🧰 Aikido Zen

The items that name it 3

• SQL injection isn't dead
  article2026-07-22

  in-app firewall (RASP) that runs inside the application, watches user input moving toward a data sink (database query or file read), and blocks attack payloads in the moment, including flaws arriving through dependencies

• Unauthenticated RCE in WordPress core (wp2shell), via SQL injection
  writeup2026-07-17

  embedded firewall that runs inside the application, inspects user input flowing toward the database, and blocks SQL injection, command injection, and path traversal at runtime; installs with a few lines of code

• Betterleaks: Gitleaks creator's open-source secrets scanner successor
  article

  Open source security project by Aikido, listed alongside Betterleaks.