Security Archives

Your .env File Wasn’t Built for AI Agents. 1Password Has a Better Way.

AI agents are already being trusted with real work, but handing them raw credentials is a dangerous shortcut. That's why the next security challenge is controlling what an agent can do once it gets access.

Security Must Be Built In as Everyone Becomes a Builder

A new kind of builder is emerging inside organizations - one that works fast, ships often, and rarely follows the instincts of a software engineer. That raises a simple question: what happens to security?

Want Better Security? Test Like Attackers Would

AI moves faster than your last commit - and so do hackers. Security can’t be an afterthought; it has to run alongside your code, like invisible, always-on seatbelts keeping users safe.

Can Anyone See This Password? Probably Yes – Unless You Encrypt It

Every time a password is typed or a message is sent, the internet asks: ‘Can anyone else see this?’ - and without proper encryption, the answer is usually yes.

Shift left done right: Driving early vulnerability detection through pre-commit and build system security

This is especially critical in AI workflows, where unchecked open source dependencies can create security blind spots.

How could that happen: All eyes on CrowdStrike post mortem

Did a cybersecurity company really push an update to production to all of its users at once?!

Want developers to take care of security? Make it easier for them!

Developers are now expected to take an active role in security. Here's what we've learned on how to make it easier for them.

Who’re you gonna call when you need to break into an unmanaged legacy app? Ethical hackers!

What do you do when the developer of the mission-critical application goes missing while leaving no documentation behind? Try to hack it!

End-to-end encryption explained as if you were five by Paolo Insogna

How does end-to-end encryption work, and is it genuinely secure? Paolo Insogna from Node.js explains in the upcoming interview.

The Lazy Developer: Testing in production is real, but…

The Lazy Developer pushes code to production without testing and doesn't follow security best practices. Why? Because processes and protocols slow them down.