VWVictor Wariboko-Westincybersage.hashnode.dev·1d ago · 5 min read7 Security Mistakes Junior Developers Make (And How to Fix Them)Security is not exactly taught in the same way syntax and frameworks are. Most junior developers learn it the hard way: after a bug is reported, a client sends an angry email or a 3 a.m Slack message 00
KRKishore Rinkishorecybersec.hashnode.dev·Jul 25 · 6 min readWhat Is SQL Injection? How It Works and How to Prevent ItIntroduction Whether it's usernames, passwords, financial transactions, and customer records, web apps store an incredible quantity of information each day. A lot of these applications utilize databas10
MNMilan Nikicinsecuritydepth.hashnode.dev·Jul 20 · 22 min readFile Upload Vulnerabilities in Java and Spring: Secure Coding PatternsBuild web apps long enough and file uploads become unavoidable. Profile pictures. PDF invoices. CSV imports. Resume uploads. Log bundles for support. Every time an application lets users send bytes an00
VWVictor Wariboko-Westincybersage.hashnode.dev·Jul 18 · 5 min readAI Is Writing Your Code. Who's Auditing It for Security Holes?Something shifted in how software gets built. Quietly, quickly and without a lot of debate. Developers today (junior and senior alike) are using AI tools like GitHub Copilot, ChatGPT and Claude to wri00
AKAyush Kumarinayushkumar912.hashnode.dev·Jul 7 · 10 min readContext Engineering for Coding Agents: What Anthropic and OpenAI's Guidance Actually ImpliesRoot cause: context is a finite, decaying resource Strip the vendor-specific vocabulary and both companies are describing the same failure mode you'd recognize from any stateful system: a bounded reso00
RARJ Abellinricocyberstack.hashnode.dev·Jun 25 · 8 min readWeb Development Still Fails Cybersecurity BasicsIn most university capstone presentations, startup MVP demonstrations, or freelance web development showcases, developers tend to prioritize functionality, aesthetics, and delivery speed, often neglec00
SKSreeram K Sincode-as-a-story.hashnode.dev·Jun 20 · 6 min readWhat is XSS (Cross-Site Scripting)?Story Time Imagine your office has a public notice board where anyone can walk up and pin messages like “Team lunch at 1 PM” and “Meeting moved to 3 PM”. Everyone trusts this board and whatever is wri00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 8 · 5 min readRender & Plunder - dalCTF 2026Challenge: Render & PlunderCategory: Web Security / Defense Challenge Description I wrote a user-profile service with a nice renderer for myself. Surely it's secure, right? Take a look and patch any00
MEMira Ezz-Eldininrootshadow.hashnode.dev·May 19 · 9 min readSecurity Principles - Part I: Trust Is Not a FeelingThis article explores one of the most fundamental ideas in security: why systems should trust evidence instead of assertions, illustrated through real design decisions from my graduation project, Inst10
ZMZahradeen Muazuinitxdeeni.hashnode.dev·May 7 · 7 min readSentinAI: Building an Autonomous AI Security AuditorModern application security tooling has a fundamental problem: Most scanners can identify suspicious patterns. Very few can actually reason about how software is exploited. That gap becomes painfully 00
