Plugin4Shell: Patch and Harden Your Coding Agent (2026)
September 21, 2026
Plugin4Shell breaks SHA pinning in four AI coding agents. Two are patched. Here's how to check your version, audit your marketplaces, and lock down the rest.
#supply-chain-security
DevOps: The Ultimate Guide (2026)
March 30, 2026
Master DevOps in 2026: CI/CD pipelines, GitOps, Platform Engineering, DevSecOps, supply chain security, and the DORA metrics that elite teams track.
Securing the Software Supply Chain: From Code to Cloud
December 14, 2025
Software supply chain security: SBOMs, signing (Sigstore, cosign), SLSA, SCA tools, dependency pinning, and the gates every CI/CD pipeline should enforce.