Development & engineering
# Vulnerability management58 articles
Articles with this tag collected from all categories.
Articles are ordered by popularity over the past 30 days.
Web Development & Operations
Nine Next.js vulnerabilities in October: when self-hosted sites are affected and which version to upgrade to
Development & engineering
Compromised just by placing a video file: The FFmpeg PixelSmash vulnerability and locating affected components
Development & engineering
The sharp AVIF vulnerability: confirm you are on 0.35.4 or later in Astro and Next.js
Web Development & Operations
Two unauthenticated RCE vulnerabilities in PHP: which versions to upgrade to and the limits of mitigations
Development & engineering
When did support expire? — How to read boring major updates and EOL schedules
Development & engineering
eMudhra intermediate CA compromise: checking curl, Python and Node on Mac development machines
Development & engineering
certifi removes emSign: checking the bundles in requests and pip
Development & engineering
Install scripts disabled by default in npm 12: Silent failures are the hardest to troubleshoot
Development & engineering
How Express trust proxy settings let req.ip be spoofed
Development & engineering
Updating five internal repositories to Node.js 22.23.4 at once: pitfalls we found in production builds
Development & engineering
Dependabot waits 3 days by default: Redesigning dependency update workflows
Development & engineering
Practical Guide to Starting Code Vulnerability Audits with the Free GitHub Code Security Risk Assessment
Development & engineering
AI Penetration Testing with AWS Security Agent — Automating Cloud Audits for Custom SaaS 2026
Development & engineering
Pip 26.1 dependency cooldowns arrive: Designing outsourced Python supply chain audits for clients 2026
Development & engineering
Monthly patch deployments stopped succeeding: Four contract revisions for maintenance agreements
Web Development & Operations
PHP emergency security fixes: a record of our response on managed hosting and the cloud edition of a CMS
Development & engineering
nginx Critical Vulnerability Left Unaddressed for 18 Years: 2026 Response Architecture for Client Infrastructure Security Audits
Development & engineering
GitLab 19.0 Developer Flow and Secrets Manager — Designing DevSecOps automation in contract development 2026
Web Development & Operations
What unpatched sites must do right now about the "wp2shell" critical core WordPress vulnerability
Google Workspace
A mass email saying "Please update" won't upgrade Chrome
Development & engineering
GitLab CVE-2026-85706: checking your version and steps after updating
Web Development & Operations
OpenNext Cloudflare authentication bypass: conditions that affect versions below 1.20.2
Development & engineering
$0.5/Month Security Audits with AI — Packaging Architecture and Pricing Strategy for Custom Development Services 2026
Development & engineering
Critical RCE Vulnerability in git push 2026 — Response Manual to Protect Contract Development Git Pipelines
Development & engineering
Safely Operating Autonomous AI Agents on Kubernetes — Custom Architecture for Trust Boundaries, Secrets, and Observability 2026
Development & engineering
Operating Claude Code Auto Mode safely in client work: Human approval gate design 2026
Development & engineering
Client development environments in the era of "npm install means arbitrary code execution": DevSecOps hardening and isolation design in 2026
Development & engineering
GitHub CodeQL Declarative Security Modeling — Integrating SAST into Contract Operations 2026
Development & engineering
OpenAI Daybreak — Shifting Custom Development Left by Embedding Security from the Design Phase 2026
Development & engineering
Mini Shai-Hulud: Incident response design for client projects in the era of npm worms infecting 160+ packages including TanStack 2026
Development & engineering
Internal GitHub repository compromise (via malicious VSCode extension) — Designing developer device governance delegation in custom development 2026
Development & engineering
Configuration files are the real attack surface of AI coding agents: Hardening implementations for clients 2026
Development & engineering
Arm Open-Sources Metis ─ Introducing AI Agent-Based AppSec Audits via Custom Development in 2026
Development & engineering
API Gateway Authorization Bypassed via Trailing Slash — API Authorization Security Audits for Client Systems 2026
Development & engineering
Is the inherited authentication code secure? Pitfalls of JWT verification middleware
Development & engineering
What is a vulnerability assessment? | Types, typical costs, tools, and how small businesses should choose a provider
Web Development & Operations
Six months after React2Shell, CVSS 10.0 vulnerabilities still linger on neglected sites — How to overhaul maintenance contracts
Development & engineering
The Era of AI Finding and Fixing Vulnerabilities — What Clients Must Define in Maintenance Contracts
Development & engineering
"A Critical Vulnerability Has Been Found" — That CVE Might Not Even Exist
Showing articles 1–40 of 58
Turning concepts into design.
Development Environment↔AI Models
Access Permissions · Data · Logs
Building an environment
to use AI internally
Internal data, development environments, and access permissions. Advancing adoption concepts into concrete technical reviews.
Compare approachesOrganize implementation requirementsTest on a small scale
Read feature 
Google Workspace
administration basics
Resolving administrator uncertainties from rollout to sharing and permissions.
Pricing & rolloutSharing rulesPermissions & security
Read feature 
Getting started with AI
at work
Selecting tasks to delegate, experimenting on a small scale, and operating safely.
How AI worksTesting in workflowsSafe usage
Read feature 
Looking back at
emergency vulnerability responses
PHP, certificates and Node.js. A record of the responses that overlapped on October 21–22, 2026, down to the steps we verified and the pitfalls we hit.
Checking providers' responsesInspecting certificates on devicesUpgrading multiple repositories at once
Read feature 
Improvement notebook for
growing your website
Forms, usability, and updates: tackling post-launch improvements one step at a time.
Form optimizationUI refinementsUpdates & operations
Read series