Danny Grander

SourMint: iOS remote code execution, Android findings, and community response

October 15, 2020

PCI standards open source security requirements — how to comply?

July 23, 2019

A post-mortem of the malicious event-stream backdoor

December 6, 2018

Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months

November 27, 2018

Behind the disclosure: the Zip Slip vulnerability

August 15, 2018

Public Disclosure of a Critical Arbitrary File Overwrite Vulnerability: Zip Slip

June 5, 2018

Attacking an FTP Client: MGETting more than you bargained for

April 4, 2018

Where do security patches come from?

January 25, 2018

Python 2 vs 3: Security Differences

October 10, 2017

Using Node.js event loop for timing attacks

February 16, 2016