Secure Planet Training Courses Updated For 2019 - Click Here

There are new available articles, click to refresh the page.

Ghostscript bug could allow rogue documents to run system commands

By: Paul Ducklin — July 4^th 2023 at 17:57

Even if you've never heard of the venerable Ghostscript project, you may have it installed without knowing.

S3 Ep98: The LastPass saga – should we stop using password managers? [Audio + Text]

By: Paul Ducklin — September 1^st 2022 at 16:55

Latest episode - listen now!

JavaScript bugs aplenty in Node.js ecosystem – found automatically

By: Paul Ducklin — August 30^th 2022 at 16:59

How to get the better of bugs in all the possible packages in your supply chain?

JavaScript developer destroys own projects in supply chain “lesson”

By: Paul Ducklin — January 11^th 2022 at 00:54

Two popular open source JavaScript packages recently got "hacked" in a symbolic gesture by the original project creator.