I first heard about regular expression denial of service (ReDoS) vulnerabilities from GitHub's Dependabot. Several of my projects over the years have had dependencies that suffered from ReDoS ...

The first time I ever encountered a regular expression was many years ago now, but I still remember my first thoughts on it: What is this string-like thing? I don’t want to touch it, it looks scary. I ...

“Please say it wasn’t a regex, please say it wasn’t a regex; aww, crap, it was a regex!” That seems to be the conclusion now that Crowdstrike has released a full root-cause analysis of its ...