Tag: Security and privacy
-
EFF to lawmakers: Ground AI cybersecurity rules in best practices
Posted on November 10, 2026, Level beginner Resource Length long
EFF argues that AI regulation should prioritize proven cybersecurity boundaries over speculative doomsday scenarios. By Jacob Hoffman-Andrews, Tori Noble, and Maddie Daly.
Tags architecture-and-apis security-and-privacy software-engineering
-
AI security certification cost: Fees, training and exam expenses
Posted on November 9, 2026, Level beginner Resource Length short
For engineers and security analysts, the sticker price of an AI security certification is only the beginning. Understanding the operational trade-offs between training formats, lab access, and renewal requirements is critical for budgeting and career planning. By sisa.ai.
Tags security-and-privacy ai-and-machine-learning leadership-and-career
-
The browser is now an AI runtime: Security risks in Chrome's on-device models
Posted on November 8, 2026, Level intermediate Resource Length long
Google's integration of Gemini Nano into Chrome creates an unmonitored AI runtime accessible to any website, introducing prompt injection and parasitic compute risks that bypass traditional cloud security controls. By Kirill Gelfand , Vladimir Kropotov , Fyodor Yarochkin , David Tulis.
Tags security-and-privacy ai-and-machine-learning architecture-and-apis devops-and-ci-cd
-
ThisBash Escape: Claude Dispatch flaw enables browser extensions RCE on the OS
Posted on November 6, 2026, Level beginner Resource Length medium
A flaw in Claude Dispatch revealed how authenticated web sessions can drive local OS agents, turning low-privilege browser access into high-privilege code execution. By Gal Weizman.
Tags security-and-privacy architecture-and-apis ai-and-machine-learning software-engineering
-
The future of browser-based security: Leveraging browser data for proactive defense
Posted on November 2, 2026, Level intermediate Resource Length medium
This blog post argues the browser should sit at the center of enterprise security. The framing is strong; the evidence is largely promotional and the causal claims run ahead of what the source supports. By Niamh Cunningham.
Tags security-and-privacy cloud-and-infrastructure software-engineering
-
The PHP vulnerability scramble exposed the web's hidden maintenance crisis
Posted on October 28, 2026, Level beginner Resource Length short
An OpenAI model uncovered two critical PHP flaws, triggering a global update race that revealed how fragile and under resourced the internet's foundational software has become. By Omar Gallaga.
Tags security-and-privacy backend-development devops-and-ci-cd
-
AI bubble risks: Circular financing, hidden debt, and market exposure
Posted on October 26, 2026, Level beginner Resource Length short
A new report from Open Markets Institute and Americans for Financial Reform warns that AI's trillion-dollar spending spree is propped up by circular financing, opaque debt, and accounting gimmicks, and that a crash could ripple into a broader financial crisis. By ourfinancialsecurity.org.
Tags ai-and-machine-learning business-and-emerging-tech software-engineering security-and-privacy miscellaneous
-
How the EU Cyber Resilience Act governs supply chain security
Posted on October 24, 2026, Level beginner Resource Length medium
The EU Cyber Resilience Act forces a fundamental shift in software architecture, demanding that security boundaries extend beyond the application to encompass the entire supply chain and non-human identities. By Ryan Daws.
Tags architecture-and-apis security-and-privacy software-engineering
-
What is a software bill of materials (SBOM)?
Posted on October 22, 2026, Level intermediate Resource Length long
As software supply chain security shifts from a best practice to a regulatory baseline, engineering leaders must decide how to integrate Software Bill of Materials (SBOM) into their automated delivery pipelines. By GitHub.
Tags security-and-privacy software-engineering devops-and-ci-cd leadership-and-career
-
AI is becoming a software buyer without a procurement process
Posted on October 18, 2026, Level beginner Resource Length medium
A pre-registered study of 1,920 trials found coding assistants checked provenance in only 0.5% of cases and never ran verification commands, revealing a gap between available supply-chain evidence and automated dependency selection. By Cybersecurity Insiders.
Tags software security-and-privacy ai-and-machine-learning
-
AI agents aren't 'going rogue': Labs skip security basics
Posted on October 14, 2026, Level beginner Resource Length medium
Frontier AI labs attribute model escapes to misalignment, but cybersecurity experts attribute them to long-neglected containment failures. Labs reject external security advice, prioritizing AI safety over proven practices. CISOs must demand vendor accountability and enforce baseline security controls. By Cynthia Brumfield.
Tags security-and-privacy software-engineering data-and-analytics cloud-and-infrastructure devops-and-ci-cd
-
Open Source Summit Europe 2026 puts a price tag on forking and a deadline on agents
Posted on October 8, 2026, Level beginner Resource Length long
A three-day conference turned into a ledger of costs, compliance, and constraints that large engineering teams can no longer ignore. By Tom Smith.
Tags software-engineering devops-and-ci-cd linux security-and-privacy business-and-emerging-tech