1.Auditing in the age of (good enough) AIblog | 2026-09-18 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #cryptography | #audit
2.Droid ASC: High-Performance On-Demand Android Decompiler Front-End for Mobile Security & AI Agentstool | 2026-09-15 18:43 | github.com | Original ↗ | .md | #ai-security | #open-source | #android
3.Ghost-Js-Burp-Extension: Burp Suite Extension to Detect Hardcoded Secrets & Endpoints in JavaScripttool | 2026-08-31 23:54 | github.com | Original ↗ | .md | #bug-bounty | #cloud | #burp-suite
4.SAST and Business Logic Vulnerabilities: What Static Analysis Can Reachblog | 2026-08-24 16:38 | borghq.io | Original ↗ | .md | #appsec | #sast | #security-testing
5.How GitLab tracks vulnerabilities through refactors and reformattingblog | 2026-08-12 00:00 | about.gitlab.com | Original ↗ | .md | #gitlab | #devsecops | #vulnerability
6.Rust-proof your code with our new Testing Handbook chapterblog | 2026-07-13 11:00 | blog.trailofbits.com | Original ↗ | .md | #rust | #secure-coding | #software-testing
7.Aikido x OWASP: 200 free credits for individual membersblog | 2026-06-18 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #appsec | #devsecops
8.How to use Slither for auditing smart contractsblog | 2026-06-11 10:26 | hackenproof.com | Original ↗ | .md | #web3 | #security-tools | #static-analysis
9.How to use MythX for smart contract auditingblog | 2026-06-11 10:25 | hackenproof.com | Original ↗ | .md | #web3 | #security-tools | #static-analysis
10.The sorry state of skill distributionblog | 2026-06-03 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
11.Scala Security Auditresearch | 2026-05-31 22:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #vulnerability-research | #fuzzing
12.CertiK Skill Scanner: The Antivirus for the AI Agetool | 2026-05-27 12:40 | certik.com | Original ↗ | .md | #ai-security | #web3 | #static-analysis
13.Bringing full YAML anchor support to zizmorblog | 2026-05-22 11:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #devsecops | #open-source
14.One year of Opengrep: What we built and what’s nextblog | 2026-05-12 00:00 | aikido.dev | Original ↗ | .md | #appsec | #open-source | #sast
15.Try our new dimensional analysis Claude pluginblog | 2026-03-25 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #smart-contracts | #llm
16.Detect Go’s silent arithmetic bugs with go-panikintblog | 2025-12-31 12:00 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #developer-security | #fuzzing
17.SAST in the IDE is now free: Moving SAST to where development actually happensblog | 2025-12-15 00:00 | aikido.dev | Original ↗ | .md | #appsec | #devsecops | #sast
18.Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysisblog | 2025-12-11 12:00 | blog.trailofbits.com | Original ↗ | .md | #appsec | #vulnerability-research | #security-research
19.Level up your Solidity LLM tooling with Slither-MCPblog | 2025-11-15 12:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #mcp | #smart-contract
20.What Is IaC Security Scanning? Terraform, Kubernetes & Cloud Misconfigurations Explainedblog | 2025-10-27 00:00 | aikido.dev | Original ↗ | .md | #cloud | #cloud-security | #kubernetes
21.Tales from the Trace: How Agentic AI Merges Static and Dynamic Testingresearch | 2025-10-09 12:00 | xbow.com | Original ↗ | .md | #ai-security | #sql-injection | #sast
22.Taming 2,500 compiler warnings with CodeQL, an OpenVPN2 case studyblog | 2025-09-25 11:00 | blog.trailofbits.com | Original ↗ | .md | #c | #openvpn | #static-analysis
23.The Ultimate SAST Guide: What Is Static Application Security Testing?blog | 2025-09-24 00:00 | aikido.dev | Original ↗ | .md | #secure-coding | #sast | #static-analysis
24.Fickling’s new AI/ML pickle file scannertool | 2025-09-16 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #open-source | #machine-learning
25.Uncovering memory corruption in NVIDIA Triton (as a new hire)blog | 2025-08-05 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #memory-corruption | #vulnerability-disclosure
26.SAST Tools: Core Features & How to Choose the Best SAST Solutionblog | 2025-06-25 00:00 | aikido.dev | Original ↗ | .md | #appsec | #ci-cd | #sast
27.Security audit of PHP-SRCresearch | 2025-04-09 22:00 | blog.quarkslab.com | Original ↗ | .md | #fuzzing | #php | #audit
28.How AI Can Navigate Code and Catch Complex Vulnerabilitiesblog | 2025-04-07 13:48 | hackerone.com | Original ↗ | .md | #ai-security | #sast | #llm
29.Common Code Review Mistakes (and How to Avoid Them)blog | 2025-01-22 00:00 | aikido.dev | Original ↗ | .md | #code-review | #secure-coding | #ci-cd
30.35 more Semgrep rules: infrastructure, supply chain, and Rubyblog | 2024-12-09 14:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #ruby | #infrastructure-as-code