Programming
Software development: programming languages, coding, libraries and frameworks, software engineering and architecture, source control, developer tools, databases, and infrastructure.
-
IAMDevBox iamdevbox.com
Developer blog covering OAuth 2.0/2.1, OIDC, SAML, Keycloak, ForgeRock, and PingIdentity with hands-on tutorials and troubleshooting guides.
-
Gravitee.io gravitee.io
Open Source OpenID Connect/OAuth 2.0 provider aims to be a bridge between applications and identity providers to authenticate, authorize and getting information about user accounts.
-
GitHub Actions OIDC – Non-Human Identities and Secretless Authentication eparon.me
A two-part guide on moving from static secrets to OIDC-based identities in GitHub Actions, including a practical lab for protecting APIs.
-
Kong OpenID Connect docs.konghq.com
OpenID Connect Relying Party plugin for the Kong API Gateway.
-
OAuth 2.0 Rich Authorization Requests (RAR) datatracker.ietf.org
Extends OAuth 2.0 authorization requests with additional authorization_details parameter that allows clients to specify their fine-grained authorization requirements using the expressiveness of JSON data structures.
-
JSON Web Key (JWK) datatracker.ietf.org
JavaScript Object Notation (JSON) data structure that represents a cryptographic key provided by OpenID Connect Provider.
-
JSON Web Encryption (JWE) datatracker.ietf.org
Specifications for JWE which represents encrypted content using JSON-based data structures.
-
Curity Identity Server curity.io
API Security solution that brings identity and API access management together.
-
Authlete authlete.com
Set of APIs for developers to implement OAuth authorization servers and OpenID Connect identity providers.
-
Authelia authelia.com
Open Source authentication, authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing single sign-on (SSO).
-
Apache APISIX openid-connect apisix.apache.org
OpenID Connect Relying Party plugin for the Apache APISIX API Gateway.
-
Wiz wiz.io
State of Code Security (2025) - Examines the security posture of code repositories and CI/CD pipelines, highlighting the deep connection between code and cloud environments. It reveals that 61% of organizations have secrets exposed in public repositories , with GitHub…
-
Connectwise vmblog.com
MSP Threat Report (2026) - Examines the evolving threat landscape for managed service providers, focusing on how adversaries exploit trusted identities, software supply chains, and user behavior to bypass traditional security controls. Key findings reveal a 58 percent year over…
-
Veracode veracode.com
State Of Software Security Report (2026) - Analyzes the current state of software security by evaluating the widening gap between the rapid creation of vulnerabilities and the limited capacity of organizations to remediate them effectively. Findings indicate that security debt…
-
American Institute of CPAs (AICPA) us.aicpa.org
Developer of the SOC2 framework for managing and safeguarding customer data based on trust service criteria.
-
Trend Micro trendmicro.com
Security Predictions (2026) - Examines the industrialization of cyberthreats driven by artificial intelligence and the rapid expansion of autonomous agentic systems within modern enterprise environments. Key findings indicate that the adoption of vibe coding tools has led to a…
-
Traceable traceable.ai
Global State of API Security (2025) - Annual survey gathering insights from 1,548 respondents across 100+ countries on the state of API security. Key findings reveal a persistent increase in API-related breaches, the inadequacy of traditional security solutions, and the growing…
-
Straiker straiker.ai
STAR Labs AI Threat Report Vol 1 (2026) - Examines the security posture of artificial intelligence agents across enterprise deployments, highlighting emerging attack vectors and structural risks. Key findings reveal that 36% of coding-agent attacks achieved remote code…
-
Sonatype sonatype.com
State of The Software Supplychain (2026) - Examines the state of the software supply chain, documenting how massive growth in open source usage has created critical infrastructure vulnerabilities and systemic operational risks. Key findings reveal that 65 percent of open source…
-
Wallarm siliconangle.com
API Threat Stats Report (2026) - Examines the evolving landscape of API threats and risks in 2025, highlighting how attackers exploit repeatable failures in identity, access control, and exposed interfaces. Key findings reveal that 36% of published AI vulnerabilities involve…
-
Security Industry Association securitysystemsnews.com
Security Megatrends (2026) - Examines the evolving landscape of security technology and its integration into broader business operations. Key insights reveal a significant shift towards AI-driven software solutions and the reinvention of hardware to provide richer data, while…
-
Salt salt.security
Future of Agentic AI Report (2025) - Investigates the critical role of application programming interfaces in supporting agentic artificial intelligence and the resulting security challenges organizations face as they scale these autonomous systems. Findings reveal that while 64…
-
Salt salt.security
State of AI and API Security (2026) - Analyzes the structural evolution of application programming interfaces as the operational backbone of autonomous artificial intelligence systems across global enterprise networks. Findings reveal that 32 percent of surveyed organizations…
-
Baird rwbaird.com
Disruptors (2026) - Examines the landscape of private security and infrastructure software companies, profiling 29 influential market vendors across distinct operational categories. Key findings reveal that 70% of these evaluated organizations specialize in advanced cloud…
-
Reversing Labs reversinglabs.com
Software Supply Chain Security Report (2026) - Examines the evolving landscape of software supply chain security, highlighting how attackers increasingly exploit open-source ecosystems and CI/CD workflows to achieve persistence. Research reveals a 73% increase in malicious…
-
Anthropic resources.anthropic.com
Agentic Coding Trends Report (2026) - Examines the evolution of agentic coding in 2026, focusing on the transition from individual AI assistants to coordinated multi-agent systems that manage complex software development lifecycles. Research indicates that while developers…
-
Recorded Future recordedfuture.com
Malware And Vulnerability Trends (2025) - Analyzes malware and vulnerability trends observed in the first half of 2024, focusing on exploitation of remote access and security software. Key insights reveal a significant 103% increase in Magecart infections and the continued…
-
United States Department of Defense public.cyber.mil
State of DevSecOps (2025) - Focuses on the adoption of DevSecOps practices within the United States Department of Defense. A key finding is the Air Force's launch of a new software directorate, highlighting a move towards integrating security earlier in the software development…
-
Orca orca.security
State of AppSec Report (2026) - Analyzes the current state of application security across the modern software delivery lifecycle by evaluating telemetry from over 1,000 production organizations. Findings reveal that 78 percent of organizations operate with critical…
-
Orca orca.security
State of Cloud Security Report (2025) - Analyzes security challenges in multi-cloud environments, with a focus on AI risk, data exposure, and neglected assets. Key findings reveal that 62% of organizations have at least one vulnerable AI package, 38% expose sensitive databases…
-
The Open Source Security Foundation (OpenSSF) openssf.org
A cross-industry collaboration to improve the security of open source software.
