--- title: Security | daily.dev Blog description: 20 posts on security from the daily.dev blog. Curated developer news, deep-dives, and opinion read by millions of developers worldwide. canonical: https://daily.dev/categories/security/ og:type: website og:url: https://daily.dev/categories/security/ og:title: Security | daily.dev Blog og:description: 20 posts on security from the daily.dev blog. Curated developer news, deep-dives, and opinion read by millions of developers worldwide. og:image: https://daily.dev/og-image.png?v=a830cdf1 og:site_name: daily.dev og:locale: en_US twitter:card: summary_large_image twitter:site: @dailydotdev twitter:creator: @dailydotdev twitter:title: Security | daily.dev Blog twitter:description: 20 posts on security from the daily.dev blog. Curated developer news, deep-dives, and opinion read by millions of developers worldwide. twitter:image: https://daily.dev/og-image.png?v=a830cdf1 --- [Skip to main content ](#main-content) Category # Security 20 posts on security from the daily.dev blog. Curated developer news, deep-dives, and opinion read by millions of developers worldwide. 20 posts * [ Apr 22, 2026 · 22 min read The Developer Guide to API Security: OAuth 2.1, JWT Best Practices, and Common Vulnerabilities Practical API security guide covering OAuth 2.1 with PKCE, JWT signing and storage, authorization models, gateways, and testing tools.  Alex Carter ](/blog/dev-guide-api-security-oauth-2-1-jwt-vulnerabilities/) * [ Nov 27, 2025 · 16 min read Top 10 Threat Modeling Tools Compared \[2026\] Compare the top 10 threat modeling tools of 2026, their features, integrations, and methodologies to enhance software security during development.  Alex Carter ](/blog/top-10-threat-modeling-tools-compared-2024/) * [ Apr 23, 2025 · 4 min read Best Practices for Secure Document Sharing Learn essential steps for secure document sharing, including encryption, permissions, and monitoring to protect sensitive information.  Alex Carter ](/blog/best-practices-for-secure-document-sharing/) * [ Sep 24, 2024 · 12 min read Microservices Security: Best Practices & Patterns Explore essential best practices and patterns for securing microservices, including layered security, access control, and ongoing monitoring.  Alex Carter ](/blog/microservices-security-best-practices-and-patterns/) * [ Sep 23, 2024 · 15 min read Top 7 SAST Tools for Mobile App Security Testing Discover the top SAST tools for mobile app security testing to identify vulnerabilities early and enhance your app's security.  Alex Carter ](/blog/top-7-sast-tools-for-mobile-app-security-testing/) * [ Aug 31, 2024 · 3 min read Developer's Guide to Managed Security Scanning Discover how managed security scanning automates vulnerability detection, enhances developer efficiency, and strengthens software security practices.  Alex Carter ](/blog/developers-guide-to-managed-security-scanning/) * [ Aug 11, 2024 · 6 min read 10-Step OWASP Mobile App Security Testing Checklist Learn how to conduct mobile app security testing using the 10-step OWASP checklist. Enhance app security, protect user data, and build trust in your application.  Alex Carter ](/blog/10-step-owasp-mobile-app-security-testing-checklist/) * [ Aug 1, 2024 · 10 min read FIPS 140 vs. CMMC Cryptography Requirements Comparison of FIPS 140 and CMMC cryptography standards for cybersecurity. Learn about encryption methods, key management, certification processes, and compliance checks.  Alex Carter ](/blog/fips-140-vs-cmmc-cryptography-requirements/) * [ Jul 23, 2024 · 12 min read 10 Secure Coding Best Practices for Developers \[2024\] Key secure coding practices for developers in 2024 and important security trends. Learn about input validation, output encoding, authentication, session management, access control, and more.  Alex Carter ](/blog/10-secure-coding-best-practices-for-developers-2024/) * [ Jul 12, 2024 · 13 min read DAST: Dynamic Application Security Testing Guide 2024 Learn about Dynamic Application Security Testing (DAST) in 2024, including benefits, process, common issues, tools, and future trends. Discover how DAST helps secure web applications and APIs against external threats.  