Category: Security

Risky Business

Soap Box: Where does AI fit into cloud security?

15 May 2026

Open-source cloud security tools like Prowler evolve through community contributions and AI integration, balancing automated security checks with deterministic controls amid challenges like dynamic APIs, enterprise adoption tensions, and the resurgence of foundational security measures in hybrid cloud environments.

Risky Business

Risky Business #837 -- GitHub Actions footgun claims TanStack

13 May 2026

Recommended: Security. Security. Security.

Summary: Cybersecurity risks from misconfigured GitHub Actions, AI-driven threats like autonomous malware, DNSSEC failures, ransomware attacks on education sectors, and challenges in AI model governance and supply chain vulnerabilities are explored, alongside discussions on regulatory responses and infrastructure resilience.

Open Source Security

Open source is critical infrastructure with Kat Cosgrove

11 May 2026

Maintaining open source infrastructure is critical to prevent security risks from neglected projects, highlighting the need for sustainable funding, corporate collaboration beyond financial support, and systemic reforms to address coordination challenges, dependency fragility, and vulnerabilities.

The Secure Disclosure

AI Panic is Driving Shadow IT w/ Noora Ahmed-Moshe

6 May 2026

AI's impact on employment and cybersecurity risks, driven by shadow AI, phishing, and emerging threats like prompt injection, require balancing workforce skills, security measures, and organizational trust.

Open Source Security

How to actually test a disaster plan with David Bernstein

4 May 2026

A three-part disaster recovery framework emphasizing simplicity, clear roles, and collaboration, utilizing structured testing via HSEEP, real-world validation, and continuous improvement through exercises, while addressing pitfalls and balancing realism with psychological safety.

The Secure Disclosure

When AI Agents Change their Intent w/ Frank Vukovits

29 Apr 2026

AI agents, autonomous non-human entities operating in enterprise systems without human oversight, pose security and governance challenges requiring updated access control frameworks, real-time monitoring, and intent-based governance to address risks like unauthorized access and shadow AI, paralleling historical tech challenges like Y2K.

Open Source Security

Open Source Pledge with Vlad-Stefan Harbuz

27 Apr 2026

Challenges in open source sustainability include undervaluing maintainers, dependency tracking issues, fragmented tooling, burnout, governance flaws, and paradoxical tool sustainability, necessitating financial support, sustainable governance, and collective action for long-term project viability.

The Secure Disclosure

OWASP Top 10, Vibe Coding, and What Developers Miss w/ Tanya Janca

22 Apr 2026

Gaps in cybersecurity education, persistent vulnerabilities like SQL injection, OWASP data limitations, evolving supply chain risks, high training costs, AI's contextual challenges, and the need for secure-by-design principles and collaboration highlight systemic challenges in addressing evolving cyber threats.