Tag

Cybersecurity

105 articles

Latest in Cybersecurity

Blogs

HackerOne Report Surfaces Massive Increase in Vulnerability Backlogs

HackerOne research shows vulnerability remediation is getting faster, but AI-driven discovery is expanding exposure debt even more quickly, putting DevSecOps teams under growing pressure.

Oct 7, 20263 min

All Cybersecurity Articles

Showing 1–24 of 105

Oct05

Blogs

GitHub Slams the Brakes on Private Vulnerability Reports

Drowning in AI-generated bug reports? GitHub has a radical answer: Stop accounts from reporting them. GitHub’s new limits on bug reports aren’t a solution to the AI bug-report floo…

3 min

Sep30

AWS Benchmark Aims to Reduce Number of False Positives Found by AI Vulnerability Scanners

Amazon Web Services (AWS) has developed a benchmark that can be used to test whether a model can distinguish real vulnerabilities from code that looks risky but is actually safe. T…

3 min

Sep18

Blogs

IT Outsourcing Versus In-House Development

The debate isn’t new — but the stakes are. In 2026, the gap between companies that get this decision right and those that don’t is measured in product cycles, burn rate, and compet…

3 min

Sep14

Blogs

More JFrog Artifactory Bugs Are Under Attack, and All Three Have Patches

Attackers are actively exploiting three JFrog Artifactory flaws, exposing how slow patching can turn artifact repositories into software supply chain attack paths.

3 min

Sep14

Blogs

GitLab’s Critical Patch Closes a Path Traversal Flaw Attackers Are Already Probing

GitLab patches two critical flaws, including a CVSS 10.0 unauthenticated file-read vulnerability, putting self-managed instances under urgent pressure to upgrade.

3 min

Aug03

Blogs

Common Risks of Outsourcing Software Development, and How to Tackle Them

Both SMBs and large enterprises often choose software development outsourcing over developing software in-house. It is no surprise, as partnering with external developers enables c…

3 min

Jun09

Blogs

GitHub Takes Down 73 Microsoft Repos After Miasma Worm Attack

GitHub pulled 73 Microsoft repositories offline after the self-replicating Miasma worm weaponized IDEs and AI coding tools to harvest developer credentials.

3 min

May12

OpenAI’s Daybreak Challenges Anthropic in AI Cybersecurity Race

OpenAI has moved deeper into enterprise cybersecurity with the launch of Daybreak, a platform that identifies software vulnerabilities, validates fixes, and speeds up patching work…

3 min

Apr29

Blogs

Cyber Threats to DevOps Platforms Rising Fast, GitProtect Report Finds

The number of incidents targeting DevOps platforms grew 21% in 2025, but the amount of downtime jumped almost 95%, the security firm said.

3 min

Apr03

Blogs

Latest Typosquatting Attack Targeting VS Code Tools Hits Windsurf IDE

Cybersecurity researchers from Bitdefender, a provider of an endpoint detection and response (EDR) platform, have discovered an extension to the Windsurf integrated development env…

3 min

Mar19

Features

OpenAI Bolsters AI Coding with Acquisition of Python Toolmaker Astral

OpenAI announced Thursday that it has reached an agreement to acquire Astral, the startup behind some of Python community’s most popular open-source developer tools. The acquisitio…

3 min

Feb18

Blogs

Tool Fragmentation is Breaking Delivery Context — Here’s What Teams are Learning

Explore the emerging crisis in application delivery caused by tool fragmentation in modern software development. This article discusses the need for semantic interoperability, cont…

3 min

Feb18

Blogs

Secrets Management Failures in CI/CD Pipelines

Explore the critical role of secrets management in CI/CD pipelines and its impact on cybersecurity. This article highlights the risks of credential exposure, the importance of impl…

3 min

Feb12

Blogs

Bridging the Dev–Security Gap With Smarter Authorization

Software teams have always lived with a built-in tension – developers push to ship fast, while security teams pump the brakes to assess risk. Now, with AI flooding the enterprise,…

3 min

Jan14

Your AI Agents Have a Blind Spot: What DevOps Teams Need to Know About Cross-LLM Security

Explore the challenges of AI agents in DevOps pipelines, highlighting the importance of model-aware detection to improve security and reduce vulnerabilities.

3 min

Dec05

Blogs

Crates.io Removes Malicious Rust Package Targeting Web3 Developers

A malicious Rust package that was found to be downloading payloads aimed at stealing cryptocurrency was removed from the crates.io Rust package registry, along with another package…

3 min

Nov25

Blogs

Second Coming of Shai-Hulud Cyberattack Ravages JavaScript Repositories

A major expansion of the self-propagating Shai-Hulud cyberattack aimed at popular node package managers (npms) used by JavaScript application developers is creating a major headach…

3 min

Sep30

Anthropic Launches Claude Sonnet 4.5: Built for Production Coding and Extended Autonomous Work

Anthropic’s Claude Sonnet 4.5 sets a new bar for coding, agentic tasks, and computer use, with 30+ hours of autonomous operation. Early adopters report major gains in accuracy, sec…

3 min

Jun09

Blogs

Zero-Trust, Full Stack: Embedding Cybersecurity Principles Into Site Reliability Engineering Culture

These days, with digital threats everywhere, cybersecurity must evolve beyond just being a perimeter measure. Given the rapid delivery of software and the transient nature of infra…

3 min

Mar07

Blogs

Bad Actor Targets Linux, macOS Developers with Typosquatted Go Packages

The attacker published at least seven malicious packages on the Go Module Mirror that, if installed, will deliver a backdoor.

3 min

Jan23

Blogs

Navigating the Next Wave of Cybersecurity Legislation With a Supercharged Security Culture

CISOs at the forefront of implementing developer-driven security programs choose upskilling solutions that allow for precision measurement, in addition to customization that is ref…

3 min

Jan22

DryRun Security Defines Application Security Policies Using Natural Language

DryRun Security today added an ability to use natural language to define and enforce application security policies as application developers build software.

3 min

Jan10

DevOps Practice

CISA Pushes Steps to Better Secure Software and Product Designs

The country’s top cybersecurity agency is urging developers to take steps to ensure the software they’re building and the products they roll out are secure and protect end users. T…

3 min