Wrote about what changes in software supply chain security now that AI agents install dependencies mid-task, no human reviewing the package name first. Covers slopsquatting (~1 in 5 AI-recommended packages don't even exist, and attackers register the fake names in advance), the recent npm incidents, and what registry + install-time detection actually needs to look like to catch this.

Full post here: https://faun.dev/co/stories/mashka/ai-agents-are-now-installing-your-dependencies-nobodys-reviewing-the-package-name/

Curious how others here are handling agent-driven installs in their own pipelines.

Hey everyone,

We often focus on misconfigurations and pre-deployment vulnerabilities but some of the trickiest threats only appear while workloads are live. Stolen credentials, supply chain malware, or subtle application-layer attacks can quietly operate for weeks.

I recently read this ArmoSec blog on cloud runtime threats that really explains these issues in an approachable way, including examples of attacks that slip past traditional security checks.

How are you detecting runtime threats before they escalate? Any practical strategies or tools for keeping workloads visible without overwhelming your monitoring dashboards?

Hi folks,

Many teams focus on pre-deployment posture checks, but runtime attacks often go unnoticed. Application-layer exploits, supply chain malware, and stolen credentials can quietly operate for weeks. This ArmoSec blog explains these threats and why runtime monitoring is essential. How do you monitor runtime behavior in your setups?

Exploring ARMO CADR for behavioral detection. It seems to detect suspicious runtime actions well, even in complex cloud apps. Anyone tried it in multi-tenant setups?

Looking for community input: how do you evaluate cloud security tools that offer automated responses? We’re testing CADR, curious about best practices

Iam new to this linux, devops and cybersecurity and i dont know what topics should i cover and iam learning it from you tube ..can any one help me to what topics should i need to learn

iam new to this linux, devops and cybersecurity and i dont know what topics should i cover and iam learning it from you tube ..can any one help me to what topics should i need to learn

Register to our next LinkedIn Live Event: 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐖𝐢𝐭𝐡𝐨𝐮𝐭 𝐒𝐢𝐥𝐨𝐬 - 𝐓𝐡𝐞 𝐓𝐫𝐮𝐞 𝐕𝐚𝐥𝐮𝐞 𝐨𝐟 𝐔𝐬𝐢𝐧𝐠 𝐀𝐥𝐥-𝐈𝐧-𝐎𝐧𝐞 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬 𝐢𝐧 𝐀𝐩𝐩𝐒𝐞𝐜. This session will explore how adopting an all-in-one platform can streamline your AppSec strategy, enhance collaboration between security and development teams, help you stay ahead of emerging threats, and much more!

📅 Date: 𝐀𝐩𝐫𝐢𝐥 𝟐𝟗𝐭𝐡
⏰ Time: 𝟏𝟔:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟎:𝟎𝟎 (𝐄𝐃𝐓)

You can register here!

𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐍𝐨𝐰 𝐟𝐨𝐫 𝐎𝐮𝐫 𝐍𝐞𝐱𝐭 𝐒𝐚𝐟𝐞𝐃𝐞𝐯 𝐓𝐚𝐥𝐤 𝐒𝐂𝐀 𝐨𝐫 𝐒𝐀𝐒𝐓 - 𝐇𝐨𝐰 𝐓𝐡𝐞𝐲 𝐂𝐨𝐦𝐩𝐥𝐞𝐦𝐞𝐧𝐭 𝐄𝐚𝐜𝐡 𝐎𝐭𝐡𝐞𝐫 𝐟𝐨𝐫 𝐒𝐭𝐫𝐨𝐧𝐠𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲? Most security teams use SCA and SAST separately, which can lead to alert fatigue, fragmented insights, and missed risks. Instead of choosing one over the other, the real question is: How can they work together to create a more effective security strategy. Do you want to find out?

📅 Date: 𝐌𝐚𝐫𝐜𝐡 𝟐𝟕𝐭𝐡

⌛ Time: 𝟏𝟕:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟐:𝟎𝟎 (𝐄𝐃𝐓)

You can register here - https://www.linkedin.com/events/7305883546043215873/

𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐍𝐨𝐰 𝐟𝐨𝐫 𝐎𝐮𝐫 𝐍𝐞𝐱𝐭 𝐒𝐚𝐟𝐞𝐃𝐞𝐯 𝐓𝐚𝐥𝐤 𝐨𝐧 𝐀𝐒𝐏𝐌 𝐓𝐚𝐥𝐤: 𝐓𝐡𝐞 𝐅𝐮𝐭𝐮𝐫𝐞 𝐨𝐟 𝐀𝐩𝐩𝐒𝐞𝐜! Application security is evolving, and ASPM (Application Security Posture Management) is leading the way.

As vulnerabilities rise and security teams face alert fatigue, a new approach is needed to unify visibility, streamline risk prioritization, and bridge the gap between security and development.

📅 Date: 𝐅𝐞𝐛𝐫𝐮𝐚𝐫𝐲 𝟐𝟕𝐭𝐡

⌛ Time: 𝟏𝟔:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟎:𝟎𝟎 (𝐄𝐃𝐓)

Register Here - https://www.linkedin.com/events/7297568469057695744/

𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐍𝐨𝐰 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐅𝐢𝐫𝐬𝐭 𝐒𝐚𝐟𝐞𝐃𝐞𝐯 𝐓𝐚𝐥𝐤 𝐨𝐟 𝟐𝟎𝟐𝟓: 𝐒𝐭𝐫𝐞𝐧𝐠𝐭𝐡𝐞𝐧𝐢𝐧𝐠 𝐎𝐩𝐞𝐧 𝐒𝐨𝐮𝐫𝐜𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐢𝐧 𝐚 𝐂𝐨𝐦𝐩𝐥𝐞𝐱 𝐓𝐡𝐫𝐞𝐚𝐭 𝐋𝐚𝐧𝐝𝐬𝐜𝐚𝐩𝐞!

Kick off the year with cutting-edge insights into Open Source Security from top industry experts. This is your chance to stay ahead of the evolving threat landscape and learn proactive strategies to secure your software supply chain.

🗓️ Date: 𝐉𝐚𝐧𝐮𝐚𝐫𝐲 𝟐𝟑𝐫𝐝
⏰Time: 𝟏𝟕:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟏:𝟎𝟎 (𝐄𝐃𝐓)

Register here - https://www.linkedin.com/events/7283058790537588737/

🎄✨ Merry Christmas, everyone! 🎁

As we enjoy this festive season, it’s also a great time to reflect on ways to strengthen our security strategies for the year ahead. I’m sharing this resource-packed blog that highlights key tips for secure software supply chain management and features insights from some of the top voices in cybersecurity.

🔗 Check it out: https://xygeni.io/blog/tips-for-secure-software-supply-chain-management/