Topic
All digests tagged DevSecOps
Suggested route
Move from earlier context through the available material to the newest signals. This route is a reading aid, not a difficulty ranking.
The panel discusses securing AI software factories, arguing that agents must be treated as unpredictable actors. Key controls include enforcing boundaries, never letting agents hold credentials, and securing the dynamic supply chain.
Read article
The workshop details the shift from traditional software security to AI-native defenses, covering topics like Prompt Injection, AI Bomb inventory, and integrating security hooks into CI/CD pipelines for agentic workflows.
Read article
AI attackers are faster than traditional pen tests. To keep up with the volume of insecure code generated by LLMs, security must shift to continuous, multi-agent offensive security running on every PR.
Read article
AI accelerates code generation, but security requires a 'shift-left' approach. Learn five key principles for securing AI-assisted development, focusing on outcome validation and dependency integrity.
Read article
Modern software supply chain attacks start in your build pipeline. We explore how provenance and attestation turn “trust me” into verifiable evidence, using SLSA and OCI registries.
Read article
Autonomous AI agents pose significant security risks due to their unpredictable nature. To mitigate threats like database wipes (Pocket OS), organizations must implement Zero Trust Architecture and scope agent actions using 'harnesses.'
Read article
This session unpacks the security risks of AI coding agents, detailing how 76 malicious skills were found. Learn about prompt injection, secure registries (Tessl), and Snyk’s approach to governing agent behavior at scale.
Read article
Sazabi is an AI-native observability platform betting that logs are all you need to replace traditional tools like Datadog. It uses Git for agent memory and sandboxes for safe, parallel investigation.
Read article