Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams88 Security Engineers753 Compliance Teams221 DevOps Leaders63 Developers31 CISOs17 IT Directors2

Topics:All88 Incident702 General186 Standards88 Research61 Guides33 Deadlines11 Vendor News4 Legal2

88 articles in Standards · Clear filtersSort byNewest·Trending

Best Buy Cut False Positives 80% by Moving Security Into the IDE

Standards

Latest

4 min read

Best Buy Cut False Positives 80% by Moving Security Into the IDE

The Challenge Security scanning tools often generate excessive noise. Your team is likely familiar with this issue. A typical enterprise application security (AppSec) program runs static application s

For Compliance TeamsRead article

Implementing Security for AI-Assisted Development: A Working Playbook

Standards

5 min read

Implementing Security for AI-Assisted Development: A Working Playbook

Your security measures are outdated for a development process that has evolved. When AI agents continuously write code—not in sprints or releases—traditional security practices like quarterly pen test

For Security EngineersRead

When AI Found 500 Vulnerabilities Nobody Asked For

Standards

5 min read

When AI Found 500 Vulnerabilities Nobody Asked For

The Challenge Anthropic s Claude Code Security identified over 500 previously unknown high-severity vulnerabilities in open-source codebases. While this might seem like a win for security teams, it pr

For Security EngineersRead

AI Coding Tools Just Became Your Supply Chain's Weakest Link

Standards

5 min read

AI Coding Tools Just Became Your Supply Chain's Weakest Link

Your AI coding assistant just installed a malicious package. Not because it s compromised—because it made a typo. The SANDWORM_MODE campaign shows how AI tools like Claude Code and OpenClaw have becom

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Dependency Management When AI Writes Half Your Code

Standards

5 min read

Dependency Management When AI Writes Half Your Code

Your AI coding assistant just suggested a library. Your developer accepted it. Your codebase now includes a new dependency with 47 transitive dependencies, three of which have known CVEs. This happene

For Compliance TeamsRead

70% of Critical Vulns Come From Memory Issues — Here's What One Team Actually Did

Standards

4 min read

70% of Critical Vulns Come From Memory Issues — Here's What One Team Actually Did

The Challenge A platform engineering team managing a 15-year-old C++ codebase faced a directive from their CISO: reduce memory-safety vulnerabilities by Q3 or plan a multi-year rewrite. The system pro

For DevelopersRead

Open Source Contributions Return 2-5x Investment While Passive Consumption Bleeds $670K Annually

Standards

4 min read

Open Source Contributions Return 2-5x Investment While Passive Consumption Bleeds $670K Annually

The Linux Foundation has quantified a crucial insight for engineering teams: your open source strategy can either multiply your investment or quietly drain your budget. Organizations that actively con

For Compliance TeamsRead

Implementing Non-Human Identity Management for AI Systems

Standards

6 min read

Implementing Non-Human Identity Management for AI Systems

Your AI deployment just created 847 new service accounts, API keys, and machine credentials. Your security team discovered 312 of them three months later during an incident response. This gap between

For Compliance TeamsRead

Malicious Packages Downloaded 54,500 Times: Your Dependency Vetting Protocol

Standards

5 min read

Malicious Packages Downloaded 54,500 Times: Your Dependency Vetting Protocol

Scope This guide outlines the technical controls and verification steps your team needs when using packages from NuGet , npm , and similar public repositories. It includes detection methods, repositor

For DevelopersRead

AI Just Patched OpenSSL: What This Means for Your Vulnerability Management Program

Standards

6 min read

AI Just Patched OpenSSL: What This Means for Your Vulnerability Management Program

Last month, an AI system identified twelve zero-day vulnerabilities in OpenSSL—ten assigned CVE-2025 identifiers and two CVE-2026 identifiers. Five of those findings came with AI-proposed patches that

For Security EngineersRead

Your AI Agent Security Checklist (Before the Next ClawJacked)

Standards

6 min read

Your AI Agent Security Checklist (Before the Next ClawJacked)

When OpenClaw patched the ClawJacked vulnerability within 24 hours of disclosure, they acted swiftly. If you re running AI agents—whether OpenClaw, AutoGPT, LangChain agents, or custom implementations

For Security EngineersRead

Standards

4 min read

ASVS 5.0 Review Checklist: What to Test Before the Standard Ships

The release candidate of ASVS 5.0 was announced on April 9, 2025. You have a limited opportunity to influence what becomes the benchmark for application security verification. Elar Lang will present t

For Security EngineersRead

AI-Enhanced Supply Chain Malware: Detection and Defense Reference

Standards

4 min read

AI-Enhanced Supply Chain Malware: Detection and Defense Reference

Scope This guide focuses on detecting and preventing adaptive malware that uses AI to modify itself within software supply chains. It includes specific controls for npm ecosystems, integrity verificat

For Compliance TeamsRead

API Key Security Audit: Preventing Unauthorized AI Access

Standards

5 min read

API Key Security Audit: Preventing Unauthorized AI Access

The security profile of API keys has shifted dramatically. Researchers at TruffleHog discovered over 2,800 live Google API keys publicly exposed in code repositories—keys that now grant access to Goog

For DevelopersRead

Protecting Model Updates in Federated Learning: Your Input Privacy Checklist

Standards

5 min read

Protecting Model Updates in Federated Learning: Your Input Privacy Checklist

If your organization is deploying federated learning systems, you re already dealing with a core privacy challenge: training models on distributed data without centralizing that data. But protecting t

For Compliance TeamsRead

React Native Security Reference: OWASP MAS Implementation for Cross-Platform Apps

Standards

5 min read

React Native Security Reference: OWASP MAS Implementation for Cross-Platform Apps

Scope - What This Guide Covers This guide focuses on implementing security for React Native applications using resources from the OWASP Mobile Application Security (MAS) project. It provides specific

For DevelopersRead

Showing 49-64 of 88 articles

PreviousPage 4 of 6Next