Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams1483 Security Engineers1057 Compliance Teams280 DevOps Leaders89 Developers33 CISOs21 IT Directors2

Topics:All1483 Incident951 General270 Standards94 Research90 Guides53 Deadlines17 Vendor News5 Legal2

1483 articlesSort byNewest·Trending

General

Latest

5 min read

AI Won't Fix Your Deployment Pipeline

You ve probably heard the pitch: replace your error-prone human developers with AI agents, and watch your delivery problems disappear. No more miscommunication, no more merge conflicts, no more late-n

For DevOps LeadersRead article

Attackers Mint Admin Tokens Four Days After JFrog Patch

Incident

4 min read

Attackers Mint Admin Tokens Four Days After JFrog Patch

What Happened On August 28, 2026, JFrog released Artifactory version 7.161.20 to patch CVE-2026-82329 , an authentication bypass vulnerability with a CVSS score of 9.8. Just four days later, on Septem

For Security EngineersRead

Your Team Asked: How Do We Actually Govern Shadow AI?

Guides

4 min read

Your Team Asked: How Do We Actually Govern Shadow AI?

Last week, three different Slack threads raised similar concerns. A developer questioned if ChatGPT was a sanctioned tool. An engineer wondered if copying code into Claude breached data handling polic

For Security EngineersRead

Traditional Threat Modeling Won't Secure Your LLMs

General

4 min read

Traditional Threat Modeling Won't Secure Your LLMs

The conventional wisdom : Your existing threat modeling framework will work fine for AI systems. Just add LLM-specific threats to your STRIDE analysis, update your data flow diagrams, and you re cover

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Should You Adopt the OWASP LLM Checklist?

Standards

5 min read

Should You Adopt the OWASP LLM Checklist?

You re facing a decision: your organization is deploying LLMs, and you need to secure them. The OWASP LLM AI Cybersecurity Governance Checklist offers a structured six-step approach to LLM strategy. B

For Compliance TeamsRead

Sonar CLI Cut Token Costs 49% With Format Change

Research

4 min read

Sonar CLI Cut Token Costs 49% With Format Change

The Challenge If your team uses AI coding agents, you might be overlooking a hidden cost: the data formats your tools output. When you send Sonar CLI results to an LLM for code analysis, you re paying

For DevOps LeadersRead

npm Malware Broke 500 Packages in Four Days

Standards

5 min read

npm Malware Broke 500 Packages in Four Days

Your package manager trusts every update it receives. That trust just became your biggest vulnerability. Between September 14th and 18th, the Shai-Hulud worm altered more than 500 package versions on

For Security EngineersRead

Cursor's Security Review Automation: What Went Right

Incident

4 min read

Cursor's Security Review Automation: What Went Right

Cursor s security review system identifies over 200 vulnerabilities weekly across 3,000+ internal pull requests. This isn t a security incident; it s a testament to effective automation. It highlights

For Security EngineersRead

AI Agents Don't Need Exploits to Leak Data

General

5 min read

AI Agents Don't Need Exploits to Leak Data

You ve probably invested in prompt injection defenses, model guardrails, and access controls for your AI deployments. Your security checklist looks solid. But here s what most teams miss: the gap betw

For Security EngineersRead

Agentic AI Cuts Threat Response from Days to Minutes

Incident

3 min read

Agentic AI Cuts Threat Response from Days to Minutes

Introduction In 2026, Frost Sullivan recognized Picus Security as the Innovation Index Leader in their Frost Radar report on Automated Security Validation. This accolade wasn t for minor tweaks to exi

For Security EngineersRead

Active Traceability for Software Supply Chains

General

4 min read

Active Traceability for Software Supply Chains

Scope This guide covers implementing active traceability systems in software supply chains, focusing on the security and governance challenges introduced by AI-assisted development. You ll find requir

For Security EngineersRead

7,100 Rails Instances Running Known RCE Flaws

Incident

4 min read

7,100 Rails Instances Running Known RCE Flaws

A vulnerability in Ruby on Rails libvips image processing library (CVE-2026-66066) has been actively exploited since early March 2024. VulnCheck recorded more than 360 exploitation attempts within the

For Security EngineersRead

AI Generated 3,000 Credentials in One Sprint

Incident

4 min read

AI Generated 3,000 Credentials in One Sprint

What Happened A development team using LLM-assisted code generation released multiple pull requests containing hardcoded API keys, database credentials, and overly permissive access controls. The code

For Security EngineersRead

General

5 min read

AI Agents Need Identity, Not Guardrails

Scope This guide focuses on identity-based security controls for AI agents that autonomously execute code, move data, and provision infrastructure. You ll learn how to implement lifecycle governance f

For Compliance TeamsRead

Copilot Users Code 12% More, Collaborate 80% Less

Research

4 min read

Copilot Users Code 12% More, Collaborate 80% Less

A Harvard Business School study tracking GitHub activity reveals something your security team needs to see: developers using Copilot increased their coding time by 12.4%, while their project managemen

For Security EngineersRead

Incident

4 min read

AI Agents Leak Secrets via README Files

What Happened Researchers found that AI coding agents can follow hidden instructions in project README files, even if those instructions lead to data leaks. In tests using ReadSecBench, a specialized

For Security EngineersRead

a promotional banner asking how ready are you for PCI DSS 4.0? With a call-to-action to get the checklist now.

Showing 81-96 of 1483 articles

PreviousPage 6 of 93Next