{"id":6159,"date":"2026-10-25T09:44:21","date_gmt":"2026-10-25T14:44:21","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6159"},"modified":"2026-10-25T09:44:21","modified_gmt":"2026-10-25T14:44:21","slug":"devsecops-weekly-october-25-2026-interactive-topic-map","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=6159","title":{"rendered":"DevSecOps Weekly &#8212; October 25, 2026 \u2014 Interactive Topic Map"},"content":{"rendered":"<p><iframe srcdoc=\"&lt;!DOCTYPE html&gt;\n&lt;html lang=&quot;en&quot;&gt;\n&lt;head&gt;\n&lt;meta charset=&quot;utf-8&quot;&gt;\n&lt;title&gt;DevSecOps Weekly \u2014 October 25, 2026 Topic Map&lt;\/title&gt;\n&lt;script src=&quot;https:\/\/cdnjs.cloudflare.com\/ajax\/libs\/d3\/7.9.0\/d3.min.js&quot;&gt;&lt;\/script&gt;\n&lt;style&gt;\n  html, body { margin:0; padding:0; height:100%; background:#ffffff; font-family:-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif; }\n  #header { padding:18px 24px 10px; border-bottom:1px solid #e5e7eb; }\n  #header h1 { margin:0; font-size:20px; color:#0f172a; }\n  #header p { margin:6px 0 0; font-size:13px; color:#6b7280; }\n  #canvas-wrap { position:relative; width:100%; height:calc(100vh - 78px); }\n  svg { width:100%; height:100%; display:block; cursor:grab; }\n  svg:active { cursor:grabbing; }\n  .legend { position:absolute; top:14px; left:14px; background:rgba(255,255,255,0.95); border:1px solid #e5e7eb; border-radius:8px; padding:10px 14px; font-size:12px; color:#374151; box-shadow:0 1px 3px rgba(0,0,0,0.08); }\n  .legend-title { font-weight:600; font-size:11px; letter-spacing:.04em; text-transform:uppercase; color:#6b7280; margin-bottom:6px; }\n  .legend-row { display:flex; align-items:center; gap:7px; margin:3px 0; }\n  .legend-dot { width:11px; height:11px; border-radius:50%; flex:0 0 auto; }\n  .controls { position:absolute; top:14px; right:14px; display:flex; flex-direction:column; gap:6px; }\n  .controls button { width:32px; height:32px; border-radius:6px; border:1px solid #d1d5db; background:#ffffff; font-size:16px; cursor:pointer; color:#374151; }\n  .controls button:hover { background:#f3f4f6; }\n  .hint { position:absolute; bottom:12px; right:16px; font-size:11px; color:#9ca3af; }\n  .node-label { font-size:11px; fill:#1f2937; pointer-events:none; paint-order:stroke; stroke:#ffffff; stroke-width:3px; stroke-linejoin:round; }\n  .node-label.bold { font-weight:700; font-size:12px; }\n  .link { stroke:#94a3b8; stroke-opacity:0.55; }\n  .tooltip { position:absolute; pointer-events:auto; background:#0f172a; color:#f9fafb; font-size:12px; padding:8px 12px; border-radius:8px; opacity:0; transition:opacity .12s; max-width:280px; max-height:260px; overflow-y:auto; z-index:20; box-shadow:0 6px 18px rgba(0,0,0,0.28); }\n  .tooltip-head { font-size:12px; }\n  .tooltip-articles { margin-top:7px; padding-top:7px; border-top:1px solid rgba(255,255,255,0.18); }\n  .tooltip-articles-title { font-size:10px; text-transform:uppercase; letter-spacing:.05em; color:#94a3b8; margin-bottom:4px; }\n  .tooltip-articles a { display:block; color:#93c5fd; text-decoration:none; margin:4px 0; line-height:1.35; }\n  .tooltip-articles a:hover { text-decoration:underline; color:#bfdbfe; }\n&lt;\/style&gt;\n&lt;\/head&gt;\n&lt;body&gt;\n&lt;div id=&quot;header&quot;&gt;\n  &lt;h1&gt;DevSecOps Weekly \u2014 October 25, 2026 Topic Map&lt;\/h1&gt;\n  &lt;p&gt;Node size = mentions &amp;middot; edge thickness = co-mention frequency &amp;middot; scroll or pinch to zoom, drag the canvas to pan, drag a node to reposition it, hover a node for related articles.