AI coding assistants can speed up bounded tasks, but research shows security and review risks rise in complex codebases.

Discover how a new AI-assisted framework revolutionizes DevSecOps by analyzing context and intent to detect hidden malicious ...

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...

DockerScan v2.0 is a next-generation security scanner for Docker containers and images, completely rewritten in Go. It combines multiple security scanning techniques based on the latest 2024-2025 ...

Alibaba ordered employees to remove Anthropic's Claude Code after citing suspected backdoor risks, escalating U.S.-China AI tensions.

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...

In the escalating digital arms race, the boundary between defensive security and automated intelligence is rapidly dissolving ...

IBM and Red Hat launched Project Lightwell with $5 billion to patch open-source vulnerabilities faster than AI can discover ...

Part of the SD Times 100 2026 series. See the full SD Times 100 2026 list for every category and honoree. Application security has spent years maturing around a relatively stable assumption: a human ...

The software industry has spent years learning that open-source packages can carry hidden risk. The OpenClaw incident shows why artificial intelligence agents may raise the stakes.According to ...