OWASP
3 articles on OWASP.
-
Secure by Design
AI-Generated Code Security Risks From an AI-Assisted Rebuild
Over six weeks I rebuilt a 30-year-old poetry site with an AI coding partner and logged every security issue it produced: 59 of them, from a one-line config change that took the whole site down to a 90-minute triple credential leak. Two became actual incidents; a control caught all 59. Here is the pattern behind them, Self-Attested Safety, and the controls that caught every one.
-
AppSec
Stop Treating LLM Agents as Trusted Users: Lessons from GitLab CVE-2021-39935
CISA added CVE-2021-39935 to the KEV catalog in February 2026. LLM agents with broad API access inherit every vulnerability in your attack surface.
-
OWASP
Thoughts on Fortinet's CVE-2026-24858
CVE-2026-24858 in FortiOS: authentication bypass through alternative path. When network security appliances have auth bypass flaws, perimeter trust collapses.