&lt;\/p&gt;\n&lt;\/div&gt;\n&lt;div id=&quot;canvas-wrap&quot;&gt;\n  &lt;svg id=&quot;canvas&quot;&gt;&lt;\/svg&gt;\n  &lt;div class=&quot;legend&quot; id=&quot;legend&quot;&gt;&lt;\/div&gt;\n  &lt;div class=&quot;controls&quot;&gt;\n    &lt;button id=&quot;zoom-in&quot; title=&quot;Zoom in&quot;&gt;+&lt;\/button&gt;\n    &lt;button id=&quot;zoom-out&quot; title=&quot;Zoom out&quot;&gt;&amp;minus;&lt;\/button&gt;\n    &lt;button id=&quot;zoom-reset&quot; title=&quot;Reset view&quot;&gt;&amp;#8634;&lt;\/button&gt;\n  &lt;\/div&gt;\n  &lt;div class=&quot;tooltip&quot; id=&quot;tooltip&quot;&gt;&lt;\/div&gt;\n  &lt;div class=&quot;hint&quot;&gt;Security Radar LLC &amp;middot; Newshunter interactive topic map&lt;\/div&gt;\n&lt;\/div&gt;\n&lt;script&gt;\nconst DATA = {&quot;nodes&quot;: [{&quot;id&quot;: &quot;capacity&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Maintainer capacity&quot;, &quot;weight&quot;: 9, &quot;articles&quot;: [{&quot;title&quot;: &quot;Swamped curl maintainers take low-level flaws public to survive vulnerability &#x27;avalanche&#x27;&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/20\/swamped-curl-maintainers-take-low-level-flaws-public-to-survive-vulnerability-avalanche\/5304198&quot;}, {&quot;title&quot;: &quot;AI cuts coding time, but it&#x27;s also filling open source&#x27;s inbox with crap&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/21\/ai-cuts-coding-time-but-its-also-filling-open-sources-inbox-with-crap\/5304389&quot;}, {&quot;title&quot;: &quot;Torvalds: AI is fine for competent devs, but spare us the &#x27;drive-by&#x27; patches&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/columnists\/2026\/10\/23\/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches\/5304357&quot;}, {&quot;title&quot;: &quot;AI buries engineering teams in security fixes&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/ai-buries-engineering-teams-in-security-fixes&quot;}, {&quot;title&quot;: &quot;Coding Agents Moved the Bottleneck From Writing to Reviewing PRs&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/coding-agents-moved-the-bottleneck-from-writing-to-reviewing-prs&quot;}]}, {&quot;id&quot;: &quot;reportflood&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;AI vulnerability-report flood&quot;, &quot;weight&quot;: 8, &quot;articles&quot;: [{&quot;title&quot;: &quot;Swamped curl maintainers take low-level flaws public to survive vulnerability &#x27;avalanche&#x27;&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/20\/swamped-curl-maintainers-take-low-level-flaws-public-to-survive-vulnerability-avalanche\/5304198&quot;}, {&quot;title&quot;: &quot;AI buries engineering teams in security fixes&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/ai-buries-engineering-teams-in-security-fixes&quot;}, {&quot;title&quot;: &quot;Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/anthropic-oss-security-scanner\/&quot;}, {&quot;title&quot;: &quot;Anthropic finds 94 cases where open-source projects drop security controls without warning&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/22\/anthropic-attack-surface-reduction-open-source\/&quot;}, {&quot;title&quot;: &quot;Are clearinghouses the answer to the AI hacking threat?