security

Locked Shields 2025 Event Report

Removing GitHub PATs and Private Keys From Google Cloud: Extending Token Server to Google Cloud

When Caching Hides the Truth: A VPC Service Controls & Artifact Registry Tale

How to bypass GitHub’s Branch Protection

LLMs at Work: Outsourcing Vendor Assessment Toil to AI

Mapping the Attack Surface from the Inside

Mercari’s passkey adoption

Bucket full of secrets – Terraform exfiltration

Supply-Chain Security: Evaluation of Threats and Mitigations

Fraud, How do we handle it ?