Sara Montefiore
-
July 16, 2026
Introducing Bulk AI Exploitability Analysis: Prioritize Exploitable Vulnerabilities at Scale
Another critical CVE discovered by a frontier AI model drops...
-
February 29, 2024
Key Insights from the Industry’s First Ever ASPM Nation Event
That’s a wrap on ASPM Nation! Thanks to our expert line-up of speakers and panelists, we learned how to build...
-
September 30, 2026
Shadow AI Risks and How to Find, Assess, and Remediate Them
AI coding tools moved into engineering workflows faster than any developer technology before them...
-
September 29, 2026
Product Security in Manufacturing: The Complete Guide
A CVE in a widely used component goes to actively exploited on a Tuesday morning...
-
September 29, 2026
Application Security for the Energy, Oil & Gas and Utilities Industries: The Complete Guide
An oil trader prices tomorrow's cargoes on a model someone on the desk built last year...
-
September 29, 2026
Cycode + Hugging Face: See & Secure Every AI Model
Cycode’s Hugging Face integration gives security teams visibility, context, and control over the AI models your teams build, publish, and...
-
September 28, 2026
Cycode Uncovers Account Takeover in MCP Python SDK
A malicious MCP server tricked the SDK into sending login credentials to the attacker instead of the real login provider...
-
September 24, 2026
Beyond Patchmageddon: The AI Vulnerability Crisis Is an Engineering Challenge, Not an Inevitable Doom
Why the AI vulnerability surge is an engineering problem we can solve, not a doom scenario.
-
September 23, 2026
Introducing Cycode Workstation Protection: ADLC Security Now Stops Software Supply Chain Attacks
Workstation Protection builds on the AI visibility, governance, and guardrails of the Cycode platform, blocking malicious packages ...
-
September 22, 2026
Malicious Package Detection: Why Databases Miss Attacks and Where Detection Has to Fire
Malicious package detection is the practice of identifying open source packages that were published or modified to attack the systems...
-
September 15, 2026
OWASP Top 10 for LLM Applications
OWASP published the 2026 edition of its Top 10 for LLM Applications on August 4, 2026...
-
September 14, 2026
AI Agent Harness: The Layer That Decides Whether AI Security Works
In March 2026, LangChain took its coding agent from Top 30 to Top 5 on Terminal Bench 2.0 without touching...
-
September 8, 2026
What Benchmark Data Says About Deterministic SAST and Agentic Code Scanning
Much of the debate about agentic code scanning revolves around three core questions: Do more capable models find more vulnerabilities...
-
September 8, 2026
Attack Chaining: When Low-Severity Vulnerabilities Combine into High-Risk Attack Paths
Your backlog is full of low- and medium-severity vulnerabilities nobody is planning to fix...
