#security development lifecycle
277 related articles
·3 min
Numbat Open Source: A Cross-Framework AI Agent Security Detection and Response Solution Explained
Numbat is an open-source AI Agent security detection and response tool supporting cross-framework deployment with Agent behavior visibility and pre-execution interception capabilities.
Read more →
·2 min
agent-manager: An Open-Source Tool for Managing Multiple AI Coding Assistants with tmux
agent-manager is a lightweight tmux-based TUI tool that helps developers manage multiple AI coding assistants like Claude Code, Codex, and OpenCode from a unified interface for status monitoring, interaction, and code review.
Read more →
·3 min
Deep Analysis of OpenAI's Rogue AI Agent Intrusion Incident
Deep analysis of OpenAI's rogue AI agent intrusion into Hugging Face and other platforms, exploring causes of AI Agent loss of control, attack surface expansion, and security lessons on least privilege, credential management, and human-in-the-loop oversight.
Read more →
·3 min
Deep Analysis and Hardening Practices for 16 Critical Vulnerabilities in an AI Security Platform
An AI security platform was found to have 16 critical vulnerabilities spanning prompt injection, privilege escalation, and auth bypass. A deep dive into hardening methodologies.
Read more →
·3 min
LLMOps Tool Selection Guide: An In-Depth Comparison of Tracing, Evaluation, and Governance Capabilities
In-depth analysis of LLMOps tool selection, comparing Langfuse, LangSmith, Helicone, and Orq.ai across tracing, evaluation, and governance capabilities with practical recommendations.
Read more →
·2 min
Tutorial: Installing Tailscale on a Jailbroken Kindle to Create a Private Network Node
Learn how to deploy Tailscale on a jailbroken Kindle, turning an idle e-reader into a private network node. Covers cross-compilation, power optimization, and risk considerations.
Read more →
·2 min
Tutorial: Installing Tailscale on a Jailbroken Kindle to Create a Private Network Node
Learn how to deploy Tailscale on a jailbroken Kindle to turn an idle e-reader into a private network node. Covers cross-compilation, power optimization, and risk considerations.
Read more →
·4 min
A Guide to Full-Stack Machine Learning Project Repository Structure: From Chaos to Convention
A detailed guide to organizing full-stack ML project repositories, covering directory structure design, data-code separation, and externalized configuration to help ML developers move from experimental code to production-grade engineering standards.
Read more →
·4 min
Full-Stack Machine Learning Project Repository Structure Guide: From Chaos to Convention
A detailed guide to organizing full-stack ML project repositories, covering directory structure design, data-code separation, and configuration externalization to help ML developers move from experimental code to production-grade engineering.
Read more →
·3 min
Anthropic Breaks HAWK-256: A Security Wake-Up Call for Post-Quantum Signature Schemes
Anthropic publishes a practical key-recovery attack on HAWK-256, exposing vulnerabilities in post-quantum signature schemes and implications for PQC standardization.
Read more →
·3 min
Self-Hosted Team Collaboration Tools Compared: Zulip, Campfire, and Matrix in Real-World Testing
Real-world comparison of Teams alternatives for 8-15 person teams: Zulip's topic-based chat, Campfire's minimalist one-time purchase, and Matrix's decentralized deployment evaluated for features, cost, and ops.
Read more →
·3 min
Fast Remediation Replaces Zero Vulnerabilities: A New Trust Model for Software Security in the AI Era
In the AI era, zero vulnerabilities is unrealistic. Explore why fast remediation is becoming the new security trust model and how MTTR metrics are reshaping software supply chain security.
Read more →
·4 min
Microsoft Open-Sources AI Agent Governance Toolkit: Comprehensive Coverage of OWASP Top 10 Risks
Microsoft open-sources agent-governance-toolkit covering all OWASP Agentic Top 10 risks through policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for production AI Agent deployment.
Read more →
·6 min
Harness Engineering: From Context Engineering to the Third Phase of AI Programming
Explore Harness Engineering: the next evolution beyond context engineering for AI programming. Learn how to build enterprise-grade Skill systems and deliver real projects with mid-tier models.
Read more →
·4 min
LangChain Guardrails Explained: Building Safe and Controllable AI Agents
A detailed guide to LangChain Guardrails covering layered ecosystem architecture, middleware implementation, deterministic and model-driven protection for building production-grade secure AI Agents.
Read more →
·4 min
Spring AI 2.0 in Practice: Building an Enterprise RAG Knowledge Base Q&A System with Cursor
Build an enterprise RAG knowledge base Q&A system using Spring AI 2.0, Cursor AI programming, Ollama local deployment, and Redis vector storage. Runs on just 4GB VRAM.
Read more →
·2 min
Virgin Atlantic Uses ChatGPT: Weeks of Work Compressed to Hours
Virgin Atlantic deploys ChatGPT Enterprise, using Codex to build custom dashboards, integrate multi-source data, and compress weeks of analysis into hours, accelerating product development and CX decisions.
Read more →
·5 min
WebMCP in Practice: Building Browser AI Agent Tools & DevTools Debugging Guide
A detailed guide to Google's WebMCP standard proposal, covering imperative and declarative tool building, smart home and car configuration demos, and Chrome DevTools debugging for AI agent tools.
Read more →
·2 min
Rootless Containers: A Practical Guide to More Secure Service Deployment
A deep dive into Rootless Containers: technical principles, security advantages, and production practices. Learn how user namespaces and daemonless architecture reduce container escape risks.
Read more →
·3 min
The Next Evolution of Coding Agents: Letting the Brain Break Free from the Sandbox
Exploring the key evolution in coding agent architecture: separating the reasoning core from code execution environments to decouple control and execution planes.
Read more →