Agentic AI permissions: A core problem — but not the only one
Controlling coding agent overpermissioning is key to security. But recent frontier AI incidents show that problems don’t stop there.
Featured
Agentic AI permissions: A core problem — but not the only one
Memory-safe programming goes from advocacy to adoption
The coding languages shift — fueled by Microsoft, Google, and Amazon and enabled by AI coding — is driven by the quest for secure software.
AI coding puts Secure by Design in the spotlight
The software industry is entering the AI era burdened by legacy flaws and weaknesses, making Secure by Design essential.
Latest
Agentic AI permissions: A core problem — but not the only one
Controlling coding agent overpermissioning is key to security. But recent frontier AI incidents show that problems don’t stop there.
Memory-safe programming goes from advocacy to adoption
The coding languages shift — fueled by Microsoft, Google, and Amazon and enabled by AI coding — is driven by the quest for secure software.
AI coding puts Secure by Design in the spotlight
The software industry is entering the AI era burdened by legacy flaws and weaknesses, making Secure by Design essential.
Rubrik + RL: Bring Threat Intelligence and Detection to Backups
With this integration, Rubrik users can now tap ReversingLabs' ransomware feed to decide whether each file in their backup is safe.
OpenAI: Hugging Face mob agent incident is 'a warning shot'
The post-mortem reaches sobering conclusions, and demands a plan of action for the AI industry — plus your SecOps strategy.
AI summary attack conceals code that tampers with LLMs
Research confirms email summary design flaws — and that any unverified content is an attack vector, so invest in threat intel.
Best Enterprise File Scanning Tools of 2026
This guide compares leading file security tools across connector coverage, throughput, file-size range, and file-type breadth.
Get the Spectra Assure Community Plugin for JFrog Artifactory
Package managers auto-pull the latest OSS version — malware included. Protect your pipelines with this free plugin.
How to build effective agentic SOCs: What you need to know
ExtraHop's Kanaiya Vasani unpacks the concept of the agentic SOC — and how the Agentic SOC Alliance is working to build them out.
Shai-Hulud worm arrests: Why this is not the end
The TeamPCP actors, alleged to be behind one of the most active supply chain threats, were arrested — but this is not the end of Shai-Hulud.
Extend CrowdStrike Falcon with Permanent Intelligence
ReversingLabs built a Spectra Analyze integration with CrowdStrike Falcon. The connector is available now as part of Spectra Analyze v9.6.0.
Infostealers highlight malware-as-a-service trend
Aurastealer, ACRStealer, and RemusStealer, a new potential LumaStealer variant, show MaaS in action. Here's what you need to know.
Agentic AI scales semiautonomous server attacks
UAT-10147 leveraged agentic AI to go beyond scripting to deliver a backdoor. The method highlights the need for agentic SOCs.
Why shadow AI is far riskier than shadow IT
Organizations don’t realize how pervasive shadow AI has become. And as AI's capability grows, shadow use is harder to manage.
Why software delivery cannot depend on trust alone
Attackers turned the trusted AsyncAPI CI/CD publishing pipeline against its users, and the provenance checks all came back clean.