A vulnerability scan can produce an impressive dashboard within hours. That dashboard does not tell a development team which issues have…

On October 21, 2026, the PHP team released security updates fixing two critical vulnerabilities that could allow attackers to execute code…

We spend a lot of time learning how to build things.

A 503 the real service only throws under load, a 429 carrying a Retry-After, a body your parser has never seen - you know the branch is…

Lessons from a real-world cyber espionage campaign and how software testers can turn threat intelligence into practical security testing.

A vulnerability scan can produce an impressive dashboard within hours. That dashboard does not tell a development team which issues have…

Railway told every user to roll their secrets. A separate leak-site post claims a huge PingCAP/TiDB Cloud theft. One is a vendor…

On 21 October 2026 the PHP project released security updates for every supported branch, and the front page of php.net carries a banner…

I ran Snyk, Semgrep, Drogonsec and Claude Code on 39 planted bugs. The answer was more interesting than yes or no

PHP, GitLab, LiteLLM and a broken certificate authority, all in one week. Here’s what happened and exactly what to do.