Tag: security

All the articles with the tag "security".

• AI SDLC Governance: Three Layers for Engineering Leaders

  4 Aug, 2026 • Updated 1 Sep, 2026

  A three-layer governance stack (comprehension, review gate, and observability) gives engineering leaders measurable control over AI-generated code volume.

• AI Supply Chain Attacks: New Vectors in Dependencies

  13 Jan, 2026 • Updated 11 Feb, 2026

  Slopsquatting: attackers register packages AI hallucinates. XZ Utils showed the stakes. A framework to assess your AI supply chain exposure.

• AI-Augmented CI/CD: Shift Left Security With Bounded Risk

  6 Dec, 2025 • Updated 24 Aug, 2026

  AI code review in CI/CD with contained prompt injection. Defensive patterns: review-context profiles, managed review gates, capability isolation.