security-research
(6)
Subho Halder and the trouble with a reassuring answer
He co-founded Appknox to find the weaknesses inside mobile apps. Now, at Mattersec Labs, Subho Halder is asking how much trust security teams should place in the AI doing the checking.
The Security Company That Taught a Million Hackers - Then Gave Burp a Brain
Burp Suite grew from a hobby project with comic sound effects into the daily workbench of web-security professionals. PortSwigger’s real trick is the loop behind it: discover an attack, turn it into a tool, then teach the world how it works.
Bishop Fox Built a $154 Million Business by Breaking Into Companies Before the Bad Guys Do
The 20-year-old security firm turned pentesting from a periodic fire drill into a managed, continuous service. Its wager is simple: machines can scan the internet, but humans still decide what is actually dangerous.
Mufeed VH Turned a 20-Hour Joke Into an Open-Source Hit - Then Pointed AI at Security
A cybersecurity competitor from Thrissur built Devika in a three-day sprint, watched open source carry it around the world, and turned the lesson into a sharper bet: AI should prove a bug before humans spend time chasing it.
Benjamin Harris Got Expelled for Hacking. Then He Built a Company Around the Attacker's View.
A school expulsion, a two-week ultimatum and a one-way ticket to Singapore became the unlikely operating system for watchTowr - a security company built to see what attackers see before they act.
Jeff Johnson
Jeff Johnson is a longtime independent Mac and iOS developer who runs Lapcat Software and the Underpass App Company. He is best known for StopTheMadness, a Safari extension that wrestles control of the browser back from hostile websites, and for being one of the sharpest public critics of Apple's privacy decisions, including the 2020 'OCSP appocalypse' that revealed macOS was phoning home unencrypted every time you launched an app. A philosophy graduate turned code archaeologist, he writes a widely read blog dissecting Apple's broken promises and has racked up a long list of CVE security credits across macOS, Safari, iOS, and WebKit.