&quot;, &quot;url&quot;: &quot;https:\/\/www.infoworld.com\/article\/4236094\/are-clearinghouses-the-answer-to-the-ai-hacking-threat.html&quot;}]}, {&quot;id&quot;: &quot;curl&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;curl (public LOW\/MEDIUM triage)&quot;, &quot;weight&quot;: 6, &quot;articles&quot;: [{&quot;title&quot;: &quot;Swamped curl maintainers take low-level flaws public to survive vulnerability &#x27;avalanche&#x27;&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/20\/swamped-curl-maintainers-take-low-level-flaws-public-to-survive-vulnerability-avalanche\/5304198&quot;}, {&quot;title&quot;: &quot;AI buries engineering teams in security fixes&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/ai-buries-engineering-teams-in-security-fixes&quot;}, {&quot;title&quot;: &quot;AI cuts coding time, but it&#x27;s also filling open source&#x27;s inbox with crap&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/21\/ai-cuts-coding-time-but-its-also-filling-open-sources-inbox-with-crap\/5304389&quot;}]}, {&quot;id&quot;: &quot;lf&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Linux Foundation&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;AI cuts coding time, but it&#x27;s also filling open source&#x27;s inbox with crap&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/21\/ai-cuts-coding-time-but-its-also-filling-open-sources-inbox-with-crap\/5304389&quot;}, {&quot;title&quot;: &quot;Vendor-affiliated AI agent tech gets adopted by friendly, funded foundation&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/23\/vendor-affiliated-ai-agent-tech-gets-adopted-by-friendly-funded-foundation\/5304912&quot;}]}, {&quot;id&quot;: &quot;slop&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;AI slop PRs (25-31%)&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;AI cuts coding time, but it&#x27;s also filling open source&#x27;s inbox with crap&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/21\/ai-cuts-coding-time-but-its-also-filling-open-sources-inbox-with-crap\/5304389&quot;}, {&quot;title&quot;: &quot;Torvalds: AI is fine for competent devs, but spare us the &#x27;drive-by&#x27; patches&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/columnists\/2026\/10\/23\/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches\/5304357&quot;}]}, {&quot;id&quot;: &quot;kernel&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;Linux kernel&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;Torvalds: AI is fine for competent devs, but spare us the &#x27;drive-by&#x27; patches&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/columnists\/2026\/10\/23\/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches\/5304357&quot;}]}, {&quot;id&quot;: &quot;torvalds&quot;, &quot;type&quot;: &quot;person&quot;, &quot;label&quot;: &quot;Linus Torvalds&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Torvalds: AI is fine for competent devs, but spare us the &#x27;drive-by&#x27; patches&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/columnists\/2026\/10\/23\/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches\/5304357&quot;}]}, {&quot;id&quot;: &quot;anthropic&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Anthropic&quot;, &quot;weight&quot;: 7, &quot;articles&quot;: [{&quot;title&quot;: &quot;Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/anthropic-oss-security-scanner\/&quot;}, {&quot;title&quot;: &quot;Anthropic finds 94 cases where open-source projects drop security controls without warning&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/22\/anthropic-attack-surface-reduction-open-source\/&quot;}, {&quot;title&quot;: &quot;Top Anthropic engineer says Claude now writes &#x27;literally all&#x27; her team&#x27;s code&quot;, &quot;url&quot;: &quot;https:\/\/www.businessinsider.com\/anthropic-katelyn-lesse-team-shifted-to-ai-coding-entirely-2026-10&quot;}, {&quot;title&quot;: &quot;This chart shows how junior-level hiring is down at Anthropic due to AI&quot;, &quot;url&quot;: &quot;https:\/\/www.businessinsider.com\/anthropic-chart-shows-junior-hiring-down-company-ai-2026-10?ref=wire.fourthweb.ai&quot;}]}, {&quot;id&quot;: &quot;ossscanner&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;OSS