Expert perspectives on application security, compliance, and emerging threats
GeneralYou re reviewing more pull requests than ever. Your team s throughput has doubled, and you re catching issues you ve never seen before: logic errors that compile cleanly, API calls that look right but
IncidentWhat Happened Internet-wide scanning has revealed 175,000 Ollama servers with publicly accessible APIs. Ollama, a tool for running large language models locally or on cloud infrastructure, exposes a R
IncidentA supply chain attack compromised 19 Chrome and Edge extensions between December 2024 and January 2025. Attackers acquired legitimate extensions, pushed malicious updates through official channels, an
GeneralScope This guide addresses the perception gap between executive leadership and security practitioners on AI system security. It s designed for security engineers who need to: Translate technical AI se
Get weekly security insights and compliance updates delivered to your inbox.
GeneralYour coding agents are writing thousands of lines per week. You re tracking the output in Git. But what about the prompts, skills, and instructions that shape what those agents produce? Most teams tre
ResearchYou ve got three AI-powered application security scanners running against your codebase. Scanner A flags 127 issues. Scanner B finds 89. Scanner C reports 156. They agree on exactly 5% of their findin
GeneralScope This guide focuses on managing the security of transitive dependencies, the indirect libraries your direct dependencies pull in. You ll learn how to identify these hidden components, assess thei
GeneralYour AI coding assistant just suggested a package. It autocompleted the import, generated the integration code, and saved your team 45 minutes. It also pulled in a library that hasn t been updated in
GeneralYour security team might be debating the wrong issue about AI-generated code. The real question isn t whether you need new testing methods for AI-written code versus human-written code. It s whether y
GuidesYou ve probably heard the pitch: Use this managed service and everything gets easier. Then you find out the abstraction layer hides critical configuration options, disrupts your existing workflows, or
IncidentOn January 16, 2025, security researchers disclosed a vulnerability in the GiveWP WordPress plugin that earned a perfect 10.0 CVSS score. CVE-2026-82222 joins four other critical flaws affecting widel
IncidentWhat Happened Google has announced it will no longer accept AI-generated submissions to its Open Source Software Vulnerability Reward Program (VRP). This decision follows a trend of low-quality report
ResearchYour developers are installing AI coding assistants that execute with full system permissions. No runtime checks. No sandboxing. Just direct access to everything on their machines. Mobb.ai s recent au
DeadlinesIf proposed legislation requires you to throttle, suspend, or shut down AI agents, you ll need more than a big red button. You ll need documented policies, tested procedures, and clear authority chain
GeneralMost security teams treat secrets rotation as a solved problem. You ve got a vault, set rotation policies, and automated the process. Box checked. But here s the uncomfortable truth: you re spending e
GeneralScope This guide addresses the verification gap created when AI-generated code outpaces your team s ability to test it. If you re seeing commit volumes spike, PRs multiply, or your CI queue backing up
