News

Latest product updates and announcements

Google’s Keyczar library suffered from a timing side-channel vulnerability involving its HMAC signature verification. Specifically, the default…

In light of the newly identified Next.js authorization bypass (CVE-2025-29927), we’re making our “Middleware.js” secure coding challenge completely…

In light of the recent tj-action and reviewdog GitHub Actions security incidents, we’ve made our “Improper Artifact Integrity Validation” CI/CD...

It’s no secret: large language models (LLMs) are transforming how developers write code, ship features, and even fix vulnerabilities. But...

Researchers from Wiz, Shir Tamari, Ronen Shustin, and Andres Riancho have uncovered a bypass for a previously fixed security vulnerability...

Your secure code training has already failed, if making it mandatory is the only way to get your developers onboard....

On November 20, 2024, Shubham Shah and Sam Curry discovered that Subaru’s STARLINK connected vehicle service was found to contain...

In March 2016, security researcher Orange Tsai identified a critical Remote Code Execution (RCE) vulnerability on Uber’s platform, specifically…

Congratulations to @Matt for Winning the 2024 iteration of our annual Holiday 7x7 Game! Shout out to @sunzenshen and @EverydaySparkling...