Attackers stole an estimated $6.3 billion in cryptocurrency from a compromised DevOps engineer's laptop, highlighting how ...

CVE-2025-54313 tracks a supply chain attack on eslint-config-prettier, where four malicious versions of a popular npm library targeted Windows machines with a remote-code execution payload. Learn how ...

A practical ADLC maturity model for securing AI coding agents. Learn the five stages, the evidence that proves each one, and ...

Endor Labs is a launch partner for the Plugin marketplace in Google Antigravity. The Endor Labs plugin brings AURI Agents and the Endor Labs MCP server into Antigravity with a one-click setup. AI ...

A clear guide to AI-native SDLC terminology, including the difference between Agentic Development Lifecycle and Agent Development Lifecycle.

An AI bill of materials (AIBOM) is a structured, machine-readable inventory of the components in an AI system: models, datasets, software dependencies, AI services, agents, and tools. It also records ...

Most AppSec teams don’t lack ambition; they lack a map. Place your program on four levels of AI maturity across two tracks, and learn what to build, what to buy, and where teams stall. AI coding ...

A software factory definition in plain terms: how the workflow runs from request to release, and where AI agents, security, and people fit. A software factory is a repeatable system of people, ...

ADLC compliance means applying secure development practices, AI risk controls, and AI regulatory requirements to software built with AI coding agents. It covers two things: the code the agent produces ...

Three incidents hit at least nine languages and six Linux distributions in 48 hours. If you’re wondering whether you need to ...