RSS
JavaScript bugs aplenty in Node.js ecosystem – found automatically
Naked Security
Naked Security Live – When is a bug bounty not a bug bounty?
Google’s Project Zero highlights patch quality with policy tweak