Tag: Cybersecurity
Your AI Agents Have a Blind Spot: What DevOps Teams Need to Know About Cross-LLM Security
Arun Sanna | | AI agents, AI infrastructure, Behavioral Monitoring, Cross-LLM Detection, Cybersecurity, devops, DevOps pipelines, incident management, Model-Aware Detection, Multi-LLM Environments, security best practices, Security Gaps, supply chain security, threat detection, vulnerability managementExplore the challenges of AI agents in DevOps pipelines, highlighting the importance of model-aware detection to improve security and reduce vulnerabilities ...
Crates.io Removes Malicious Rust Package Targeting Web3 Developers
Jeff Burt | | cryptocurrency, Cybersecurity, Ethereum Virtual Machine, Rust programming, supply chain attackA malicious Rust package that was found to be downloading payloads aimed at stealing cryptocurrency was removed from the crates.io Rust package registry, along with another package by the same author that ...
Second Coming of Shai-Hulud Cyberattack Ravages JavaScript Repositories
A major expansion of the self-propagating Shai-Hulud cyberattack aimed at popular node package managers (npms) used by JavaScript application developers is creating a major headache for DevSecOps teams around the globe. Based ...
Anthropic Launches Claude Sonnet 4.5: Built for Production Coding and Extended Autonomous Work
Tom Smith | | AI agents, AI coding, AI teammates, autonomous operation, code refactoring, computer use, Cybersecurity, developer tools, devops, financial services, legal workflows, SWE-Bench, vulnerability remediationAnthropic’s Claude Sonnet 4.5 sets a new bar for coding, agentic tasks, and computer use, with 30+ hours of autonomous operation. Early adopters report major gains in accuracy, security, and long-horizon development ...
Zero-Trust, Full Stack: Embedding Cybersecurity Principles Into Site Reliability Engineering Culture
These days, with digital threats everywhere, cybersecurity must evolve beyond just being a perimeter measure. Given the rapid delivery of software and the transient nature of infrastructure, security must be built into ...
Bad Actor Targets Linux, macOS Developers with Typosquatted Go Packages
The attacker published at least seven malicious packages on the Go Module Mirror that, if installed, will deliver a backdoor ...
Navigating the Next Wave of Cybersecurity Legislation With a Supercharged Security Culture
CISOs at the forefront of implementing developer-driven security programs choose upskilling solutions that allow for precision measurement, in addition to customization that is reflective of scenarios they are most likely to encounter ...
DryRun Security Defines Application Security Policies Using Natural Language
DryRun Security today added an ability to use natural language to define and enforce application security policies as application developers build software ...
CISA Pushes Steps to Better Secure Software and Product Designs
The country’s top cybersecurity agency is urging developers to take steps to ensure the software they’re building and the products they roll out are secure and protect end users. The Cybersecurity and ...
Automating Web Application Security Testing to Combat Cyber Threats
Despite the hundreds of exposed web applications and APIs in our attack surfaces, many assets remain dangerously untested and vulnerable to cyberattacks ...
The Software Extinction Event That Wasn’t
The world may have just avoided a cybersecurity disaster, with potential impact of CrowdStrike x1000. Imagine if the world’s most pervasive programming language, used in the majority of organizations, services, websites and ...
The Risks of the Cloud Oligopoly
The cloud oligopoly, insofar as it stifles competition, represents a potentially overlooked area in which businesses must assess their supply chain commitments ...
