Blog Application Security
Briefing: the developer toolchain is the target
Three stories this week sit in the build and deploy path rather than at the network edge: a CI secret stealer pushed through hijacked GitHub accounts, an agentic pentest platform used in live AWS intrusions, and a critical HTTP/2 flaw in Apache httpd. Here is the through-line and the checklist.
Jay B., 6 min read