Sara Montefiore
-
July 16, 2026
Introducing Bulk AI Exploitability Analysis: Prioritize Exploitable Vulnerabilities at Scale
Another critical CVE discovered by a frontier AI model drops...
-
February 29, 2024
Key Insights from the Industry’s First Ever ASPM Nation Event
That’s a wrap on ASPM Nation! Thanks to our expert line-up of speakers and panelists, we learned how to build...
-
September 24, 2026
Beyond Patchmageddon: The AI Vulnerability Crisis Is an Engineering Challenge, Not an Inevitable Doom
Michael Cembalest’s excellent analysis of “Patchmageddon” describes how the gap between the speed of vulnerability exploitation and the speed of...
-
September 23, 2026
Introducing Cycode Workstation Protection: ADLC Security Now Stops Software Supply Chain Attacks
Workstation Protection builds on the AI visibility, governance, and guardrails of the Cycode platform, blocking malicious packages ...
-
September 15, 2026
OWASP Top 10 for LLM Applications
OWASP published the 2026 edition of its Top 10 for LLM Applications on August 4, 2026...
-
September 14, 2026
AI Agent Harness: The Layer That Decides Whether AI Security Works
In March 2026, LangChain took its coding agent from Top 30 to Top 5 on Terminal Bench 2.0 without touching...
-
September 8, 2026
What Benchmark Data Says About Deterministic SAST and Agentic Code Scanning
Much of the debate about agentic code scanning revolves around three core questions: Do more capable models find more vulnerabilities...
-
September 8, 2026
Attack Chaining: When Low-Severity Vulnerabilities Combine into High-Risk Attack Paths
Your backlog is full of low- and medium-severity vulnerabilities nobody is planning to fix...
-
September 1, 2026
Introducing Agentic Code Scanning: The Holistic Cycode System Around Any Model
TL;DR: Agentic Code Scanning is the fourth dimension of Cycode's code scanning spectrum, not a separate product bolted on...
-
August 18, 2026
When the NASA Ground Station Has No Lock on the Door: Unauthenticated Command Execution in AIT-GUI (GHSA-p9r8-2q67-fp86)
A web GUI used to drive spacecraft and instrument commanding shipped a server that listens on every network interface, asks...
-
August 17, 2026
5 AI Security Maturity Models Compared (2026)
In the span of ten months, the security industry produced more AI maturity models than most teams will ever read...
-
August 13, 2026
Intellectual Property Leakage: Risks, Detection, and Prevention
Software companies used to worry about someone walking out the door with a hard drive...
-
August 13, 2026
Agentic Development Lifecycle (ADLC): What You Need to Know
AI agents now write code, pull dependencies, run tests, and open pull requests inside enterprise pipelines, sometimes without a developer...
-
August 12, 2026
Agentic SCA: Triage, Mitigate, and Fix Exploitable CVEs Without Breaking Changes
A critical CVE lands in your backlog...
