Dkyrkos·5h agoProvenance tells you where your code came from, not whether you can trust itI’ve watched several teams get serious about provenance over the past year, usually because AI-assisted changes made it harder to say how a…
cyber_pix·2d agoGitLab’s Third Critical Patch in Six Weeks: What CVE-2026–110264 Means for Your Source Code, Your…This post is originally written by Cloudanix — A CNAPP+ platform
Dkyrkos·3d agoAn AI code review is a signal, not a verdictI’ve watched several teams add an AI reviewer to their pull requests over the past year, and the same subtle shift tends to follow. At…
Faith Chihambakwe·3d agoWhat share of AI code has vulnerabilities, and which kind? Does a human review reduce it?It writes working code almost every time — security is a different story. What does this mean for engineers?
cyber_pix·Oct 24A Developer’s API Keys Leaked While He Slept. He Woke Up to an $88,982 Cloud Bill.There’s a story making the rounds in developer communities that should make all of us pause. A developer was using an AI coding assistant…
cyber_pix·Oct 19The Agent in Your Terminal: Is Claude Code a Security Blind Spot or Developer Paranoia?A developer recently voiced an increasingly urgent concern circulating across engineering Slack channels:
cyber_pix·Oct 15Yes, AI Writes Insecure Code.A widely shared piece recently made the rounds with a headline-ready statistic: AI-generated code produces roughly 23.5% more incidents per…
InGoogle Cloud - CommunitybyTianzi Cai·Oct 12Automating Agentic Security Reviews: Running CodeMender CLI in GitHub ActionsFrom Local Conductor Loops to CI Governance
cyber_pix·Oct 12AI Is Outpacing Cloud Security — And Non-Human Identities Are the Blind SpotSomeone in a security forum asked a question recently that is worth sitting with: is anyone else concerned about how quickly AI is…
Dragonsoft DevSecOps·Oct 9SonarQube Hunter Agent is now GA: Catch broken access control and business logic flawsSonarQube has officially released Hunter Agent, a new AI security agent that elevates code security from traditional “syntax and data flow”…
