governance in the software supply chain with Endor Labs and Cloudsmith
|
Eli Scherr |
2026-03-10 |
752 |
--
|
|
The Return of PhantomRaven: Detecting Three New Waves of npm Supply Chain Attacks
|
Rachana Misal |
2026-03-10 |
1,074 |
--
|
|
Introducing AURI: Security Intelligence for AI Coding Agents and Developers
|
Amod Gupta |
2026-03-03 |
1,234 |
--
|
|
Remote Code Execution (RCE) in Ghost CMS (CVE-2026-29053): A Transitive Dependency Wreaks Havoc
|
Cris Staicu |
2026-03-02 |
1,743 |
--
|
|
CVE-2026-27959: Userinfo Host Header Injection in Koa
|
Peyton Kennedy |
2026-02-25 |
1,951 |
--
|
|
Anthropic just validated that AppSec is the biggest opportunity in cybersecurity
|
Varun Badhwar |
2026-02-24 |
1,721 |
--
|
|
SANDWORM_MODE: Dissecting a Multi-Stage npm Supply Chain Attack
|
Kiran Raj |
2026-02-23 |
3,861 |
--
|
|
CVE-2026-25896: Entity Encoding Bypass in fast-xml-parser
|
Peyton Kennedy |
2026-02-21 |
851 |
--
|
|
AI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass
|
Peyton Kennedy |
2026-02-19 |
2,041 |
--
|
|
How AI SAST Traced Data Flows to Uncover Six OpenClaw Vulnerabilities
|
Peyton Kennedy |
2026-02-18 |
2,918 |
--
|
|
Supply Chain Attack targeting Cline installs OpenClaw
|
Henrik Plate |
2026-02-18 |
453 |
--
|
|
The Missing Layer: Why Container OS Libraries Need Reachability Analysis
|
Chris Hughes |
2026-02-13 |
1,739 |
--
|
|
Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise
|
Kyle Quest |
2026-02-11 |
1,781 |
--
|
