software-development
53 articles with this tag
INFO
LOW
HIGH
INFO
INFO
HIGH
CRITICAL
INFO
LOW
INFO
INFO
INFO
INFO
HIGH
INFO
INFO
INFO
HIGH
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
HIGH
INFO
INFO
INFO
INFO
INFO
INFO
INFO
MEDIUM
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
INFO
NanoClaw now armed with JFrog for safer packages
AI Coding Adoption Hits 97% but Governance Lags Behind
Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure
The New Security Risks of the Agentic Development Lifecycle
How to Secure AI Agents: A Practical Overview for Development Teams
Malicious npm packages abuse dependency confusion to profile developer environments
The AI Era Is Creating a Bug Hunting Arms Race
Google folds CodeMender into agent ecosystem amid push for AI-led AppSec
Three-Quarters of Firms Knowingly Ship Vulnerable Code
CVE Lite CLI: Open-source dependency vulnerability scanner
LaunchDarkly adds real-time controls for AI agents in production
Microsoft details new AI system for vulnerability discovery
KDE gets over €1 million investment to strengthen security and core infrastructure
[NEU] [hoch] Microsoft Developer Tools: Mehrere Schwachstellen
OpenAI’s Daybreak uses Codex Security to identify risky attack paths
OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation
Redox gets partial window pixel updating, tmux, and more
[NEU] [hoch] Jenkins Plugins: Mehrere Schwachstellen
Extending Ruzzy with LibAFL
Aptori expands its platform with autonomous offensive testing to reduce security bottlenecks
Trailmark turns code into graphs
Microsoft taps Anthropic’s Mythos to strengthen secure software development
LLM Security Automation Isn’t a Drop-In Scanner Yet
GitLab 18.11 brings agentic AI to security fixes, CI pipelines, and delivery analytics
Project Glasswing and open source software: The good, the bad, and the ugly
The case for fixing CWE weakness patterns instead of patching one bug at a time
KDE is bringing back its classic Oxygen and Air themes
Big-endian testing with QEMU
Cybersecurity in the age of instant software
How we made Trail of Bits AI-native (so far)
GitLab Multiple Vulnerabilities
LLVM Adventures: Fuzzing Apache Modules
Sandboxing AI coding agents with kernel-level enforcement: built-in profiles for Claude Code, Codex, and OpenCode
Hyoketsu - Solving the Vendor Dependency Problem in Reverse Engineering
The Invisible Rewrite: Modernizing the Kubernetes Image Promoter
Building AI Teams: How Docker Sandboxes and Docker Agent Transform Development
Software Development Practices Help Enterprises Tackle Real-Life Risks
Secure by Design: Building security in at the beginning
Flaws in Claude Code Put Developers' Machines at Risk
Why the shift left dream has become a nightmare for security and developers
Security Compass brings policy-driven security and compliance to agentic AI development
The new paradigm for raising up secure software engineers
Product engineering teams must own supply chain risk
How to Eliminate the Technical Debt of Insecure AI-Assisted Software Development
CodeHunter expands behavioral intent analysis to secure the software supply chain
Backslash Security raises $19 million to address AI coding security risks
Vouch: earn the right to submit a pull request
Vibe Coding Is Killing Open Source Software, Researchers Argue
How Secure by Design helps developers build secure software
Die besten DAST- & SAST-Tools
Introducing the AI Security Fabric: Empowering Software Builders in the Era of AI
Celebrating our 2025 open-source contributions
Seven habits that help security teams reduce risk without slowing delivery