AppSec Feed.

Post Main Image

Shai-Hulud Strikes Again: Massive npm Attack Exposes Thousands of Secrets

Fadi Yassin | Backslash Security Reearch Team

-

December 3, 2025

December 3, 2025

Backslash Security Exposes Critical Flaws in Hundreds of Public MCP Servers

June 25, 2025

June 26, 2025

-

min read

Backslash Security Exposes Critical Flaws in Hundreds of Public MCP Servers

June 25, 2025

June 26, 2025

-

min read

Backslash Security Exposes Critical Flaws in Hundreds of Public MCP Servers

June 26, 2025

June 25, 2025

-

min read

Backslash Security Exposes Critical Flaws in Hundreds of Public MCP Servers

June 26, 2025

June 25, 2025

-

min read

Backslash Security Recognized in the 2024 Gartner® Hype Cycle™ for Application Security and Gartner Hype Cycle for Open-Source Software

October 1, 2024

October 7, 2024

-

min read

Backslash Security Recognized in the 2024 Gartner® Hype Cycle™ for Application Security and Gartner Hype Cycle for Open-Source Software

October 1, 2024

October 7, 2024

-

min read

Backslash Security Recognized in the 2024 Gartner® Hype Cycle™ for Application Security and Gartner Hype Cycle for Open-Source Software

October 7, 2024

October 1, 2024

-

min read

Backslash Security Recognized in the 2024 Gartner® Hype Cycle™ for Application Security and Gartner Hype Cycle for Open-Source Software

October 7, 2024

October 1, 2024

-

min read

Backslash Security Adds Simulation and Generative AI Tools to DevSecOps Platform

July 28, 2024

July 28, 2024

-

min read

Backslash Security Adds Simulation and Generative AI Tools to DevSecOps Platform

July 28, 2024

July 28, 2024

-

min read

Backslash Security Adds Simulation and Generative AI Tools to DevSecOps Platform

July 28, 2024

July 28, 2024

-

min read

Backslash Security Adds Simulation and Generative AI Tools to DevSecOps Platform

July 28, 2024

July 28, 2024

-

min read

Backslash was selected in the The 50 most promising Israeli startups - 2024

May 21, 2024

July 23, 2024

-

min read

Backslash was selected in the The 50 most promising Israeli startups - 2024

May 21, 2024

July 23, 2024

-

min read

Backslash was selected in the The 50 most promising Israeli startups - 2024

July 23, 2024

May 21, 2024

-

min read

Backslash was selected in the The 50 most promising Israeli startups - 2024

July 23, 2024

May 21, 2024

-

min read

Application Security Innovator Backslash Identifies AI-Generated Code Concerns via OSS Reachability Analysis, Phantom Package Visibility Capabilities

April 24, 2024

July 23, 2024

-

3

min read

Application Security Innovator Backslash Identifies AI-Generated Code Concerns via OSS Reachability Analysis, Phantom Package Visibility Capabilities

April 24, 2024

July 23, 2024

-

3

min read

Application Security Innovator Backslash Identifies AI-Generated Code Concerns via OSS Reachability Analysis, Phantom Package Visibility Capabilities

July 23, 2024

April 24, 2024

-

3

min read

Application Security Innovator Backslash Identifies AI-Generated Code Concerns via OSS Reachability Analysis, Phantom Package Visibility Capabilities

