Dkyrkos·4h agoProvenance tells you where your code came from, not whether you can trust itI’ve watched several teams get serious about provenance over the past year, usually because AI-assisted changes made it harder to say how a…
cyber_pix·2d agoGitLab’s Third Critical Patch in Six Weeks: What CVE-2026–110264 Means for Your Source Code, Your…This post is originally written by Cloudanix — A CNAPP+ platform
Dkyrkos·3d agoAn AI code review is a signal, not a verdictI’ve watched several teams add an AI reviewer to their pull requests over the past year, and the same subtle shift tends to follow. At…
Faith Chihambakwe·3d agoWhat share of AI code has vulnerabilities, and which kind? Does a human review reduce it?It writes working code almost every time — security is a different story. What does this mean for engineers?
cyber_pix·Oct 24A Developer’s API Keys Leaked While He Slept. He Woke Up to an $88,982 Cloud Bill.There’s a story making the rounds in developer communities that should make all of us pause. A developer was using an AI coding assistant…