Scanner&quot;, &quot;weight&quot;: 6, &quot;articles&quot;: [{&quot;title&quot;: &quot;Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/anthropic-oss-security-scanner\/&quot;}, {&quot;title&quot;: &quot;Anthropic finds 94 cases where open-source projects drop security controls without warning&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/22\/anthropic-attack-surface-reduction-open-source\/&quot;}]}, {&quot;id&quot;: &quot;attacksurface&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Silent control-disabling configs (94)&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Anthropic finds 94 cases where open-source projects drop security controls without warning&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/22\/anthropic-attack-surface-reduction-open-source\/&quot;}]}, {&quot;id&quot;: &quot;cvd&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Coordinated disclosure&quot;, &quot;weight&quot;: 7, &quot;articles&quot;: [{&quot;title&quot;: &quot;AI-found bugs are expected to rise, and OpenAI has a five-stage response plan&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/22\/openai-vulnerability-disclosure-plan\/&quot;}, {&quot;title&quot;: &quot;Are clearinghouses the answer to the AI hacking threat?&quot;, &quot;url&quot;: &quot;https:\/\/www.infoworld.com\/article\/4236094\/are-clearinghouses-the-answer-to-the-ai-hacking-threat.html&quot;}, {&quot;title&quot;: &quot;Swamped curl maintainers take low-level flaws public to survive vulnerability &#x27;avalanche&#x27;&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/security\/2026\/10\/20\/swamped-curl-maintainers-take-low-level-flaws-public-to-survive-vulnerability-avalanche\/5304198&quot;}, {&quot;title&quot;: &quot;Anthropic Adds Opt-In Security Scanning for Critical Open-Source Projects&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/anthropic-oss-security-scanner\/&quot;}]}, {&quot;id&quot;: &quot;openai&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;OpenAI five-stage plan (PHP flaws)&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;AI-found bugs are expected to rise, and OpenAI has a five-stage response plan&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/22\/openai-vulnerability-disclosure-plan\/&quot;}]}, {&quot;id&quot;: &quot;clearing&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Open clearinghouses&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;Are clearinghouses the answer to the AI hacking threat?&quot;, &quot;url&quot;: &quot;https:\/\/www.infoworld.com\/article\/4236094\/are-clearinghouses-the-answer-to-the-ai-hacking-threat.html&quot;}]}, {&quot;id&quot;: &quot;sbom&quot;, &quot;type&quot;: &quot;standard&quot;, &quot;label&quot;: &quot;Signed SBOMs + VEX&quot;, &quot;weight&quot;: 6, &quot;articles&quot;: [{&quot;title&quot;: &quot;ENISA SBOM Advisory Recommends More Than the CRA Requires&quot;, &quot;url&quot;: &quot;https:\/\/www.securityandstandards.com\/enisa-sbom-advisory\/&quot;}, {&quot;title&quot;: &quot;Who Checked It? Attestations, Gemara, and CRA Due Diligence&quot;, &quot;url&quot;: &quot;https:\/\/openssf.org\/blog\/2026\/10\/22\/who-checked-it-attestations-gemara-and-cra-due-diligence\/&quot;}, {&quot;title&quot;: &quot;DevGuard: Open-source vulnerability management for the software supply chain&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/21\/devguard-open-source-vulnerability-management\/&quot;}]}, {&quot;id&quot;: &quot;enisa&quot;, &quot;type&quot;: &quot;law&quot;, &quot;label&quot;: &quot;ENISA SBOM advisory&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;ENISA SBOM Advisory Recommends More Than the CRA