Github is starting SecurityLab.  It's part knowledge sharing, part secure coding, part bounty h...

Great breakdown on finding bugs in an OAUTH flow https://blog.teddykatz.com/2019/11/05/github-oauth-...

Microsoft has a really good article on using a semantic query language to find exploitable DOM XSS f...

Lawfare has a good article  by Jim Baker (former legal council for the FBI) on a new way to thi...