Tag
13 articles tagged DevSecOps.
Cisco's rollout of 90,000 personal AI agents reveals critical strategies for securing autonomous systems. This analysis covers the shift to agent-speed defense, the necessity of domain-specific languages for governance, and how multi-model orchestration accelerates enterprise development.
A strategic framework for securing autonomous AI agents in software factories. Learn how to implement sandboxing, least privilege, and supply chain controls to mitigate risks from probabilistic AI actors.
Enterprise adoption of agentic AI is accelerating but faces a critical security gap. This analysis explores the shift from co-pilot to autonomous agents, the rise of the 'autonomous attacker,' and the strategic necessity of automating security remediation to manage technical debt.
An executive analysis of the shift to the Agentic Development Lifecycle (ADLC). Leaders must address the 10x increase in vulnerabilities and 70% PR stagnation by implementing context-injected security hooks and centralized agent session logging to maintain operational control.
Ledger CTO Charles Guimé explains how AI has reduced the cost of vulnerability discovery to near zero, collapsing the economic asymmetry between attackers and defenders. The discussion outlines a strategic shift from code-centric development to architecture-first security, emphasizing threat modeling, zero-trust patterns, and the redefinition of the CTO role in an AI-native engineering environment.
Microsoft Gaming Deputy CISO Aaron Zulman discusses the strategic shift in securing autonomous AI agents. The analysis covers the redefinition of containerization, the evolution of the CISO role from blocker to enabler, and the operational impact of AI on vulnerability remediation.
Tanya Janka, project leader for the OWASP Top 10 2025, discusses the inclusion of vibe coding as a critical risk. The analysis covers the shift from vulnerability memorization to secure coding habits, the expansion of supply chain threats to include human developers, and actionable strategies for engineering leaders to integrate security into AI-assisted workflows.
A strategic analysis of the shift from code-centric to agent-centric security. Key insights on managing non-deterministic AI behavior, the security implications of agent skills, and the necessity of agentic security frameworks for enterprise adoption.
Agentic AI introduces novel security vectors, including prompt injection and context supply chain attacks. This analysis outlines the 'Lethal Trifecta' of agent vulnerabilities and provides a framework for implementing least-privilege controls, context manifests, and human-in-the-loop governance to mitigate risk in AI-native engineering teams.
Andrew Hashka, Field CTO at GitLab, reveals why most enterprise AI strategies fail by focusing solely on coding. Discover how to leverage agentic workflows, robust governance, and cultural shifts to unlock sustainable productivity and competitive advantage in the software lifecycle.
Dan Lorink of Chainguard analyzes the exponential divergence between AI-driven development speed and legacy security postures. This brief outlines strategies for securing autonomous agents, optimizing CI/CD pipelines for high-volume code generation, and adapting open source maintenance models to agentic workflows.
Snyk reveals that 13.4% of published AI agent skills contain critical security vulnerabilities. This analysis explores the emerging threat landscape of prompt injections, obfuscated code, and supply chain risks in LLM ecosystems, offering actionable strategies for developers and security teams to mitigate these risks.
Docker's EVP of Engineering details the strategic pivot to free, open-source hardened container images. This move addresses the $60 billion supply chain threat landscape while establishing a secure foundation for the emerging AI agent economy.
