Programming
Software development: programming languages, coding, libraries and frameworks, software engineering and architecture, source control, developer tools, databases, and infrastructure.
-
Fortune 500 at Risk: 250M Artifacts Exposed via Misconfigured Registries aquasec.com
Misconfigured public registries with software artifacts containing sensitive proprietary code and secrets.
-
Crowd Strike crowdstrike.com
Threat Hunting Report (2026) - Examines the 2026 threat landscape and frontline hunting observations to highlight how adversaries exploit trust, software supply chains, and emerging artificial intelligence attack surfaces. Key findings reveal that 88 percent of vulnerability…
-
Contrast Security contrastsecurity.com
Software Under Siege (2025) - Highlights the increasing prevalence and impact of application-layer attacks targeting custom code, APIs, and application logic. The report reveals that applications face an average of 81 confirmed attacks per month, coupled with nearly 30 serious…
-
Salt content.salt.security
State Of API Security (2025) - Highlights the persistent challenges and evolving landscape of API security, driven by rapid digital transformation and cloud migration. Despite widespread API adoption and a nearly universal encounter with security issues, many organizations…
-
Checkmarx checkmarx.com
Future Of Application Security (2025) - Analyzes the current state and future challenges of application security amidst rapid developer velocity and the pervasive integration of AI in development workflows.
-
Chainguard chainguard.dev
State Of Trusted Open Source (2025) - Analyzes the state of trusted open source software consumption and its associated risks. Key findings reveal that 98% of vulnerabilities occur outside the top 20 most popular projects, highlighting significant security burdens in less…
-
Chainguard chainguard.dev
Engineering Reality Report (2026) - Analyzes the current state of the developer experience, highlighting key challenges and opportunities for improvement. Key findings indicate that 72% of engineers struggle to find time for new feature development due to demands on their time…
-
Black Duck blackduck.com
State Of Embedded Software Quality And Safety (2025) - Analyzes the evolving landscape of embedded software, highlighting the impact of AI adoption and software supply chain management. Key findings reveal a significant governance gap in AI implementation, the rise of SBOMs as…
-
Black Duck blackduck.com
Open Source Risk Analysis Report (2026) - Analyzes the current state of open source software usage and security risks across commercial codebases, highlighting the impact of rapid development and artificial intelligence integration. Key findings reveal that 65% of organizations…
-
Beyond Trust beyondtrust.com
Microsoft Vulnerability Report (2026) - Analyzes the 2026 Microsoft Vulnerability Report to assess shifting threat patterns and the evolving risk landscape within the Microsoft software ecosystem. While total vulnerability volume decreased by 6 percent to 1,273, the number of…
-
Armis armis.com
Early Warning Insights for Software Supply Chain Attacks (2025) - Investigates the rising threat of software supply chain attacks driven by artificial intelligence and the practice of rapid, unverified code deployment. Research indicates that as many as 40 percent of code…
-
Akamai akamai.com
APAC API Security (2026) - Investigates the state of application programming interface security across major Asia Pacific markets, highlighting how rapid artificial intelligence adoption is outpacing existing governance and visibility frameworks. Findings reveal that 81 percent…
-
Akamai akamai.com
State of Apps and API Security (2025) - Documents a year of material escalation in cyber risks, specifically highlighting how Artificial Intelligence is supercharging both offensive and defensive strategies. Akamai observed over 311 billion web application and API attacks in…
-
Indirect Prompt Injection Through MCP Tools: A Defense Guide stackone.com
Feb 2026 guide explaining why any MCP tool that reads data written outside your trust boundary (CRM notes, calendar invites, API responses) is an injection vector, with concrete mitigations per tool category.
-
Augustus praetorian.com
Feb 2026 open-source tool from Praetorian. A single Go binary with 210+ vulnerability probes across 47 attack categories, 28 LLM providers, 90+ detectors, and 7 payload transformation buffs. Built for penetration testing workflows without Python/npm dependencies.
-
Authority Framing in Agentic CI/CD (RELAY) doi.org
Pre-registered factorial study of a five-agent CI/CD pipeline built from five production LLMs. A fabricated "pre-approved, do not re-review" claim gets secret-exfiltration code shipped in up to 55% of runs, and roughly 80% of laundered pull requests pass a capable LLM code…
-
CrowdStrike AI Unlocked crowdstrike.com
Released Feb 2026, designed to train security, developer, and AI teams on prompt injection against increasingly capable agents. Built by CrowdStrike's Counter Adversary Operations team.
-
Improving LLM Security Against Prompt Injection: AppSec Guidance For Pentesters and Developers – Part 2 blog.includesecurity.com
Understanding Transformer Models (especially attention), Causes and How Do We Stop Prompt Injection.