Alex Carter ](/blog/dast-dynamic-application-security-testing-guide-2024/) * [ May 28, 2024 · 14 min read 10 Security Tips for Virtual Environments Learn 10 essential security tips for securing virtual environments, including access control, software updates, encryption, network security, monitoring, and disaster recovery planning.  Alex Carter ](/blog/10-security-tips-for-virtual-environments/) * [ May 10, 2024 · 7 min read Open Source vs Proprietary Software: Security Comparison Explore the security differences between open source and proprietary software, including transparency, patch deployment, and community roles in vulnerability management.  Alex Carter ](/blog/open-source-vs-proprietary-software-security-comparison/) * [ Apr 17, 2024 · 14 min read XZ Backdoor: The full story in one place Discover the full story behind the XZ backdoor incident in Linux systems, highlighting the discovery, impact, and lessons learned. Explore the implications for open-source projects and supply chain security.  Alex Carter ](/blog/xz-backdoor-the-full-story-in-one-place/) * [ Apr 14, 2024 · 16 min read Embedded Security for Developers Learn about embedded security for developers, including threats, design principles, operational security, compliance, and certification. Understand the unique attributes of embedded systems and how to secure them.  Alex Carter ](/blog/embedded-security-for-developers/) * [ Apr 2, 2024 · 10 min read GhostRace: Everything you need to know about the data leakage attack in one place Learn everything about GhostRace, a data leakage attack exploiting speculative execution in computer chips. Discover impact analysis, detection methods, and future outlook.  Alex Carter ](/blog/ghostrace-everything-you-need-to-know-about-the-data-leakage-attack-in-one-place/) * [ Mar 31, 2024 · 16 min read 1Password Chrome Extension: Setup Guide (2026) Install and configure the 1Password Chrome extension, import passwords, set up vaults, and integrate with your dev workflow  Alex Carter ](/blog/chrome-plugins-1password-setup-guide/) * [ Jul 14, 2021 Clean Architecture, 5 VS Code Hacks, Rust and WebAssembly - Picks 188 Learn all about clean architecture, how to use rust and web assembly, and many more on this week's picks  Ido Shamun ](/blog/clean-architecture-5-vs-code-hacks-rust-and-web-assembly-picks-188/) * [ Jan 7, 2021 Discover Techniques to Solve Web Security Challenges This blog will walk you through some of the top web security attacks and will render you with some of the most practical solutions as well.  Dan Radak ](/blog/discover-techniques-to-solve-web-security-challenges/) * [ Aug 21, 2020 Revolutionizing Data Security by Design Imagine if you could compute on encrypted data without ever decrypting it. What would you do? Read more about Homomorphic Encryption.  Pratik Shivaraikar ](/blog/revolutionizing-data-security-by-design/) * [ Jul 6, 2020 Managing your secrets in Git 🗝 We have always been told not to store secrets in Git. But what if I told you that we manage all our secrets in Git?  Ido Shamun ](/blog/managing-your-secrets-in-git/) Showing 20 of 20 posts ## Get developer news, every new tab. Install daily.dev to turn your new-tab page into a personalized feed of articles like the ones in this category. [Get daily.dev → ](https://api.daily.dev/get) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/og-image.png?v=a830cdf1","width":1200,"height":630},"sameAs":["https://twitter.com/dailydotdev","https://www.linkedin.com/company/dailydotdev","https://github.com/dailydotdev","https://www.instagram.com/dailydotdev"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","description":"Free, personalized developer news aggregator. Stay on top of software development news, AI coding tools, and web dev - curated daily from trusted sources.","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}},{"@type":"CollectionPage","@id":"https://daily.dev/categories/security/#webpage","url":"https://daily.dev/categories/security/","name":"Security | daily.dev Blog","description":"20 posts on security from the daily.dev blog. Curated developer news, deep-dives, and opinion read by millions of developers worldwide.","isPartOf":{"@id":"https://daily.dev/#website"},"potentialAction":{"@type":"ReadAction","target":"https://daily.dev/categories/security/"}},{"@type":"ItemList","numberOfItems":20,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/blog/dev-guide-api-security-oauth-2-1-jwt-vulnerabilities/","name":"The Developer Guide to API Security: OAuth 2.1, JWT Best Practices, and Common Vulnerabilities"},{"@type":"ListItem","position":2,"url":"https://daily.dev/blog/top-10-threat-modeling-tools-compared-2024/","name":"Top 10 Threat Modeling Tools Compared [2026]"},{"@type":"ListItem","position":3,"url":"https://daily.dev/blog/best-practices-for-secure-document-sharing/","name":"Best Practices for Secure Document Sharing"},{"@type":"ListItem","position":4,"url":"https://daily.dev/blog/microservices-security-best-practices-and-patterns/","name":"Microservices Security: Best Practices & Patterns"},{"@type":"ListItem","position":5,"url":"https://daily.dev/blog/top-7-sast-tools-for-mobile-app-security-testing/","name":"Top 7 SAST Tools for Mobile App Security Testing"},{"@type":"ListItem","position":6,"url":"https://daily.dev/blog/developers-guide-to-managed-security-scanning/","name":"Developer's Guide to Managed Security Scanning"},{"@type":"ListItem","position":7,"url":"https://daily.dev/blog/10-step-owasp-mobile-app-security-testing-checklist/","name":"10-Step OWASP Mobile App Security Testing Checklist"},{"@type":"ListItem","position":8,"url":"https://daily.dev/blog/fips-140-vs-cmmc-cryptography-requirements/","name":"FIPS 140 vs. CMMC Cryptography Requirements"},{"@type":"ListItem","position":9,"url":"https://daily.dev/blog/10-secure-coding-best-practices-for-developers-2024/","name":"10 Secure Coding Best Practices for Developers [2024]"},{"@type":"ListItem","position":10,"url":"https://daily.dev/blog/dast-dynamic-application-security-testing-guide-2024/","name":"DAST: Dynamic Application Security Testing Guide 2024"},{"@type":"ListItem","position":11,"url":"https://daily.dev/blog/10-security-tips-for-virtual-environments/","name":"10 Security Tips for Virtual Environments"},{"@type":"ListItem","position":12,"url":"https://daily.dev/blog/open-source-vs-proprietary-software-security-comparison/","name":"Open Source vs Proprietary Software: Security Comparison"},{"@type":"ListItem","position":13,"url":"https://daily.dev/blog/xz-backdoor-the-full-story-in-one-place/","name":"XZ Backdoor: The full story in one place"},{"@type":"ListItem","position":14,"url":"https://daily.dev/blog/embedded-security-for-developers/","name":"Embedded Security for Developers"},{"@type":"ListItem","position":15,"url":"https://daily.dev/blog/ghostrace-everything-you-need-to-know-about-the-data-leakage-attack-in-one-place/","name":"GhostRace: Everything you need to know about the data leakage attack in one place"},{"@type":"ListItem","position":16,"url":"https://daily.dev/blog/chrome-plugins-1password-setup-guide/","name":"1Password Chrome Extension: Setup Guide (2026)"},{"@type":"ListItem","position":17,"url":"https://daily.dev/blog/clean-architecture-5-vs-code-hacks-rust-and-web-assembly-picks-188/","name":"Clean Architecture, 5 VS Code Hacks, Rust and WebAssembly - Picks 188"},{"@type":"ListItem","position":18,"url":"https://daily.dev/blog/discover-techniques-to-solve-web-security-challenges/","name":"Discover Techniques to Solve Web Security Challenges"},{"@type":"ListItem","position":19,"url":"https://daily.dev/blog/revolutionizing-data-security-by-design/","name":"Revolutionizing Data Security by Design"},{"@type":"ListItem","position":20,"url":"https://daily.dev/blog/managing-your-secrets-in-git/","name":"Managing your secrets in Git 🗝"}],"@id":"https://daily.dev/categories/security/#itemlist"},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://daily.dev/blog/"},{"@type":"ListItem","position":3,"name":"Security","item":"https://daily.dev/categories/security/"}]}]} ```