Sara Montefiore
-
July 16, 2026
Introducing Bulk AI Exploitability Analysis: Prioritize Exploitable Vulnerabilities at Scale
Another critical CVE discovered by a frontier AI model drops...
-
February 29, 2024
Key Insights from the Industry’s First Ever ASPM Nation Event
That’s a wrap on ASPM Nation! Thanks to our expert line-up of speakers and panelists, we learned how to build...
-
November 5, 2026
The Agentic Development Security Category is Bigger Than What the Market is Telling You
In March 2026, we introduced the Agentic Development Security Platform and gave a name to the work we believed security...
-
November 5, 2026
sshole (CVE-2026-123158): OpenSSH password bypass on Alpine Linux
On November 5, 2026 OpenSSH released 10.6p2 and Alpine Linux published fixed openssh packages for a password authentication bypass in...
-
November 4, 2026
Cycode Extends Agentic Development Security to Citizen Developers
Gain visibility into every AI builder...
-
November 3, 2026
OWASP Citizen Development Top 10
The OWASP Citizen Development Top 10 is OWASP's answer to a question most security teams are only starting to ask,...
-
November 3, 2026
Citizen Developer and Citizen Attacker: Two Sides of the Same AI Shift
AI did two things to software at the same time...
-
October 29, 2026
Cycode Receives ISO/IEC 42001 Certification
Security teams are being asked to hand real work to AI agents...
-
October 23, 2026
node2shell / HTTP2Shell (CVE-2026-111497): What to patch and how to check if you’re exposed
CVE-2026-111497, also called node2shell, is an out-of-bounds write in the Brotli decoder that ships inside Node.js...
-
October 23, 2026
eMudhra intermediate CA compromise: How to test, patch and find old trust
Eight eMudhra intermediate CAs were generated with private keys so small that anyone can compute them from the public certificate...
-
October 22, 2026
Introducing Custom Maestro Agents in Agentic Workflows
Security teams can't keep up with AI-driven risks by manually working violations one at a time...
-
October 21, 2026
LiteLLM 1.107.0 compromised: How to check if you’re affected and what to do
Most credential stealers search a laptop for whatever they can find...
-
October 21, 2026
PHP2Shell (CVE-2026-109618, CVE-2026-109619): How to check and fix vulnerable PHP
On October 21, PHP shipped emergency fixes for two flaws, CVE-2026-109618 and CVE-2026-109619, that researchers named PHP2Shell...
-
October 19, 2026
Meet the new Cycode: built to protect where AI risk is born
Today we’re introducing the new Cycode brand. Here is why we did it, what the new logo and colors mean,...
