In this post, I will organize my thoughts on the unintended complexity caused by modern web development stacks and the return ...
In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...
OWASP API Security Top 10 (2023) with vulnerable code, working fixes and tests in Node.js: BOLA, auth, rate limits, SSRF and ...
Qwen playing Minecraft is a bit like an eager but very silly friend.
I’ll be talking about how to size and pick motors, and how to connect your custom IoT devices to Google using Heroku as a public interface. If you are like me, then many of your hobby projects and ...
Researchers have released HILIPS, an open-source three-stage pipeline that combines a multimodal language model, human review ...
Rapid Indexer, the fastest Google indexer, today launched the Rapid Indexer MCP server. It connects Rapid Indexer's crawl and index-checking engine directly to AI agents through the Model Context ...
Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...
Google Modern Web Guidance helps AI coding agents follow modern web standards for accessibility, performance, security and ...
CISA added two vulnerabilities to its Known Exploited Vulnerabilities Catalog on October 27, putting Adobe Commerce and Google Brotli under renewed remediation pressure. The CISA KEV update changes ...
Prompt injection test lab: build a 12-step Python harness that scores Claude, GPT, Gemini, Mistral and DeepSeek on 14 OWASP ...
Migrate an MCP server to SDK v2 in Python and TypeScript: rename FastMCP, run the codemod, add tests, serve over HTTP. 12 ...