AI Is Changing AppSec Faster Than We Expected — And That’s a Good Thing

Tools & Methods /

February 2026 delivered two milestones that signal a real shift in application security: Anthropic shipped Claude Code Security after finding 500+ zero-day vulnerabilities in production open-source code, and the open-source Raptor framework demonstrated that an LLM can orchestrate Semgrep, CodeQL, and exploit generation in a single autonomous pipeline. Here’s what this means for AppSec teams and pentesters.

AI Is Changing AppSec Faster Than We Expected — And That’s a Good Thing Read More »

AI Agent Security: How Malicious Skills Can Compromise Your Development Environment

Tools & Methods /

AI coding assistants have transformed development workflows, but their skill systems introduce serious security risks. Researchers have demonstrated skill worms that propagate via SSH, exfiltrate credentials, and persist across sessions. This guide provides actionable security controls for individual developers and enterprise-grade defenses for security teams to protect against malicious AI agent skills.

AI Agent Security: How Malicious Skills Can Compromise Your Development Environment Read More »