DirectDefense CSO lists ten long-horizon software security practices
Walcutt says his research found 44% of AI-generated coding tasks introduced a known vulnerability.
1
Stories per day · 30 days
5 stories, newest first · one card per story
Stories tagged #secure-by-design
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers
NIST and CISA publish final interagency report with implementation guidance for protecting tokens and assertions from forgery and misuse.
AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?
Dark Reading argues AI-assisted bug discovery is flooding vendors with vulnerability reports, straining disclosure processes and secure-by-design commitments.
CISA review makes the case for eliminating vulnerability classes
CISA's FY2024-2025 vulnerability review urges eliminating recurring vulnerability classes, finding 41.5% of 2025 KEV entries map to persistent 'stubborn weaknesses'.
CISA: Most exploited vulnerabilities should have been eradicated decades ago
CISA says most exploited vulnerabilities are decades-old flaws, blaming organizational culture and weak Secure by Design adoption.
1