The Vendor Blind Spot Most Organizations Still Have Firewall is available in most businesses. Majority of them have endpoint protection. However, inquire of them what security their top 20 vendors actually operate on and the room becomes silent. That is…
Why Software Trust Has a Real Problem Shipping software in the recent past used to involve coding, developing of the code and taking the code live. The discussion on security mostly ended at encrypting it over the air. Then SolarWinds…
If it has ever crossed your mind that you are just re-sending the same email to people and manually following them up for hours, then you should definitely consider learning about email automation. Email automation processes can be considered a…
Majority of the developers are familiar with their code. Fewer understand what their code relies on – and such gap is the place where modern precarities abide. One out of date library three levels deep in a dependency tree will…
The vast majority of engineering teams use GitHub more like a file cabinet, with its contents organized well up, instantiating code, setting up a pipeline, and leaving the settings page mostly untouched. Such a solution proved rational when GitHub was…
Have you forgotten being able to simply ship code and not document all the components within it? Those days are gone. I began to take an interest in Software Bill of Materials (SBOM) after completing a project that was flagged…
In December 2020, at the time of the SolarWinds breach, I recollect that I thought it was another advanced hack. However, getting into the technical report and observing the way how offenders changed the playbook in the following five years,…
I understand, of course, that when you hear the term software supply chain security you think it is another buzzword of the salespeople. However, since SolarWinds made it apparent that a single breach of a build system can take down…
AI agents no longer simply answer questions, and instead, they are booking meetings, changing databases, and transferring money. That change that was made on the former of reaching the point of a helper to an independent worker alters all on…
Ey, independent AI agents are no longer fancy chatbots. They are making decisions, making APIs and coordinating workflows without having human oversight at all times. Bringing, but at the same time, that requires us to have stringent governance systems into…
Well, I have spent a fair amount of time as an agent system hacker, and I can tell that they are not as impregnable as the hype they develop can make them seem. Once you put two or more AI…
And today AI agents are ubiquitous. They are responding to the customer support tickets, writing code, maintaining workflows, and making a decision that would otherwise have to be done by a human being. However, the point is here no one…