-
Improving LLM Security Against Prompt Injection: AppSec Guidance For Pentesters and Developers blog.includesecurity.com
Using Role Based APIs to Minimize the Risk of Prompt Injection and 13 Guidelines for Writing System Prompts that Minimize the Risk of Prompt Injection.
-
Cloud Threat Landscape | Wiz threats.wiz.io
A cloud detection engineering-focused database, that lists threat actors known to have compromised cloud environments, the tools and techniques in their arsenal, and the technologies they prefer to target.
-
Detection Engineering AI Maturity Framework | Brendan Chamberlain infosecb.github.io
A community framework with four maturity levels across ten dimensions for assessing how organizations apply AI and LLMs across a detection engineering program, from foundations through the detection lifecycle.
-
Elevation of Privilege (EOP) by Microsoft web.archive.org
A card game based on Microsoft's threat modeling framework "STRIDE" (Spoofing, Tampering etc.). The card deck is available as PDF from Microsoft. Adam Shostack, the author of EoP has also a git repo for EoP.
-
Cornucopia cornucopia.owasp.org
OWASP® Cornucopia is a threat modeling tool in the form of a card game to assist software development teams identify security requirements in Agile, conventional and formal development processes. It's based on OWASP's Top 10, ASVS/MASVS/MASTG, CAPEC and SAFECode. The card…
-
hashcat Forum hashcat.net
Forum by the developers of hashcat.
-
Hashfilter github.com
Read a hashcat potfile and parse different types into a sqlite database.
-
Smart Contract Security Verification Standard securing.github.io
A free 14-part checklist created to standardize the security of smart contracts for developers, architects, security reviewers and vendors.
-
Secureth guidelines guidelines.secureth.org
Aid you in formulating your own software engineering process by giving a complete picture of all the different concerns and expectations in your software projects.
-
Solidity Patterns fravoll.github.io
A compilation of patterns and best practices for the smart contract programming language Solidity.
-
List of Known Bugs docs.soliditylang.org
A JSON-formatted list of some of the known security-relevant bugs in the Solidity compiler.
-
DeFiYield's REKT db defiyield.app
Database of Crypto Hacks, Exploit, Scam.
-
CryptoScamDB cryptoscamdb.org
Keeping track of cryptocurrency scams in an open-source database.
-
Yoda Protector yodap.sourceforge.net
Free, open source, Windows 32-bit software protector.
-
AxProtector wibu.com
Encrypts the complete software you aim to protect, and shields it with a security shell, AxEngine, best-of-breed anti-debugging and anti-disassembly methods are then injected into your software.
-
Qualitative and quantitative evaluation of software packers webdiis.unizar.es
-
Malheur web.archive.org
Contains the recorded behavior of malicious software (malware) and has been used for developing methods for classifying and clustering malware behavior (see the JCS article from 2011).
-
ViruSign web.archive.org
Another online malware database.
-
TTProtect web.archive.org
Professional protection tool designed for software developers to protect their PE applications against illegal modification or decompilation.
-
32Lite web.archive.org
Compression tool for executable files created with Watcom C/C++ compiler.
-
VXvault vxvault.net
Online malware database.
-
VX Underground vx-underground.org
PL-CERT based open source MWDB python application holding a malware database containing every APT sample from 2010 and over 7.5M maliciousbinaries.
-
VMProtect vmpsoft.com
Protects code by executing it on a virtual machine with non-standard architecture that makes it extremely difficult to analyze and crack the software.
-
DarkCrypt totalcmd.net
Simply and powerful plugin for Total Commander used for file encryption using 100 algorithms and 5 modes.
-
Yoda Crypter sourceforge.net
Supports polymorphic encryption, softice detection, anti-debug API's, anti-dumping, etc, encrypts the Import Table and erases PE Header.
-
RapidEXE sourceforge.net
Simple and efficient way to convert a PHP/Python script to a standalone executable.
-
tElock softpedia.com
Practical tool that intends to help developers who want to protect their work and reduce the size of the executable files.
-
DotNetZ softpedia.com
Straightforward and lightweight, command-line piece of software written in C that allows you to compress and pack Microsoft .NET Framework executable files.
-
Classifying packed programs as malicious software detected semanticscholar.org
(December 2016)
-
ElecKey sciensoft.com
Suite of software and tools that offer a complete solution for software protection, copy protection, and license management.
-
RDMC sac.sk
DMC algorithm based packer.
-
A comparative analysis of software protection schemes researchgate.net
(June 2014)
- next page of items loading…
