Expert perspectives on application security, compliance, and emerging threats
IncidentWhat Happened In 2026, Klue, a SaaS competitive intelligence platform, experienced a breach through an unused service account credential. This credential, created for a pilot project and never deactiv
IncidentOn January 14, 2025, Anthropic published research on Mythos Preview, an AI system that autonomously completed a 32-step corporate network attack simulation. This wasn t about a real breach, but it rev
IncidentWhat Happened Anthropic launched Glasswing, a $100 million initiative to use AI for identifying vulnerabilities at scale. They soon released Claude Mythos, an AI system designed to autonomously discov
GeneralThe Conventional Wisdom Security teams often advise involving your CISO in vendor contracts. They suggest having them review the security questionnaire, participate in the final vendor call, and sign
Get weekly security insights and compliance updates delivered to your inbox.
GeneralSecurity teams can no longer afford to wait on AI. The CrowdStrike 2026 Global Threat Report documented an 89% year-over-year increase in AI-enabled adversary activity. More concerning, the average eC
GeneralThe conventional wisdom: AI coding assistants are a smart investment. For $19-$200/month per developer, you get faster code completion, automated boilerplate, and productivity gains that justify the s
IncidentThe Problem Organizations are facing a systemic issue: 82% carry security debt, meaning they have unresolved vulnerabilities older than a year. These aren t hypothetical risks; they re real flaws in y
IncidentIncident Overview On January 15, 2025, Alibaba released Mythos, an advanced AI model with enhanced reasoning capabilities. Within 72 hours, security vendors began issuing alerts about AI-powered cyber
IncidentWhat Happened Researchers at Hong Kong University of Science and Technology have discovered a denial-of-service attack that exploits AI agent safety systems. This attack, known as reasoning-extension
IncidentThe Issue at Hand Between late 2024 and early 2025, Checkmarx commissioned Censuswide to survey security and development leaders in organizations using AI code generation tools. The findings revealed
GeneralUnderstanding the Shift AI Bill of Materials (BOM) documentation is emerging rapidly, but many security programs are unprepared to utilize it effectively. The idea is simple: catalog AI components in
IncidentThe Emerging Threat Vulnerabilities are being exploited faster than your team can deploy patches. The traditional workflow—discover, prioritize, test, deploy—now lags behind the speed of exploitation.
StandardsScope - What This Guide Covers This guide addresses the operational gap between discovering vulnerabilities and fixing them in environments where AI-assisted scanning is common. You ll find frameworks
StandardsYour team committed 29 million new hardcoded secrets to public repositories in 2025—a 34% increase from the previous year. AI services contributed to 81% more leaks year over year, and internal reposi
StandardsThe Pentagon s 180-day deadline to remove Anthropic technology exposes a fundamental gap: most organizations cannot precisely answer, where do we use AI? Only 31% of organizations report being fully e
StandardsThe Problem: Why AI Governance Matters Now AI adoption in your security organization has surged from 50% to 75% in just one year. Your team is now managing AI-driven vulnerability scanners, code analy
