Jun 25, 2026 Your Service Is an Unwitting Accomplice: How Confused Deputy Attacks Work A confused deputy attack tricks a privileged service into using its authority against itself. capability-based-securityconfused-deputysecurityattacks
Jun 24, 2026 Your permission checks are lying to you Capability-based security replaces scattered role checks with unforgeable tokens of authority. capability-based-securitytypescriptpermissionssecurity
Jun 23, 2026 What If Every Function Had to Receive Permission Instead of Assuming It? Most code runs with ambient authority: every function can touch everything. capability-based-securitypermissionssecurityzero-trust
