Blog

Learn what Mythos is, how it found zero-day bugs, and why Mythos could reshape software security and vulnerability prioritization

Learn how secure AI workflows protect code, dependencies, and deployments with inline controls, policy enforcement, and reachability

Learn how to reduce ai risks with practical mitigation strategies for AI code, prompt injection, compliance, and scalable governance

Learn how to secure ai models in production with controls for prompt injection, model theft, malicious files, and inference attacks

Learn ai model security best practices for CISOs, from threat models and frameworks to governance and monitoring that reduce AI risk

Learn ai model risk assessment with a practical framework, key risk categories, and best practices for compliance and security

Learn how to assess vulnerability blast radius, understand BlastRADIUS, and reduce risk with reachability, segmentation, and fixes

Learn software distribution security basics, risks, and best practices to secure dependencies, containers, pipelines, and deployments

Learn what package integrity means in software, the top supply chain threats, and best practices to verify dependencies in CI/CD

Mini Shai-Hulud: npm Worm Hits SAP Developer Packages

OpenAI's newest model now holds the top security score on the Agent Security League through Cursor as the agent harness. Through Codex, it ties for third on security but trails on functional correctness.

How attackers compromised Bitwarden's CLI and enlisted the help of AI coding agents to spread a worm and harvest developer secrets.

Security has to be embedded across the agent harness, orchestrator, and control plane if your organization wants to run software agents at scale.

C++ security vulnerabilities like buffer overflows, use-after-free, and integer overflow cause 70% of critical exploits. Learn how to detect and prevent them.

Developer security tools compared by reachability analysis, false positive rates, and workflow fit. This guide covers how 7 leading platforms perform in 2026.

SCA tools with reachability analysis cut false positives by up to 95%. Compare 7 platforms tested for dependency coverage, noise reduction, and remediation.

SCA security tools identify open source vulnerabilities in your codebase. Compare 8 top platforms ranked by signal-to-noise, reachability, and fix quality.

Best DAST tools for DevSecOps in 2026, with 6 top scanners compared on API coverage, false positive reduction, CI/CD integration, and remediation guidance.

Malicious package detection requires more than CVE scanning. Learn behavioral analysis and practical strategies to catch supply chain threats scanners miss.

Dependency management tools automate tracking, securing, and updating third-party packages. Learn what your engineering team needs from scanners to lock files.

Application security testing is the practice of finding and fixing software vulnerabilities before production. Learn about SAST, DAST, IAST, SCA, and RASP.

Your org structure and dependency hygiene predict malware outcomes more than your tooling does. Here's what the data shows.

Anthropic's newest model reaches the highest functional and security scores we've ever measured. But roughly four out of five solutions still ship with vulnerabilities.