Cycode Team
- September 30, 2026
Shadow AI Risks and How to Find, Assess, and Remediate Them
AI coding tools moved into engineering workflows faster than any developer technology before them...
- September 29, 2026
Product Security in Manufacturing: The Complete Guide
A CVE in a widely used component goes to actively exploited on a Tuesday morning...
- September 29, 2026
Application Security for the Energy, Oil & Gas and Utilities Industries: The Complete Guide
An oil trader prices tomorrow's cargoes on a model someone on the desk built last year...
- September 22, 2026
Malicious Package Detection: Why Databases Miss Attacks and Where Detection Has to Fire
Malicious package detection is the practice of identifying open source packages that were published or modified to attack the systems...
- September 15, 2026
OWASP Top 10 for LLM Applications
OWASP published the 2026 edition of its Top 10 for LLM Applications on August 4, 2026...
- September 14, 2026
AI Agent Harness: The Layer That Decides Whether AI Security Works
In March 2026, LangChain took its coding agent from Top 30 to Top 5 on Terminal Bench 2.0 without touching...
- September 8, 2026
What Benchmark Data Says About Deterministic SAST and Agentic Code Scanning
Much of the debate about agentic code scanning revolves around three core questions: Do more capable models find more vulnerabilities...
- September 8, 2026
Attack Chaining: When Low-Severity Vulnerabilities Combine into High-Risk Attack Paths
Your backlog is full of low- and medium-severity vulnerabilities nobody is planning to fix...
- August 17, 2026
5 AI Security Maturity Models Compared (2026)
In the span of ten months, the security industry produced more AI maturity models than most teams will ever read...
- August 13, 2026
Intellectual Property Leakage: Risks, Detection, and Prevention
Software companies used to worry about someone walking out the door with a hard drive...
- August 13, 2026
Agentic Development Lifecycle (ADLC): What You Need to Know
AI agents now write code, pull dependencies, run tests, and open pull requests inside enterprise pipelines, sometimes without a developer...
- August 6, 2026
No Install Required: The keyv and cacheable npm Worm That Weaponized AI Coding Agents
Key Highlights What Happened: An attacker hijacked the GitHub account of the maintainer behind keyv and the cacheable family of...