Discover how Dependabot can be weaponized to exploit CI/CD workflows. Learn attack techniques, real-world risks, and practical steps to protect your code.

Is AppSec really dead? A practical look at AI-powered security, Claude Code Security, and why enterprise security needs more than agentic code generation.

Discover your developer laptop attack surface with Bagel

Discover how 2025 saw attackers weaponizing defensive research, turning CI/CD pipelines into battlegrounds using our own tools and methodologies.

Attack Vectors in the Go Module Ecosystem: Abusing Proxy Immutability and Decentralized Resolution

Discover how Bot-Delegated TOCTOU vulnerabilities in GitHub Apps can compromise CI/CD pipelines, with real-world examples and mitigation strategies.

Enhance your CI/CD security with Poutine MCP Server, enabling agent-driven audits of workflows and repos to prevent vulnerabilities in Build Pipelines

boostsecurity's safe packages MCP server

Looking at the supply chain attacks of August and September 2025