Cybersecurity is not confined to incident reports. This tag follows threats and defenses across software dependencies, cloud platforms, developer tooling, and operational practice. Browse the list below when you want the security angle on those topics, even when security is not the post’s primary category.
For articles organized primarily as security analysis, use the Security category. To follow a particular threat pattern, explore the Supply Chain Security series.
The Linux Foundation’s new Alpha-Omega Project, backed by Google and Microsoft, aims to systematically improve the security of critical open source software.
Popular npm packages coa and rc were hijacked to distribute malware, impacting thousands of projects and raising urgent questions about supply chain security.
The OMIGOD vulnerabilities in Azure’s silently-installed OMI agent expose a troubling pattern: cloud providers deploying software on your VMs without your
The critical Confluence Server RCE vulnerability is being actively exploited in the wild, raising urgent questions about the sustainability of self-hosted
The T-Mobile breach exposing 40+ million records highlights systemic failures in API security and data protection that the entire industry needs to address.