Felipe Ruiz

MCP is key for agentic AI but creates security risks. We analyze its architecture, several security issues, and best practices to protect your AI ecosystem.

The sophisticated GlassWorm malware affected VS Code extensions, using invisible Unicode to steal credentials and install a full RAT on developers' machines.

A cyber worm like no other! Learn how the Shai-Hulud attack poisoned npm and why it's a game-changer for supply chain security.

A phishing attack on a trusted npm maintainer compromised packages with over 2 billion weekly downloads. Here we explore the attack and its broad implications.

Explore the use of GenAI in penetration testing in this overview of the research by Hilario et al. (2024). Find out the good, the bad, and the potential future.

Discover what is usually seen as code quality, why we believe this concept should include security and some recommendations to develop high-quality code.

GitHub Action breach! Learn how tj-actions/changed-files leaked secrets & how to protect your repos. Read our breakdown.

Fluid Attacks in its ASPM solution offers its customers strict accuracy measures based on F-scores. Find out what it's all about.