-
BlackDuck news.blackduck.com
BSIMM16 (2026) - Analyzes the maturity and evolution of software security initiatives across diverse industry verticals by documenting observed development practices. Studies conducted on 111 participating organizations reveal that successful programs prioritize scaling…
-
Legit Security legitsecurity.com
State of Application Risk Report (2025) - Examines the current state of application risk in 2025, focusing on common vulnerabilities and security testing inefficiencies. Key findings reveal significant issues with secrets exposure, AI-related risks, and software supply chain…
-
Kong konghq.com
API Security Perspectives (2025) - While 55% of organizations experienced an API security incident in the past year, 85% say they’re confident in their organization’s security capabilities. This confidence may be misplaced, given 77% acknowledge the potential for significant…
-
Imperva imperva.com
API Security Threat Report (2026) - Examines API security threats and token handling risks across 32,725 endpoints and 1,104 customer accounts. Key findings reveal that nearly 40% of endpoints carry multiple authentication risks simultaneously, with sensitive data appearing in…
-
Iconiq iconiq.com
State of AI Bi Annual Snapshot (2026) - Examines the evolving architecture and monetization strategies of artificial intelligence products within enterprise software companies. Key findings reveal that 69% of builders now focus on vertical applications, while teams leverage an…
-
IBM ibm.com
X Force Threat Intelligence Index (2026) - Investigates the evolving threat landscape of 2025 by analyzing incident response data and vulnerability trends across global software and cloud ecosystems. Key findings reveal a 44 percent increase in the exploitation of public-facing…
-
Houlihanlokey hl.com
How AI Is Reshaping Digital Engineering (2025) - Examines the transformative impact of artificial intelligence on digital engineering, highlighting the shift toward agentic systems and consulting-led delivery models. Key findings indicate that the market for artificial…
-
HardenStance hardenstance.com
Telco Strategies for Consumer Security (2026) - Investigates global telecommunication operator strategies and investments in consumer cybersecurity software. Key findings indicate that global spending reached $441 million in 2025, which amounts to less than 0.1% of the $442…
-
Guy Carpenter guidewire.com
US Cyber Industry Exposure Database (2025) - Analyzes the US cyber industry exposure and loss curve for 2025, detailing market conditions and providing benchmarks for risk transfer. Key findings indicate a heightened risk landscape due to deregulation and nation-state activity…
-
GSMA gsma.com
Security Landscape (2026) - Analyzes the evolving mobile telecommunications security landscape, focusing on critical threats such as software vulnerabilities, supply chain compromises, and the democratization of attack tools. Key findings highlight that the global scam economy…
-
Git Guardian gitguardian.com
State of Secrets Sprawl (2026) - Examines the state of secrets sprawl and security vulnerabilities, detailing the impact of rapid development cycles and AI adoption. Key findings reveal 28.65 million new hardcoded secrets in public GitHub commits during 2025, representing a 34…
-
Fortinet fortinet.com
Web Application Security Report (2026) - Examines the security posture of web applications and APIs in the context of artificial intelligence adoption, highlighting a widening readiness gap between modernization and operational control. Key findings reveal that 74% of…
-
Fluid Attacks fluidattacks.com
State Of Attacks (2026) - Analyzes the state of cybersecurity and vulnerability management across diverse software development environments, documenting trends in risk exposure and remediation efficiency throughout 2025. Key findings reveal that while the vulnerability…
-
FINOS finos.org
State of Open Source in_Financial Services (2025) - Analyzes the current state of open source software adoption and strategic maturity within the global financial services sector. Key findings indicate that 87 percent of organizations now view open source as critical to their…
-
F5 f5.com
Advanced Persistent Bots Report (2025) - Examines the behavior of advanced persistent bots across 200 billion transactions, assessing the impact of mitigation on web and mobile API platforms. Analysis reveals that while overall automated attacks declined in most sectors, the…
-
F5 f5.com
Office of the CTO Report Continuous API Sprawl (2026) - Examines the rapid expansion and economic impact of application programming interfaces across modern enterprise environments, detailing the primary factors driving continuous digital sprawl. Key findings reveal that the…
-
Millions of Secrets Exposed via Web Application Frontends web.archive.org
Millions of secrets exposed in web app frontends via JavaScript and debug pages.
-
Can you trust ChatGPT's package recommendations? vulcan.io
Exploit generative AI platforms' tendency to generate non-existent coding libraries to execute Dependecy Confusion.
-
#redteam tip: want to discretely extract credentials from a CI/CD pipeline? twitter.com
Draft pull requests won't alert repository contributors, but will still trigger pipelines.
- next page of items loading…