July 23, 2024

April 24, 2024

-

3

min read

Uniting AppSec and Developers in The Age of Cloud-Native Applications

September 27, 2023

July 23, 2024

-

3

min read

Uniting AppSec and Developers in The Age of Cloud-Native Applications

September 27, 2023

July 23, 2024

-

3

min read

Uniting AppSec and Developers in The Age of Cloud-Native Applications

July 23, 2024

September 27, 2023

-

3

min read

Uniting AppSec and Developers in The Age of Cloud-Native Applications

July 23, 2024

September 27, 2023

-

3

min read

What AppSec and developers working in cloud-native environments need to know

September 24, 2023

July 23, 2024

-

5

min read

What AppSec and developers working in cloud-native environments need to know

September 24, 2023

July 23, 2024

-

5

min read

What AppSec and developers working in cloud-native environments need to know

July 23, 2024

September 24, 2023

-

5

min read

What AppSec and developers working in cloud-native environments need to know

July 23, 2024

September 24, 2023

-

5

min read

AppSec Teams Stuck in Catch-Up Cycle Due to Massive Cloud-Native Enablement Gap

May 25, 2023

July 23, 2024

-

3

min read

AppSec Teams Stuck in Catch-Up Cycle Due to Massive Cloud-Native Enablement Gap

May 25, 2023

July 23, 2024

-

3

min read

AppSec Teams Stuck in Catch-Up Cycle Due to Massive Cloud-Native Enablement Gap

July 23, 2024

May 25, 2023

-

3

min read

AppSec Teams Stuck in Catch-Up Cycle Due to Massive Cloud-Native Enablement Gap

July 23, 2024

May 25, 2023

-

3

min read

Backslash Security: How This Cloud-Native Company Is Redefining The $6 Billion AppSec Market

May 17, 2023

July 23, 2024

-

3

min read

Backslash Security: How This Cloud-Native Company Is Redefining The $6 Billion AppSec Market

May 17, 2023

July 23, 2024

-

3

min read

Backslash Security: How This Cloud-Native Company Is Redefining The $6 Billion AppSec Market

July 23, 2024

May 17, 2023

-

3

min read

Backslash Security: How This Cloud-Native Company Is Redefining The $6 Billion AppSec Market

July 23, 2024

May 17, 2023

-

3

min read

How Backslash Security is Revolutionizing AppSec with Unified Code and Cloud-native Security

May 16, 2023

July 23, 2024

-

min read

How Backslash Security is Revolutionizing AppSec with Unified Code and Cloud-native Security

May 16, 2023

July 23, 2024

-

min read

How Backslash Security is Revolutionizing AppSec with Unified Code and Cloud-native Security

July 23, 2024

May 16, 2023

-

min read

How Backslash Security is Revolutionizing AppSec with Unified Code and Cloud-native Security

July 23, 2024

May 16, 2023

-

min read

Backslash Unveils Extensive Enterprise-Grade Capabilities to its Reachability-Based AppSec Platform

June 6, 2024

December 16, 2025

-

min read

Backslash Unveils Extensive Enterprise-Grade Capabilities to its Reachability-Based AppSec Platform

December 16, 2025

June 6, 2024

-

min read

Backslash Unveils Extensive Enterprise-Grade Capabilities to its Reachability-Based AppSec Platform

June 6, 2024

December 16, 2025

-

min read

Backslash Unveils Extensive Enterprise-Grade Capabilities to its Reachability-Based AppSec Platform

December 16, 2025

June 6, 2024

-

min read

A Wake Up Call to Security

July 30, 2025

July 30, 2025

-

min read

A Wake Up Call to Security

July 30, 2025

July 30, 2025

-

min read

A Wake Up Call to Security

July 30, 2025

July 30, 2025

-

min read

A Wake Up Call to Security

July 30, 2025

July 30, 2025

-

min read

The Path to AppSec-Developer Bliss

June 10, 2025

June 10, 2025

-

min read

The Path to AppSec-Developer Bliss

June 10, 2025

June 10, 2025

-

min read

The Path to AppSec-Developer Bliss

June 10, 2025

June 10, 2025

-

min read

The Path to AppSec-Developer Bliss

June 10, 2025

June 10, 2025

-

min read

Securing AI-Generated Code and Vibe Coding IDEs Whitepaper

May 28, 2025

June 12, 2025

-

min read

Securing AI-Generated Code and Vibe Coding IDEs Whitepaper

May 28, 2025

June 12, 2025

-

min read

Securing AI-Generated Code and Vibe Coding IDEs Whitepaper

May 28, 2025

June 12, 2025

-

min read

Securing AI-Generated Code and Vibe Coding IDEs Whitepaper

May 28, 2025

June 12, 2025

-

min read

How Reachability Analysis Can Transform Your Business Vulnerability Prioritization

October 15, 2023

May 28, 2025

-

min read

How Reachability Analysis Can Transform Your Business Vulnerability Prioritization

October 15, 2023

May 28, 2025

-

min read

How Reachability Analysis Can Transform Your Business Vulnerability Prioritization

October 15, 2023

May 28, 2025

-

min read

How Reachability Analysis Can Transform Your Business Vulnerability Prioritization

October 15, 2023

May 28, 2025

-

min read

Navigating The New Frontier: The Makings of Application Security Posture Management (ASPM)

