AArshadinblog.arshadakl.in·6d ago · 6 min readHow a Profile Update Feature Could Drain a Company's Bank AccountI was looking at one of the most normal features you can find in almost any application: Update Profile. Nothing exciting. A user changes their name, profile picture, maybe email, and the backend upda00
MEMira Ezz-Eldininrootshadow.hashnode.dev·Aug 15 · 10 min readSecurity Principles - Part I: Trust Is Not a FeelingThis article explores one of the most fundamental ideas in security: why systems should trust evidence instead of assertions, illustrated through real design decisions from my graduation project, Inst10
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 10
NPNarges Pourkamaliinsafeai.blog·Aug 11 · 12 min read10 Rules for Secure Database Schema Design (Before Writing Any Code)My study on secure architecture awareness continues! This time, I examined the most fundamental layer: Database Schema Design. Are you a Back-End Developer? What security considerations do you make wh30
VWVictor Wariboko-Westincybersage.hashnode.dev·Aug 1 · 5 min read7 Security Mistakes Junior Developers Make (And How to Fix Them)Security is not exactly taught in the same way syntax and frameworks are. Most junior developers learn it the hard way: after a bug is reported, a client sends an angry email or a 3 a.m Slack message 00
KRKishore Rinkishorecybersec.hashnode.dev·Jul 25 · 6 min readWhat Is SQL Injection? How It Works and How to Prevent ItIntroduction Whether it's usernames, passwords, financial transactions, and customer records, web apps store an incredible quantity of information each day. A lot of these applications utilize databas10
MNMilan Nikicinsecuritydepth.hashnode.dev·Jul 20 · 22 min readFile Upload Vulnerabilities in Java and Spring: Secure Coding PatternsBuild web apps long enough and file uploads become unavoidable. Profile pictures. PDF invoices. CSV imports. Resume uploads. Log bundles for support. Every time an application lets users send bytes an00
VWVictor Wariboko-Westincybersage.hashnode.dev·Jul 18 · 5 min readAI Is Writing Your Code. Who's Auditing It for Security Holes?Something shifted in how software gets built. Quietly, quickly and without a lot of debate. Developers today (junior and senior alike) are using AI tools like GitHub Copilot, ChatGPT and Claude to wri00
AKAyush Kumarinayushkumar912.hashnode.dev·Jul 7 · 10 min readContext Engineering for Coding Agents: What Anthropic and OpenAI's Guidance Actually ImpliesRoot cause: context is a finite, decaying resource Strip the vendor-specific vocabulary and both companies are describing the same failure mode you'd recognize from any stateful system: a bounded reso00
RARJ Abellinricocyberstack.hashnode.dev·Jun 25 · 8 min readWeb Development Still Fails Cybersecurity BasicsIn most university capstone presentations, startup MVP demonstrations, or freelance web development showcases, developers tend to prioritize functionality, aesthetics, and delivery speed, often neglec00
