A critical authentication bypass in the PraisonAI multi-agent orchestration framework, tracked as CVE-2026-44338 with a CVSS score of 7.3, was probed by an automated scanner 3 hours, 44 minutes, and 3…
A developer-penned guide outlines a verification workflow for evaluating self-hosted LLM tool specifications before integration, focusing on license files, hardware requirements, and true offline capa…
Black Duck, a provider of AI-powered application security solutions, has joined Anthropic's Project Glasswing, an industry-wide initiative to protect critical software infrastructure through defensive…
Chainguard co-founder and CTO Matt Moore said on a podcast that every software build needs identity controls for both human and machine credentials, arguing that reusable, long-lived credentials remai…
Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, enabling developers using Anthropic's Claude Desktop to scan code for security flaws without …
A developer's comparison of six enterprise Software Composition Analysis (SCA) tools in 2026 highlights Aikido Security as the strongest all-around pick for teams seeking SCA without a six-figure line…
A new book, 'From Lab to Life: How AI Works in China' by Collin Hogue-Spears, published by Gatekeeper Press on August 4, details China's AI regulatory system, emphasizing that compliance and filing, n…
Black Duck has added AI-powered triage and CRA-ready compliance checks to its Coverity static application security testing tool, marking the first time AI features have shipped in the two-decade-old p…
IBM and Red Hat commercially launched Lightwell on July 8, a platform that fixes vulnerable open source dependencies by delivering pre-patched, digitally signed artifacts for over 6,500 Java and Pytho…
AI coding agents should optimize for less owned code to avoid technical debt, argues a new analysis, as the cost of code generation drops but ownership costs rise. Black Duck's 2026 report found that …