Sep
30,
2026
The Errors You Can’t See
As developers, we tend to be very familiar with dealing with server-side errors. It's (hopefully) a clean, consistent environment where you have everything under control: errors are caught, logged and reported; alerts and notifications can be triggered; monitoring systems report trends and anomalies. But the client side just isn't like...
Sep
29,
2026
Old Foundations for New Problems: Enterprise Security Infrastructure for Agentic AI
You may have heard of EchoLeak: a malicious email sat unread in an inbox. Days later, Microsoft Copilot was asked to summarize recent messages, retrieved that email, interpreted some hidden content in it as direct instructions, and created a path for sensitive information to be leaked. No one had to...
Aug
19,
2026
There Is No “Left” Left
Shift left was a good idea for a world that no longer exists. It assumed a human wrote the code, a human reviewed it, and security could nudge itself a little earlier into that human rhythm. That rhythm is gone. When an agent can turn one sentence into a running feature...
Aug
18,
2026
When Every Step Looks Legitimate: Threat Modeling Agentic AI Across Five Threat Zones
A malicious email sits unopened in an employee’s inbox. Nobody clicks a link. Nobody opens an attachment. Days later, an AI assistant is asked to summarize recent emails—and that is enough to start the attack.
In the Microsoft Copilot security example discussed in this presentation, retrieved email content contained hidden instructions...
Aug
4,
2026
Containers and Security – Is Your Software Pipeline Leaky?
As containers become a standard component of modern software delivery, security teams and developers face a growing challenge: ensuring that convenience and speed do not introduce hidden risk into the CI/CD pipeline. This article examines how malicious container images can enter development workflows through public registries, the warning signs that...
Jul
28,
2026
How AI Eliminated the Illusion of Secure Software Delivery
Picture a factory assembly line suddenly running ten times faster while the quality control team still inspects every product by hand. At that speed, it's impossible to examine every item, and defects slip through before anyone has a chance to stop them. AI is doing the same to software delivery,...
Jun
29,
2026
5 Types of Impersonation Attacks and Ways to Prevent Them
Technology is a double-edged sword. When used correctly, it can result in cutting-edge solutions and digitization. Its misuse, on the other hand, can wreak havoc. As people and organizations become increasingly dependent on technology, it is crucial to be aware of cybercrime trends and potential risks. Only then can we...
May
22,
2026
Re-think Security: Agentic AI, Prompt Injection, Observability, and Trust Boundaries Change Security Architecture and AIOps
Social engineering used to target people. AI changes that. Once LLMs start reading logs, interpreting telemetry, triggering workflows, and communicating with other systems, enterprise platforms themselves become vulnerable to manipulation through nothing more than language and context.
May
19,
2026
Threat Modeling for Infrastructure as Code
Infrastructure as Code (IaC) frameworks are powerful tools, but they come with their own security risks. Misconfigurations, insecure defaults, or insufficient access controls can be exploited by attackers. Threat modeling helps identify weaknesses early and creates transparency around potential attack vectors before critical flaws ever reach production. This article introduces...
May
6,
2026
Balancing Security and Agility with a Chief Trust Officer
As digital transformation takes shape, we’re all hearing about the accelerating pace of change. But through it all, one thing that hasn’t changed is the need for trust in our transactions and relationships. Trust is fundamental to every interaction, and it has become increasingly critical in a complex, dynamic world....
