Open-source software, silently rules the world. It is in banking applications, in hospital systems, cloud-based infrastructure and in the tools developers are dealing with day-to-day. However, the greater the dependence we have on it, the more vulnerable we are likely…
The Vendor Blind Spot Most Organizations Still Have Firewall is available in most businesses. Majority of them have endpoint protection. However, inquire of them what security their top 20 vendors actually operate on and the room becomes silent. That is…
Why Software Trust Has a Real Problem Shipping software in the recent past used to involve coding, developing of the code and taking the code live. The discussion on security mostly ended at encrypting it over the air. Then SolarWinds…
If it has ever crossed your mind that you are just re-sending the same email to people and manually following them up for hours, then you should definitely consider learning about email automation. Email automation processes can be considered a…
Majority of the developers are familiar with their code. Fewer understand what their code relies on – and such gap is the place where modern precarities abide. One out of date library three levels deep in a dependency tree will…
The vast majority of engineering teams use GitHub more like a file cabinet, with its contents organized well up, instantiating code, setting up a pipeline, and leaving the settings page mostly untouched. Such a solution proved rational when GitHub was…
Have you forgotten being able to simply ship code and not document all the components within it? Those days are gone. I began to take an interest in Software Bill of Materials (SBOM) after completing a project that was flagged…
In December 2020, at the time of the SolarWinds breach, I recollect that I thought it was another advanced hack. However, getting into the technical report and observing the way how offenders changed the playbook in the following five years,…
I understand, of course, that when you hear the term software supply chain security you think it is another buzzword of the salespeople. However, since SolarWinds made it apparent that a single breach of a build system can take down…
AI agents no longer simply answer questions, and instead, they are booking meetings, changing databases, and transferring money. That change that was made on the former of reaching the point of a helper to an independent worker alters all on…
Ey, independent AI agents are no longer fancy chatbots. They are making decisions, making APIs and coordinating workflows without having human oversight at all times. Bringing, but at the same time, that requires us to have stringent governance systems into…
Well, I have spent a fair amount of time as an agent system hacker, and I can tell that they are not as impregnable as the hype they develop can make them seem. Once you put two or more AI…