Tag feed

#product-security

13 posts0 followers

Explore Hashnode

Alternatives

4F404 Founders404-founders.comJul 10 · 5 min read

CRA Annex I: The 13 Security Requirements Every Connected Product Must Meet

Your product connects to a network and you sell it in the EU. By December 11, 2027, it must meet 13 essential cybersecurity requirements defined in CRA Annex I, Part I. These are not guidelines. They

0

ADArshan Dabirsiaghiblog.pixee.aiDec 8, 2025 · 4 min read

React2Shell: The Next Struts2-Style Bug Parade?

The React2Shell bug is giving me major déjà vu, and I think there are important lessons here in Abstract vs. Concrete Risk (maybe in B2B sales too—I haven’t fully thought that part through yet). In the 2010s, the Apache Struts team made (what appears...

0

ARArkcore Research Labsresearch.arkcore.ioNov 29, 2025 · 5 min read

Triaging CVE-2017-14492: dnsmasq Heap Overflow with Our Platform

void icmp6_packet(time_t now) { char interface[IF_NAMESIZE+1]; ssize_t sz; int if_index = 0; struct cmsghdr *cmptr; struct msghdr msg; union { struct cmsghdr align; /* this ensures alignment */ char control6[CMSG_SPACE(sizeof(str...

0

HKHarshit Kocharsupply-chain-security.hashnode.devAug 30, 2025 · 5 min read

$0 Supply-Chain Security Lab

Summary — I hardened a tiny Node.js repo using only free tooling: PR gates (branch protection, Dependency Review, secrets scanning), repo posture checks (OpenSSF Scorecard), SBOM + vulnerability gating (Syft → CycloneDX + Grype), and verifiable build...

0

DGDeepak Gargsekurity.hashnode.devMay 31, 2025 · 5 min read

Use Syft and Grype to cement your Software Supply Chain Security

Why Software Supply Chain Security Is More Critical Than Ever In an era where open-source software forms the backbone of most SaaS products, managing dependencies, identifying vulnerabilities, and maintaining software transparency have become fundame...

0

J&Justin & Michaelnotyourcryptopodcast.comAug 28, 2024 · 1 min read

Why are we here..?

Web1, Web2, Web3. Why does it matter? In the digital age code is power, so whoever controls the runtime controls the world. The platform age is ending. Web3 isn’t a slow database, its an alternate runtime for the web. Join us on the precipice as we b...

0

#product-security

Search Hashnode

#product-security

Explore Hashnode

CRA Annex I: The 13 Security Requirements Every Connected Product Must Meet

React2Shell: The Next Struts2-Style Bug Parade?

Triaging CVE-2017-14492: dnsmasq Heap Overflow with Our Platform

$0 Supply-Chain Security Lab

Use Syft and Grype to cement your Software Supply Chain Security

Why are we here..?

Trending tags this week