Tag: software security
Are LLMs Equally Good (or Bad) at Building Secure Software?
Pieter Danhieux | | agentic AI, AI agents, AI code security, AI coding assistants, AI coding costs, AI coding models, AI Development, AI model benchmarking, AI-generated code, application security, Developer Security, framework security, LLM security, OWASP Top 10, SAST, secure code generation, secure coding, software development, software security, token costsAn SCW study finds a large variance in how frontier and budget LLMs perform across different frameworks, and explains the striking cost variance ...
AI is Coding Us Into a Corner
Charlie Gero | | AI coding tools, AI dependency, AI hallucinations, AI patching, AI-generated code, application security, code review, code vulnerabilities, developer productivity, developer trust, frontier models, future software maintenance, Human Oversight, junior developers, secure coding, software engineering skills, software security, technical debtAI-powered patching and coding is putting us on a track towards a deepening dependency on future frontier models. The modern tools we use today to fix yesterday’s coding problems are quietly creating ...
Agentic DevSecOps: AI Security Co-Pilots for Your CI/CD PipelineÂ
Joydip Kanjilal | | agentic AI, AI copilots, AI Governance, AI incident response, AI pipeline management, AI security, AI security agents, AI threat detection, AI vulnerability scanning, AI-driven security, AI-powered DevSecOps, application security, autonomous AI agents, autonomous security testing, CI/CD security, Cloud Security, continuous security monitoring, cybersecurity automation, devops security, devsecops, devsecops automation, infrastructure security, intelligent automation, real-time threat intelligence, SDLC security, Secure software delivery, security automation, security operations, security orchestration, security posture management, software development lifecycle, software security, threat remediationThe emergence of AI has brought endless possibilities and innovative opportunities in today’s ever-changing, fast-paced technology landscape. AI is helping development teams produce software significantly faster than ever before. AI-enabled DevSecOps tools ...
If it Isn’t Code, it’s Just AdviceÂ
David Mytton | | AI coding agents, API contracts, audit trails, automated verification, automation vs. advice, CI/CD, code-native, configuration as management, dashboard problem, infrastructure as code, MCP Server, production safety, reproducibility, software development life cycle, software security, spam prevention, UI-driven configuration, unit testing, vendor integrations, version controlIn the world of AI coding, success hinges on code-native solutions that integrate and verify changes directly in the codebase. Many AI tools fail by relying on external dashboards, lacking the reproducibility ...
Eclipse Foundation Extends Scope and Reach of Open VSX Registry
Mike Vizard | | AI coding tools, application development, AWS, developer tools, digital sovereignty, encryption, exposed credentials, extension name spoofing, funding model, malicious pattern detection, multi-region architecture, namespace impersonation, rate limiting, security infrastructure, software security, Software Supply Chain, trusted environments.The Eclipse Foundation launches a new framework for the Open VSX Registry, enhancing security features and transitioning to a hybrid architecture. With support from AI tool provider Cursor, this initiative aims to ...
Will AI Kill the OSS Star?
Alan Shimel | | AI and OSS relationship, AI impact on open source, AI slop, AI-generated pull requests, apprenticeship model, coding ecosystem, collective understanding, community health, community interaction, custom code generation, documentation decline, economic shift, engagement drop, fragmentation risk, generative AI, licensing issues, long-term sustainability, open source challenges, open source maintenance, OSS market, software development trends, software security, standardization, technology evolution., vibe codingAs AI-driven development accelerates, open source software faces an uncomfortable paradox: Usage is rising while engagement, sustainability and community economics quietly erode. AI isn’t eliminating OSS, but it is reshaping how code ...
Secure By Design, Secure by DefaultÂ
Julian Browne | | adaptive security, continuous improvement, continuous security, cyber resilience, devops, devops best practices, devsecops, dynamic systems, embedded security, enterprise compliance, incident response, modern software delivery, production monitoring, real-time security, secure by default, secure coding, secure-by-design, security governance, security in production, security strategy, security theatre, shift left security, software security, static analysis, threat modeling“Shift left” alone won’t secure software. Real security must be embedded continuously across design, development, and production—not just moved earlier ...
Qwiet AI Extends Microsoft Support in Platform for Fixing Vulnerabilities
Mike Vizard | | AI agents, AI coding tools, application security, AutoFix, Azure Boards, Azure DevOps, devsecops, github, SARIF, SAST, software security, Swift, vulnerability remediationQwiet AI extends its AI-driven application security platform with deeper Microsoft DevOps integrations, enhanced automation, and expanded AutoFix capabilities to proactively remediate code vulnerabilities ...
The Hidden Imperative in the UK’s Software Security Code: Provable Readiness
The challenge ahead is clear: Let’s not settle for minimum viable security. Let’s aim for resilient, trustworthy and demonstrably secure software that stands up to the threats of today and tomorrow. ...
Code Signing in the DevOps Era: Silver Bullet or Security Theater?Â
Aditya Gupta | | Anomaly Detection in DevOps, CI/CD, code signing, devsecops, key management, security automation, Software Bill of Materials (SBOM), software securityIn the race for speed and automation, code signing is treated as a silver bullet when it should be just one part of a deeper trust strategy. ...
Report Shines Spotlight on Open Source Software Security Challenges
An analysis of more than five million open-source software packages published by Lineaje, a provider of a platform for tracking open-source software components, finds 95% of security issues involve some type of ...
Survey Surfaces Steady Gains in DevSecOps Adoption
A survey of more than 500 DevOps practitioners finds less than half (47%) of respondents work for organizations that regularly employ best DevSecOps practices. Conducted by Techstrong Research, an arm of the ...
