Tech news from the best sources
The proliferation of AI agents within enterprise environments has created an unprecedented attack surface that traditional cybersecurity frameworks st…
26,000 agents got compromised by a fake skill that sailed through security scanners. The trick? A mutable external link that pointed to benign code du…
We ship tools that verify software artifacts. We deal with hashes, checksums, and provenance every day. But looking at the local AI landscape, there i…
There are excellent free Software Composition Analysis tools. Many teams can start with GitHub Dependabot, OWASP Dependency-Check, npm audit , pip-aud…
AI infrastructure is becoming a serious attack surface. The latest example is LiteLLM CVE-2026-42271 , a command injection vulnerability in BerriAI Li…
An AI skill is a Markdown file your coding agent reads and obeys. GitHub code search currently finds 74,192 SKILL.md files installed under .claude/ski…
As developers, we're building agentic systems faster than ever. But this rapid deployment brings up a huge, often overlooked challenge: AI identity . …
A DevOps engineer posted on r/devops this week with what reads like a familiar shadow-IT question dressed in 2026 clothes. Marketing, product, and sal…
We’ve all been there: you build a cool AI agent, give it some tools, and suddenly realize you’ve basically handed a toddler your credit card. As devel…