Expert perspectives on application security, compliance, and emerging threats
GeneralScope This guide focuses on detecting and responding to supply chain attacks targeting email transmission libraries. You ll learn to identify BCC-based exfiltration backdoors in npm packages, implemen
GeneralMicrosoft has released Rampart and Clarity as open-source projects, offering new ways for organizations to enhance AI agent security. These tools address a critical issue: AI agents now execute code,
GeneralThe Conventional Wisdom Security teams are excited about Microsoft s release of Clarity and RAMPART, viewing them as transformative for AI security. The idea is straightforward: integrate these open-s
GeneralSecurity engineers have spent decades developing reliable methods to measure software security. However, with the advent of AI systems, these measurements have become ineffective. The issue isn t that
Get weekly security insights and compliance updates delivered to your inbox.
GeneralYour AI agent just guided a developer through installing a malicious package. Your static analysis tools found nothing wrong. Your endpoint detection and response (EDR) didn t trigger. Your code revie
GeneralMicrosoft has released two open-source tools that transform AI agent security testing: RAMPART and Clarity. RAMPART is a Pytest-native safety and security testing framework, while Clarity serves as a
GeneralAgentic AI systems are operating in production—processing emails, writing code, booking meetings—and many security teams lack a framework to evaluate their risks. The issue isn t about tools; it s abo
GeneralScope - What This Guide Covers This guide shows you how to use custom scan checks in Burp Suite to automate security expertise across your application portfolio. You ll learn to: Build checks that res
GeneralYour AI deployment just provisioned 47 service accounts. None of them have owners, none log what they access, and three have write access to your production database. This isn t a hypothetical breach
GeneralStraiker s red team discovered 87 exploits across production AI agents, with 24 instances following a pattern called Living Off The Agent (LOTA). If you re deploying autonomous AI agents, your traditi
GeneralGitHub forecasts 14 billion commits in 2026—a 10x increase from pre-AI levels. Your security team is already feeling it. Pull requests arrive faster, code reviews pile up, and the quality of code comi
GeneralScope - What This Guide Covers This guide focuses on the operational changes in application security as AI agents take on end-to-end vulnerability management. It provides frameworks for establishing g
GeneralA credential-stealing worm is spreading through hundreds of npm packages right now. The Mini Shai-Hulud worm, created by TeamPCP, targets the TanStack ecosystem specifically, but your exposure isn t l
GeneralThe belief that AI-powered security tools will transform your software development lifecycle is widespread. Vendors promise AI-driven vulnerability detection, automated threat modeling, and intelligen
GeneralScope This guide addresses the security and governance challenges when your engineering team uses AI-assisted coding tools. You ll find specific verification practices, governance controls, and refere
GeneralYou ve probably heard the warnings: AI code generators are security nightmares waiting to happen. Your developers are using Cursor or similar tools to generate entire functions in seconds, and suddenl
