This article is the Japanese version of a post published on STEALIEN's Korean technical blog in December 2022. It introduces ...

IntroductionWith the advancement of AI, cyberattack methods are becoming increasingly sophisticated. In preparation for this, there is a growing demand for white hat hackers (security engineers) who ...

TL;DR: I sent 192 deliberately uncomfortable but legitimate prompts to two free-tier hosted models, and neither refused a ...

Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.

AI SAST vs traditional SAST, compared: how reasoning changes detection of authorization flaws, false positives, triage, fixes, speed, and cost ...

AI SAST combines program analysis, dataflow tracing, and LLM reasoning to find logic flaws rule-based SAST misses. Learn how it works and how to evaluate tools.

CISA KEV added GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex flaws on Nov. 9. See affected versions, fixes and the Nov.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and actionable insights for infosec professionals and ...

SQLMap is a free and open-source penetration testing tool written in Python that automates the process of detecting and exploiting SQL injection (SQLi) flaws SQLMap comes with a powerful detection ...

description Use when reviewing application source code for SQL injection, unsafe SQL or ORM query construction, including PHP, Doctrine, JavaScript, Python and other web stacks. Trace untrusted data ...

Model Context Protocol (MCP) adoption is accelerating, but security practices are struggling to keep pace. A researcher's ...

Chinese AI coding model security risk: Alibaba's Qwen3-Coder generates more exploitable code for U.S. defense contractors than for Chinese ones, a bias traced to its political training by behavioral ...