Category: Secure

August 23, 2026 · Weekly Edition DevSecOps Weekly Rust learned this week that cargo build is an execution primitive. A crate with 245 million downloads and 403 dependents was poisoned through a build script, and no –ignore-scripts flag exists to save you. Meanwhile GitLab shipped a CVSS 9.4 GraphQL flaw…

August 16, 2026 · Weekly Edition DevSecOps Weekly One unrevoked token, three tools deep, and 434,000 CI/CD pipelines in the blast radius. The LiteLLM / Team PCP disclosures dominate this week, and the tooling answer — registry egress control, SHA pinning, signed images — arrived alongside them. Around that: CRA…

August 9, 2026 · Weekly Edition DevSecOps Weekly A quiet week by article count but a pointed one by theme: two studies measured how often the humans supervising AI coding agents actually catch the dangerous requests, AWS and GitHub shipped structure — orchestration and stacked pull requests — to make…