Sara Montefiore
-
July 16, 2026
Introducing Bulk AI Exploitability Analysis: Prioritize Exploitable Vulnerabilities at Scale
Another critical CVE discovered by a frontier AI model drops...
-
February 29, 2024
Key Insights from the Industry’s First Ever ASPM Nation Event
That’s a wrap on ASPM Nation! Thanks to our expert line-up of speakers and panelists, we learned how to build...
-
October 6, 2026
When Copy Means Compromise: How kubectl cp Enables RCE on Windows
A single missing backslash turns a routine “copy a file from a pod” into remote code execution on Windows admin...
-
September 30, 2026
Shadow AI Risks and How to Find, Assess, and Remediate Them
AI coding tools moved into engineering workflows faster than any developer technology before them...
-
September 29, 2026
Product Security in Manufacturing: The Complete Guide
A CVE in a widely used component goes to actively exploited on a Tuesday morning...
-
September 29, 2026
Application Security for the Energy, Oil & Gas and Utilities Industries: The Complete Guide
An oil trader prices tomorrow's cargoes on a model someone on the desk built last year...
-
September 29, 2026
Cycode + Hugging Face: See & Secure Every AI Model
Cycode’s Hugging Face integration gives security teams visibility, context, and control over the AI models your teams build, publish, and...
-
September 28, 2026
Cycode Uncovers Account Takeover in MCP Python SDK
A malicious MCP server tricked the SDK into sending login credentials to the attacker instead of the real login provider...
-
September 24, 2026
Beyond Patchmageddon: The AI Vulnerability Crisis Is an Engineering Challenge, Not an Inevitable Doom
Why the AI vulnerability surge is an engineering problem we can solve, not a doom scenario.
-
September 23, 2026
Introducing Cycode Workstation Protection: ADLC Security Now Stops Software Supply Chain Attacks
Workstation Protection builds on the AI visibility, governance, and guardrails of the Cycode platform, blocking malicious packages ...
-
September 22, 2026
Malicious Package Detection: Why Databases Miss Attacks and Where Detection Has to Fire
Malicious package detection is the practice of identifying open source packages that were published or modified to attack the systems...
-
September 17, 2026
13 Best DAST Tools and Scanners in 2026
This guide compares the best DAST tools on the market and explains what each one actually does well once it...
-
September 17, 2026
The 11 Best AI SAST Tools in 2026
This guide compares the top AI SAST tools on the market and explains how each one actually applies AI to...
-
September 15, 2026
OWASP Top 10 for LLM Applications
OWASP published the 2026 edition of its Top 10 for LLM Applications on August 4, 2026...
