Sara Montefiore
-
July 16, 2026
Introducing Bulk AI Exploitability Analysis: Prioritize Exploitable Vulnerabilities at Scale
A critical CVE emerges and becomes actively exploited...
-
February 29, 2024
Key Insights from the Industry’s First Ever ASPM Nation Event
That’s a wrap on ASPM Nation! Thanks to our expert line-up of speakers and panelists, we learned how to build...
-
August 18, 2026
When the NASA Ground Station Has No Lock on the Door: Unauthenticated Command Execution in AIT-GUI (GHSA-p9r8-2q67-fp86)
A web GUI used to drive spacecraft and instrument commanding shipped a server that listens on every network interface, asks...
-
August 17, 2026
5 AI Security Maturity Models Compared (2026)
In the span of ten months, the security industry produced more AI maturity models than most teams will ever read...
-
August 13, 2026
Intellectual Property Leakage: Risks, Detection, and Prevention
Software companies used to worry about someone walking out the door with a hard drive...
-
August 13, 2026
Agentic Development Lifecycle (ADLC): What You Need to Know
AI agents now write code, pull dependencies, run tests, and open pull requests inside enterprise pipelines, sometimes without a developer...
-
August 12, 2026
Agentic SCA: Triage, Mitigate, and Fix Exploitable CVEs Without Breaking Changes
A critical CVE lands in your backlog...
-
August 6, 2026
No Install Required: The keyv and cacheable npm Worm That Weaponized AI Coding Agents
Key Highlights What Happened: An attacker hijacked the GitHub account of the maintainer behind keyv and the cacheable family of...
-
August 6, 2026
What the IBM 2026 Cost of a Data Breach Report Means for Product Security: 5 Takeaways
Attackers have accelerated, but most security programs have not...
-
August 6, 2026
Vibe Coding Security: Risks and Vulnerabilities
Vibe coding lets developers describe what they want and accept whatever the AI writes back...
-
August 4, 2026
What Is API Security? Risks, Best Practices, and the Code-First Approach
Every organization surveyed for Cycode's State of Product Security in the AI Era 2026 report confirmed it has AI-generated code...
-
August 4, 2026
Top 10 Continuous Security Monitoring Tools in 2026
Enterprise software no longer sits still long enough to audit...
-
August 3, 2026
Top Continuous Application Security Monitoring Tools as of 2026
Attackers no longer need to trick anyone to get in...
-
July 27, 2026
Introducing Agentic Workflows: Put Agents to Work for Security
AI coding agents are shipping code to your repositories right now...
