Sara Montefiore
-
July 16, 2026
Introducing Bulk AI Exploitability Analysis: Prioritize Exploitable Vulnerabilities at Scale
Another critical CVE discovered by a frontier AI model drops...
-
February 29, 2024
Key Insights from the Industry’s First Ever ASPM Nation Event
That’s a wrap on ASPM Nation! Thanks to our expert line-up of speakers and panelists, we learned how to build...
-
October 29, 2026
Cycode Receives ISO/IEC 42001 Certification
Security teams are being asked to hand real work to AI agents...
-
October 23, 2026
node2shell / HTTP2Shell (CVE-2026-111497): What to patch and how to check if you’re exposed
CVE-2026-111497, also called node2shell, is an out-of-bounds write in the Brotli decoder that ships inside Node.js...
-
October 23, 2026
eMudhra intermediate CA compromise: How to test, patch and find old trust
Eight eMudhra intermediate CAs were generated with private keys so small that anyone can compute them from the public certificate...
-
October 22, 2026
Introducing Custom Maestro Agents in Agentic Workflows
Security teams can't keep up with AI-driven risks by manually working violations one at a time...
-
October 21, 2026
LiteLLM 1.107.0 compromised: How to check if you’re affected and what to do
Most credential stealers search a laptop for whatever they can find...
-
October 21, 2026
PHP2Shell (CVE-2026-109618, CVE-2026-109619): How to check and fix vulnerable PHP
On October 21, PHP shipped emergency fixes for two flaws, CVE-2026-109618 and CVE-2026-109619, that researchers named PHP2Shell...
-
October 19, 2026
Meet the new Cycode: built to protect where AI risk is born
Today we’re introducing the new Cycode brand. Here is why we did it, what the new logo and colors mean,...
-
October 14, 2026
Fortify vs Snyk vs Cycode: Choose the Best Platform
Fortify vs Snyk is one of the most common shortlist matchups in enterprise application security, and Cycode increasingly joins it...
-
October 13, 2026
What 10,000 AI Actions Reveal About Agentic Security
This is the third installment of our Cycode AI data series...
-
October 12, 2026
What Is Application Risk Management?
Application risk management is the practice of identifying, evaluating, and reducing the security risks that applications create for a business,...
-
October 6, 2026
When Copy Means Compromise: How kubectl cp Enables RCE on Windows
A single missing backslash turns a routine “copy a file from a pod” into remote code execution on Windows admin...
-
September 30, 2026
Shadow AI Risks and How to Find, Assess, and Remediate Them
AI coding tools moved into engineering workflows faster than any developer technology before them...
