Development & engineering
# Vulnerability Countermeasures34 articles
Articles with this tag collected from all categories.
Google Workspace
A mass email saying "Please update" won't upgrade Chrome
Development & engineering
Monthly patch deployments stopped succeeding: Four contract revisions for maintenance agreements
Development & engineering
When did support expire? — How to read boring major updates and EOL schedules
Development & engineering
Who Fixes Base Image CVEs? Buildpacks Graduates from the CNCF
Development & engineering
Install scripts disabled by default in npm 12: Silent failures are the hardest to troubleshoot
Development & engineering
When the database exports data on its own — Silent SQL injections without UI output
Development & engineering
"A Critical Vulnerability Has Been Found" — That CVE Might Not Even Exist
Development & engineering
The Era of AI Finding and Fixing Vulnerabilities — What Clients Must Define in Maintenance Contracts
Development & engineering
Dependabot waits 3 days by default: Redesigning dependency update workflows
Development & engineering
Compromised just by placing a video file: The FFmpeg PixelSmash vulnerability and locating affected components
Web Development & Operations
Six months after React2Shell, CVSS 10.0 vulnerabilities still linger on neglected sites — How to overhaul maintenance contracts
Development & engineering
Who oversees the security of AI-written code? Security auditing for Claude Code
Web Development & Operations
What unpatched sites must do right now about the "wp2shell" critical core WordPress vulnerability
Development & engineering
What is a vulnerability assessment? | Types, typical costs, tools, and how small businesses should choose a provider
Development & engineering
Is the inherited authentication code secure? Pitfalls of JWT verification middleware
Development & engineering
API Gateway Authorization Bypassed via Trailing Slash — API Authorization Security Audits for Client Systems 2026
Development & engineering
Arm Open-Sources Metis ─ Introducing AI Agent-Based AppSec Audits via Custom Development in 2026
Development & engineering
Configuration files are the real attack surface of AI coding agents: Hardening implementations for clients 2026
Development & engineering
GitLab 19.0 Developer Flow and Secrets Manager — Designing DevSecOps automation in contract development 2026
Development & engineering
Pip 26.1 dependency cooldowns arrive: Designing outsourced Python supply chain audits for clients 2026
Development & engineering
Internal GitHub repository compromise (via malicious VSCode extension) — Designing developer device governance delegation in custom development 2026
Development & engineering
nginx Critical Vulnerability Left Unaddressed for 18 Years: 2026 Response Architecture for Client Infrastructure Security Audits
Development & engineering
Mini Shai-Hulud: Incident response design for client projects in the era of npm worms infecting 160+ packages including TanStack 2026
Development & engineering
OpenAI Daybreak — Shifting Custom Development Left by Embedding Security from the Design Phase 2026
Development & engineering
GitHub CodeQL Declarative Security Modeling — Integrating SAST into Contract Operations 2026
Development & engineering
Client development environments in the era of "npm install means arbitrary code execution": DevSecOps hardening and isolation design in 2026
Development & engineering
Operating Claude Code Auto Mode safely in client work: Human approval gate design 2026
Development & engineering
AI Penetration Testing with AWS Security Agent — Automating Cloud Audits for Custom SaaS 2026
Development & engineering
Safely Operating Autonomous AI Agents on Kubernetes — Custom Architecture for Trust Boundaries, Secrets, and Observability 2026
Development & engineering
Critical RCE Vulnerability in git push 2026 — Response Manual to Protect Contract Development Git Pipelines
Development & engineering
$0.5/Month Security Audits with AI — Packaging Architecture and Pricing Strategy for Custom Development Services 2026
Development & engineering
Practical Guide to Starting Code Vulnerability Audits with the Free GitHub Code Security Risk Assessment
Development & engineering
2026 Supply Chain Attack Summary: Practical Defenses Learned from the Axios and LiteLLM Incidents
Showing 1–34 of 34 articles
Turning concepts into design.
Development Environment↔AI Models
Access Permissions · Data · Logs
Building an environment
to use AI internally
Internal data, development environments, and access permissions. Advancing adoption concepts into concrete technical reviews.
Compare approachesOrganize implementation requirementsTest on a small scale
Read feature 
Google Workspace
administration basics
Resolving administrator uncertainties from rollout to sharing and permissions.
Pricing & rolloutSharing rulesPermissions & security
Read feature 
Getting started with AI
at work
Selecting tasks to delegate, experimenting on a small scale, and operating safely.
How AI worksTesting in workflowsSafe usage
Read feature 
Improvement notebook for
growing your website
Forms, usability, and updates: tackling post-launch improvements one step at a time.
Form optimizationUI refinementsUpdates & operations
Read series