When a Software Meant to Secure Meets Insecure Deployment

Why scanner output is not authoritative: The case for managing assumptions in vulnerability management

This article argues that vulnerability management programs are fundamentally flawed because they treat scanner output as authoritative truth

Why Organizations Must Shift from Detection to Trust Infrastructure

Software Supply Chain Attacks: Exploiting Trust Assumptions in Modern Development

The article examines the growing threat of software supply chain attacks that exploit fundamental trust assumptions in modern development wo

AI Security Beyond Cybersecurity: Zico Kolter and Matt Fredrikson on Red-Teaming, Jailbreaks, and Safety Research

Zico Kolter (OpenAI board member, Safety & Security Committee) and Matt Fredrikson (CMU professor, CEO of Gray Swan) discuss AI security wit

The Third-Party Exposure Trap: How Supply Chain Vulnerabilities Undermine Enterprise Security

This article analyzes the growing cybersecurity threat of third-party and supply chain vulnerabilities, using a ransomware attack on a major

What YellowKey and GreenPlasma zero-day exploits reveal about native Windows security