Install
Security & Privacy Engineering
AppSec, threat modeling, SBOMs, secrets, SAST/DAST, authN/Z, and privacy by design.
- 4 Subtopics
- 14 Tracked terms
- Last 30 days Feed window
Inside Security & Privacy Engineering
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
- Languages & Runtimes
- Editors, IDEs & Developer Experience
- Frontend Web
- Backend & APIs
- Data, Databases & Streaming
- DevOps, CI/CD & Platform Engineering
- Testing & Quality
- Architecture & Patterns
- AI/ML Engineering & LLMOps
- Collaboration & Project Management
- Open Source & Licensing
- Careers, Learning & Events
Latest in Security & Privacy Engineering
Your Agent Just Attacked a Package Manager: The Supply-Chain Guardrail Checklist for Cross-Border Sellers
3+ hour, 46+ min ago (245+ words) Last week, an AI agent carried out an undisclosed attack on RubyGems, the package registry that nearly every Ruby project on the planet depends on. 247 points, 140 comments, and a quiet panic in the comments: the agent didn't break a rule…...
Day 8 — LLM03: Supply Chain | Guardrail Gazette
2+ hour, 36+ min ago (155+ words) You didn’t build the model, the dataset, or the plugin — but you inherited every risk that comes with them.Continue reading on Medium » Day 8 — LLM03: Supply Chain | Guardrail Gazette You didn’t build the model, the dataset, or the plugin — but you…...
Expo + Supabase GitHub Auth Broke 3 Times — Here's the Fix
9+ hour, 9+ min ago (891+ words) TL;DR: GitHub login in my Expo app broke three separate times. A deep link that went nowhere. A PKCE flow I wired backwards. A redirect URL with a typo. Each fix is copy-pasteable below. Total auth code is under…...
Why AI Coding Agents Break Git (And How edio Fixes It in Under 5 Milliseconds)
12+ hour, 8+ min ago (23+ words) Here is a scenario every developer using Claude Code, Cursor, or Aider knows too well: You prompt... Tagged with tooling, ai, go, git....
Do Coding Agents Really Need Unrestricted Shell Access?
16+ hour, 22+ min ago (1590+ words) Exploring a bounded repository capability layer with MCP, AST/LSP code intelligence, guarded writes, and Git context. Coding agents need access to a repository. They need to read files, search for implementations, follow definitions, change source, and inspect the resulting…...
The 7 Best AI Self-Improving Software Development Platforms in 2026
2+ day, 11+ hour ago (560+ words) Please enter your credentials to continue. Stripped of the marketing, a platform that genuinely improves has three mechanisms working together, and their absence is why most coding tools plateau the day they are installed: A tool that offers only fast…...
Tata Elxsi Invests in KAVIA AI to Scale AI-Driven Software Engineering for Products and Enterprises
2+ day, 20+ hour ago (311+ words) 10 Sep, 2026, 07:50 GMT BENGALURU, India, Sept. 10, 2026 /PRNewswire/ -- Tata Elxsi, a global leader in design and technology services, today announced a strategic investment in KAVIA AI, a Silicon Valley-based enterprise AI platform company. The investment strengthens the collaboration between the two companies…...
The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE
2+ day, 18+ hour ago (1610+ words) Our research shows how an attacker with root can spoof the Linux control group (cgroup) information the SPIRE agent uses during workload attestation. This tricks the agent into issuing a co-located workload's SVID to an attacker-controlled process. As part of…...
From Wafer-Out to First Token: Codifying Supply Chain Expertise with Nemotron and Palantir Foundry
2+ day, 23+ hour ago (1065+ words) With highly dynamic availability, NVIDIA must decide what and how much material to allocate to each manufacturing site. This is known as the critical material allocation problem, and it is manually reworked every week. The allocation runs through the current…...
Same curl, two verdicts: taint tracking for coding agents
3+ day, 9+ hour ago (433+ words) Here's the case that convinced me a static allowlist isn't enough for coding agents. An agent reads a.env file. Ten minutes later, in the same session, it runs a curl to a host it hasn't talked to before, and part…...