CSHTTPS and TLS: how the padlock worksHow TLS encrypts a connection, why TLS 1.3 needs one round trip instead of two, and what the browser padlock does and doesn't protect.Aug 27, 2026·6 min
NewsCalifornia's AI Transparency Act Is Live: C2PA ExplainedSB 942 became operative August 2, 2026. What covered providers must ship, how C2PA provenance works, and why most image pipelines quietly break it.Aug 19, 2026·8 min
NewsThe keyv npm Attack: Signed, Verified, and MaliciousThe keyv and cacheable npm packages shipped a credential stealer with valid provenance. What it did, how to check if you're hit, and what to fix first.Aug 7, 2026·9 min
NewsThe Regex That Broke Cloudflare: ReDoS ExplainedOne regex dropped 80% of Cloudflare's traffic in 2019. How catastrophic backtracking works, how to spot it in your code, and the deploy lesson behind it.Jul 30, 2026·11 min
NewsPrompt Injection: The #1 Security Risk for AI AppsPrompt injection is the top vulnerability in LLM apps. See how the attack works, why AI agents make it worse, and how to actually defend your code.Jun 28, 2026·7 min
CS
