Liran Tal

Concerns of supply-chain attacks amplify as remote code execution was found in Ruby gem strong_password

July 7, 2019

Snyk research team discovers severe prototype pollution security vulnerabilities affecting all versions of lodash

July 5, 2019

Serverless is great, but what about the security of my AWS Lambda functions and their dependencies?

July 3, 2019

Best practices for secrets management in serverless applications

June 13, 2019

npm passes the 1 millionth package milestone! What can we learn?

June 4, 2019

10 Serverless security best practices

May 31, 2019

Scoring security vulnerabilities 101: Introducing CVSS for CVEs

May 16, 2019

A Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP client

May 6, 2019

190,000 users affected by Docker Hub’s security breach. Now what?

April 29, 2019

How much do we really know about how packages behave on the npm registry?

April 22, 2019

After three years of silence, a new jQuery prototype pollution vulnerability emerges once again

April 15, 2019

Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

April 4, 2019