Expert perspectives on application security, compliance, and emerging threats
GeneralScope This guide helps you evaluate and filter security findings when you maintain open source projects. It addresses the challenge of distinguishing valuable insights from noise in vulnerability repo
GeneralThe security gap between enterprise software and open-source projects has long been evident. Enterprise teams enjoy hardened container images, automated SBOM generation, and threat intelligence feeds.
GeneralThe Shift in Runtime Security Testing DAST adoption increased 24% year over year, with 47% of organizations now using runtime security testing. Nearly half of all organizations are scanning running ap
IncidentWhat Happened Novee s security research team discovered a vulnerability in Cursor, an AI-powered code editor, that allowed full remote code execution on a developer s workstation. The flaw exploited t
Get weekly security insights and compliance updates delivered to your inbox.
GeneralMany believe containers are the solution for isolating untrusted code. Your team might be running AI-generated code in Docker containers, trusting that namespaces and cgroups provide enough isolation.
IncidentNearly one in three organizations experienced an API breach in the past 12 months. If you re assuming your WAF caught everything, you re using the wrong security model. What Happened Organizations rel
IncidentThe Problem In 2025, nearly one-third of known exploited vulnerabilities were exploited on or before the day they were publicly disclosed. This isn t an isolated incident, it s a widespread issue affe
IncidentWhat Happened A customer-facing LLM chatbot bypassed its safety guardrails when a user submitted input that overrode the system s original instructions. The bot disclosed internal prompts, leaked cust
IncidentWhat Happened Cyera disclosed a path traversal vulnerability in LangChain, tracked as CVE-2026-34070, with a CVSS score of 7.5. This flaw lets attackers access files outside intended directories by ma
IncidentA researcher used AI to review code, and within minutes, it flagged critical vulnerabilities in two widely used text editors. What Happened In early 2025, researcher Hung Nguyen employed Anthropic s C
GeneralThe Conventional Wisdom Ask most DevOps leaders how they validate code changes, and you ll hear: We run it through CI. The pipeline runs tests, scans for vulnerabilities, checks code quality, and eith
GeneralYou re not defending static applications anymore. When AI can write, deploy, and discard code in minutes, your security model needs to match that pace. AI systems now generate functional applications
IncidentGitHub s AI-powered scanning feature wasn t launched because their existing tools were flawless. It launched because traditional static analysis has blind spots, and those blind spots cost companies r
GeneralYour team s AI coding assistant just suggested upgrading a dependency. It sounds confident. The recommendation includes version numbers and a brief rationale. You accept the change, run your tests, an
GeneralSecurity teams are making costly assumptions about AI-driven testing tools. Some think AI pentesting can replace traditional Dynamic Security Testing, while others believe static analysis is better fo
IncidentThe Visibility Problem Between 2024 and 2025, enterprise AI agent deployments surged. Security teams gained powerful automation tools capable of querying databases, calling APIs, and orchestrating wor
