Ask a mobile team how much of their code an assistant drafts today and the honest answer is a large share of it. Ask whether the last project shipped in half th ...

Spotify’s Portal for Backstage routes routine coding-agent tasks to cheaper models, reducing the amount of frontier-model ...

Much of the debate about agentic code scanning revolves around three core questions: Do more capable models find more vulnerabilities? Where does deterministic, rules-based SAST still fit? What does ...

GitHub Advanced Security released REST API endpoints on September 10 giving enterprise teams programmatic control over ...

PaperCut vulnerability CVE-2026-81578 and CVE-2026-82078 let a single attacker deploy AI agents that hacked 395 organizations ...

Dependency scanning protects modern codebases from open-source risks by auditing direct and nested packages inside the CI/CD pipelines.

Blackpoint Cyber and GreyNoise detail attacks exploiting two PaperCut zero-days, with hundreds of AI agents used to ...

A suspected Russian-speaking actor used AI-assisted workflows to exploit PaperCut flaws and compromise at least 440 instances ...

Microsoft's multi-model agentic scanning system for finding security flaws in software, codename MDASH, has deployed to ...

A reinsurance calculation can be wrong without causing a system to crash. A payment service can return a technically successful response without completing the intended transaction. An online order ...

CrowdStrike clocks 29-minute breakout times and an 89% surge in AI-augmented attacks. Here is the five-phase framework I use with CISOs to close that gap, with budget splits and a board script.

Technology leader Ashish Chatterjee explains why modern applications, trusted data and clear governance must come before ...