AI coding assistants are dramatically accelerating software development, generating more code and more change than security teams were built to handle. In this interview, Idan Plotnik discusses how AI-driven development is reshaping the application risk landscape and why traditional vulnerability management models can’t keep up. Segment Resources:...

Keynotes from Splunk and the SANS Institute reinforce the double-edged nature of AI.

So much of appsec’s efforts can be consumed by vuln management and a race to patch security flaws. But that’s more a symptom of the ease of scanning and the volume of CVEs. Erik Nost walks through the principles behind proactive security, why the concept sounds familiar to secure by design, and why organizations still struggle with creating effecti...

Apple shifts to more continuous security patches versus waiting for the next big OS release.

A total of 28.65 million hardcoded secrets were found in public GitHub commits in 2025.

What happens when secure coding guidance goes stale? What happens LLMs write code from scratch? Mark Curphy walks us through his experience updating documentation for writing secure code in Go and recreating one of his own startups. One of the themes of this conversation is how important documentation is, whether it's intended for humans or for pr...

HoxHunt reports AI-generated phishing increased from 4% to 56% of phishing attempts in December.

The ShinyHunters cybercrime group has systematically targeted Salesforce instances since mid-2025.