a Futurum companyTag
677 articles
Blogs
From Replit’s database deletion to the Nx supply chain attack, AI agent failures expose a dangerous truth: The biggest risk isn’t intelligence, but unchecked authority.
Showing 1–24 of 677
Blogs
All Day AI’s virtual hackathon showcases autonomous AI agents, AIDLC innovation and how hackathons can accelerate DevOps transformation.
AI
Security researchers uncovered a class of embedded-browser vulnerabilities affecting five popular AI coding tools, including Cursor, Copilot, Codex, VS Code and Claude Desktop. The…
AI
IBM is expanding its Terraform infrastructure-as-code platform and Bob AI coding assistant with new policy-as-code capabilities, automated vulnerability remediation and AI governan…
Blogs
Cursor has disclosed a security incident involving malicious versions of Anthropic’s Claude Code extension that attempted to install a persistent backdoor on developers’ computers.…
Blogs
Black Duck this week added an artificial intelligence (AI) agent to its portfolio that triages vulnerabilities and then generates and validates fixes for DevSecOps teams to review…
Blogs
Endor Labs this week added an artificial intelligence (AI) tool to its portfolio that evaluates every reachable open source vulnerability against a code context graph to generate f…
Blogs
Mistral has released the weights for its 1-trillion-parameter Mistral Large 4 model, delivering significant improvements in agentic coding and vulnerability discovery. With competi…
Blogs
Slow CVE patching leaves applications exposed. Discover how buildpacks, shared components and AI agents can accelerate vulnerability remediation.
Blogs
CI/CD cache poisoning can turn untrusted code into compromised releases. Learn how to secure caches, isolate workflows and protect software supply chains.
AI
Broken access control has topped the last two editions of OWASP Top 10, with OWASP finding some form of it in every application in its dataset. AI coding assistants are making this…
AI
Amazon Web Services (AWS) has made generally available a service through which it finds and validates code vulnerabilities and provides a patch that DevSecOps teams can then automa…
Best Practices
DevSecOps is part of the larger shift-left IT paradigm, which aims to identify and address vulnerabilities before they lead to security incidents. NIST’s guidance on secure softwar…
AI
The evolving Gheist campaign uses stolen GitHub tokens and malicious Actions workflows to extract repository secrets and cloud credentials. While GitHub protections have blocked ob…
Blogs
Terraform compliance doesn’t have to mean complicated policy pipelines. By combining TFLint with OPA and Rego, developers can enforce infrastructure guardrails directly in their ed…
AI
A survey of 307 enterprise technology leaders finds that as organizations rely more on artificial intelligence (AI) coding tools to build applications, they are simultaneously incr…
AI
GitHub’s AI Scan brings AI-powered vulnerability detection to pull requests involving languages, scripts and infrastructure files beyond CodeQL’s existing coverage. Paired with the…
AI
Enterprise AI platform provider Cohere announced it has signed a letter of intent to acquire Aisle, a cybersecurity startup whose AI agent platform discovers source-code vulnerabil…
AI
Open source security company Chainguard has released Workspaces, a service designed to provide a safe space for agents to do their thing without disrupting the security of existing…
Blogs
A growing wave of software supply chain attacks, including Shai-Hulud, Axios and LiteLLM, is exposing weaknesses in conventional security tooling. Malicious open-source packages ca…
Blogs
GitHub has added an expiration date to unused npm trusted publishing configurations. Any configuration that doesn’t complete a successful publish within 48 hours of creation now ex…
AI
Security researchers at Noma Security uncovered SneakPeek, a vulnerability in Anthropic’s Claude Code Desktop that allowed malicious JavaScript embedded in large HTML files to bypa…
Blogs
GitHub has introduced push attribution in limited public preview for Enterprise customers, adding authenticated pusher identities to commits alongside author and committer informat…
AI
In 2025 alone, security firm GitGuardian detected 28.65 million new hardcoded secrets exposed in public GitHub commits — a 34% increase year over year and the largest single-year j…
