Follow the evidence.
Published file metadata, source observations, indicators, and research history in one bounded catalog.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_42476e7a65ddc69a9aCollection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
GitHub Locks Down npm: What the New Install Defaults Mean for Your Supply Chain
First reported Jun 17, 2026 16:54 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordYour AI Agent Has New Skills. Can You Trust Them?
First reported Aug 20, 2026 22:30 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordClaude Mythos 5 Can Find the Vulnerabilities. But Which Ones Actually Matter?
First reported Aug 24, 2026 20:27 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordStop Drowning in the 30%
A product security engineer described their AppSec pipeline as roughly 70% automated and 30% still manual. That manual slice is where teams get stuck, and where context-aware prioritization belongs.
First reported Oct 01, 2026 12:00 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordThe Government Just Made Our Case: Stop Fixing Everything, Fix What Matters.
CISA made risk-based prioritization federal policy. That’s the problem we’ve been working on for years.
First reported Jun 15, 2026 18:06 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordFable 5 Is Here. The AppSec Problem Hasn’t Changed.
First reported Jun 10, 2026 14:08 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordAgentic Remediation Just Got Bigger: Now Fixing Vulnerabilities in Your Dependencies, Not Just Your Code
First reported Sep 30, 2026 12:30 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordAgentic AppSec: closing the remediation gap and automating application security
Application security has spent a decade getting brilliant at half of its job. This is about automating the other half – starting with the fix, and not stopping there.
First reported Jun 16, 2026 13:00 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordSecure Fast, Not Slow: What We Learned Building VibeGuard 2.0
Why the answer to secure agentic development isn't tighter restrictions - it's better developer tooling.
First reported Aug 05, 2026 23:50 UTCCatalog metadata updated Oct 08, 2026 03:47 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.