August 22, 2023

May 28, 2025

-

min read

Navigating The New Frontier: The Makings of Application Security Posture Management (ASPM)

August 22, 2023

May 28, 2025

-

min read

Navigating The New Frontier: The Makings of Application Security Posture Management (ASPM)

August 22, 2023

May 28, 2025

-

min read

Navigating The New Frontier: The Makings of Application Security Posture Management (ASPM)

August 22, 2023

May 28, 2025

-

min read

Survey Report: Breaking the Catch-up Cycle: The New Cloud-Native AppSec Paradigm

June 13, 2023

May 28, 2025

-

min read

Survey Report: Breaking the Catch-up Cycle: The New Cloud-Native AppSec Paradigm

June 13, 2023

May 28, 2025

-

min read

Survey Report: Breaking the Catch-up Cycle: The New Cloud-Native AppSec Paradigm

June 13, 2023

May 28, 2025

-

min read

Survey Report: Breaking the Catch-up Cycle: The New Cloud-Native AppSec Paradigm

June 13, 2023

May 28, 2025

-

min read

Cursor IDE Security Best Practices & Tips

Mustafa Naamnih , Ben Kishaless | Backslash Research Team

September 30, 2025

-

5

min read

Cursor IDE Security Best Practices & Tips

Mustafa Naamnih , Ben Kishaless | Backslash Research Team

September 30, 2025

-

5

min read

Claude Code Security Best Practices

Ben Kishaless | Backslash Research Team

September 18, 2025

-

5

min read

Claude Code Security Best Practices

Ben Kishaless | Backslash Research Team

September 18, 2025

-

5

min read

Threat Alert: Massive NPM Supply-Chain Compromise

Mustafa Naamneh

September 9, 2025

-

4

min read

Threat Alert: Massive NPM Supply-Chain Compromise

Mustafa Naamneh

September 9, 2025

-

4

min read

What is MCP? The Universal Connector for AI Explained

September 5, 2025

-

min read

What is MCP? The Universal Connector for AI Explained

September 5, 2025

-

min read

External Data Sources + MCP Servers = Potential New Risks

August 14, 2025

-

5

min read

External Data Sources + MCP Servers = Potential New Risks

August 14, 2025

-

5

min read

The Denylist Delusion: Cursor’s Auto-Run Leaves Agentic AI Wide Open

Mustafa Naamneh and Micah Gold | Backslash Research Team

July 21, 2025

-

5

min read

The Denylist Delusion: Cursor’s Auto-Run Leaves Agentic AI Wide Open

Mustafa Naamneh and Micah Gold | Backslash Research Team

July 21, 2025

-

5

min read

Introducing the Vibe coding security threat model!

July 7, 2025

-

3

min read

Introducing the Vibe coding security threat model!

July 7, 2025

-

3

min read

Threat Research: Hundreds of MCP Servers Vulnerable to Abuse

Mustafa Naamnih and Jonathan Ginzburg | Backslash Research Team

June 25, 2025

-

5

min read

Threat Research: Hundreds of MCP Servers Vulnerable to Abuse

Mustafa Naamnih and Jonathan Ginzburg | Backslash Research Team

June 25, 2025

-

5

min read

Simulating a Context-Poisoning Vulnerable MCP Server: A POC

Micah Gold | Backslash Security Research Team

June 24, 2025

-

min read

Simulating a Context-Poisoning Vulnerable MCP Server: A POC

Micah Gold | Backslash Security Research Team

June 24, 2025

-

min read

Introducing The Backslash MCP Server Security Hub

June 16, 2025

-

4

min read

Introducing The Backslash MCP Server Security Hub

June 16, 2025

-

4

min read

Harnessing Prompt Rules for Secure Code Generation

June 11, 2025

-

5

min read

Harnessing Prompt Rules for Secure Code Generation

June 11, 2025

-

5

min read

Guilty, Innocent, or Just Risky? Why MCP Server Security Verdicts Are Hard

June 6, 2025

-

5

min read

Guilty, Innocent, or Just Risky? Why MCP Server Security Verdicts Are Hard

June 6, 2025

-

5

min read

Preferences

Privacy is important to us, so you have the option of disabling certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may impact your experience on the website. More information

Accept all cookies

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.