Requires&quot;, &quot;url&quot;: &quot;https:\/\/www.securityandstandards.com\/enisa-sbom-advisory\/&quot;}]}, {&quot;id&quot;: &quot;cra&quot;, &quot;type&quot;: &quot;law&quot;, &quot;label&quot;: &quot;EU Cyber Resilience Act&quot;, &quot;weight&quot;: 6, &quot;articles&quot;: [{&quot;title&quot;: &quot;ENISA SBOM Advisory Recommends More Than the CRA Requires&quot;, &quot;url&quot;: &quot;https:\/\/www.securityandstandards.com\/enisa-sbom-advisory\/&quot;}, {&quot;title&quot;: &quot;Who Checked It? Attestations, Gemara, and CRA Due Diligence&quot;, &quot;url&quot;: &quot;https:\/\/openssf.org\/blog\/2026\/10\/22\/who-checked-it-attestations-gemara-and-cra-due-diligence\/&quot;}, {&quot;title&quot;: &quot;DevGuard: Open-source vulnerability management for the software supply chain&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/21\/devguard-open-source-vulnerability-management\/&quot;}]}, {&quot;id&quot;: &quot;gemara&quot;, &quot;type&quot;: &quot;standard&quot;, &quot;label&quot;: &quot;OpenSSF Gemara attestations&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Who Checked It? Attestations, Gemara, and CRA Due Diligence&quot;, &quot;url&quot;: &quot;https:\/\/openssf.org\/blog\/2026\/10\/22\/who-checked-it-attestations-gemara-and-cra-due-diligence\/&quot;}]}, {&quot;id&quot;: &quot;devguard&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;DevGuard (OWASP)&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;DevGuard: Open-source vulnerability management for the software supply chain&quot;, &quot;url&quot;: &quot;https:\/\/www.helpnetsecurity.com\/2026\/10\/21\/devguard-open-source-vulnerability-management\/&quot;}]}, {&quot;id&quot;: &quot;shadowai&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Shadow AI on workstations&quot;, &quot;weight&quot;: 7, &quot;articles&quot;: [{&quot;title&quot;: &quot;JFrog Closes the Shadow AI Blind Spot: Unveils AI-SEC to Control Every AI Agent, Skill, and Model from the Developer to Production&quot;, &quot;url&quot;: &quot;https:\/\/jfrog.com\/press-room\/jfrog-closes-the-shadow-ai-blind-spot-unveils-ai-sec-to-control-every-ai-agent-skill-and-model-from-the-developer-to-production\/&quot;}, {&quot;title&quot;: &quot;Beyond SLSA and Sigstore: Securing the Developer Origin in the Age of Agentic Coding&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/beyond-slsa-and-sigstore-securing-the-developer-origin-in-the-age-of-agentic-coding&quot;}]}, {&quot;id&quot;: &quot;jfrog&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;JFrog AI Security \/ Agent Guard&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;JFrog Closes the Shadow AI Blind Spot: Unveils AI-SEC to Control Every AI Agent, Skill, and Model from the Developer to Production&quot;, &quot;url&quot;: &quot;https:\/\/jfrog.com\/press-room\/jfrog-closes-the-shadow-ai-blind-spot-unveils-ai-sec-to-control-every-ai-agent-skill-and-model-from-the-developer-to-production\/&quot;}]}, {&quot;id&quot;: &quot;skills&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Agent skills &amp; MCP servers&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;JFrog Closes the Shadow AI Blind Spot: Unveils AI-SEC to Control Every AI Agent, Skill, and Model from the Developer to Production&quot;, &quot;url&quot;: &quot;https:\/\/jfrog.com\/press-room\/jfrog-closes-the-shadow-ai-blind-spot-unveils-ai-sec-to-control-every-ai-agent-skill-and-model-from-the-developer-to-production\/&quot;}, {&quot;title&quot;: &quot;Beyond SLSA and Sigstore: Securing the Developer Origin in the Age of Agentic Coding&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/beyond-slsa-and-sigstore-securing-the-developer-origin-in-the-age-of-agentic-coding&quot;}, {&quot;title&quot;: &quot;Vendor-affiliated AI agent tech gets adopted by friendly, funded foundation&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/23\/vendor-affiliated-ai-agent-tech-gets-adopted-by-friendly-funded-foundation\/5304912&quot;}]}, {&quot;id&quot;: &quot;preinstall&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Pre-install gating &amp; origin attestation&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Beyond SLSA and Sigstore: Securing the Developer Origin in the Age of Agentic Coding&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/beyond-slsa-and-sigstore-securing-the-developer-origin-in-the-age-of-agentic-coding&quot;}, {&quot;title&quot;: &quot;JFrog Closes the Shadow AI Blind Spot: Unveils AI-SEC to Control Every AI Agent, Skill, and Model from the Developer to Production&quot;, &quot;url&quot;: &quot;https:\/\/jfrog.com\/press-room\/jfrog-closes-the-shadow-ai-blind-spot-unveils-ai-sec-to-control-every-ai-agent-skill-and-model-from-the-developer-to-production\/&quot;}]}, {&quot;id&quot;: &quot;cisecrets&quot;, &quot;type&quot;: &quot;product&quot;, &quot;label&quot;: &quot;Buildkite scoped CI secrets&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;Buildkite Adds Scoped Secrets and New Agentic CI Tools&quot;, &quot;url&quot;: &quot;https:\/\/www.infoq.com\/news\/2026\/10\/buildkite-ci-secrets-agentic\/&quot;}]}, {&quot;id&quot;: &quot;aaif&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Agentic AI Foundation&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;Vendor-affiliated AI agent tech gets adopted by friendly, funded foundation&quot;, &quot;url&quot;: &quot;https:\/\/www.theregister.com\/ai-and-ml\/2026\/10\/23\/vendor-affiliated-ai-agent-tech-gets-adopted-by-friendly-funded-foundation\/5304912&quot;}]}, {&quot;id&quot;: &quot;review&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Review bottleneck&quot;, &quot;weight&quot;: 7, &quot;articles&quot;: [{&quot;title&quot;: &quot;Coding Agents Moved the Bottleneck From Writing to Reviewing PRs&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/coding-agents-moved-the-bottleneck-from-writing-to-reviewing-prs&quot;}, {&quot;title&quot;: &quot;Engineers lose 17+ days a year to AI rework&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/engineers-lose-17-days-a-year-to-ai-rework&quot;}, {&quot;title&quot;: &quot;Cisco chief automation officer talks 100x engineers vs. tech debt&quot;, &quot;url&quot;: &quot;https:\/\/www.informationweek.com\/it-leadership\/cisco-chief-automation-officer-on-the-power-of-100x-engineers&quot;}, {&quot;title&quot;: &quot;Top Anthropic engineer says Claude now writes &#x27;literally all&#x27; her team&#x27;s code&quot;, &quot;url&quot;: &quot;https:\/\/www.businessinsider.com\/anthropic-katelyn-lesse-team-shifted-to-ai-coding-entirely-2026-10&quot;}]}, {&quot;id&quot;: &quot;rework&quot;, &quot;type&quot;: &quot;researcher&quot;, &quot;label&quot;: &quot;ActiveState survey (17 days rework)&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Engineers lose 17+ days a year to AI rework&quot;, &quot;url&quot;: &quot;https:\/\/leaddev.com\/ai\/engineers-lose-17-days-a-year-to-ai-rework&quot;}]}, {&quot;id&quot;: &quot;cisco&quot;, &quot;type&quot;: &quot;vendor&quot;, &quot;label&quot;: &quot;Cisco (100x engineers vs backlog)&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Cisco chief automation officer talks 100x engineers vs. tech debt&quot;, &quot;url&quot;: &quot;https:\/\/www.informationweek.com\/it-leadership\/cisco-chief-automation-officer-on-the-power-of-100x-engineers&quot;}, {&quot;title&quot;: &quot;Report: AI Agents Increase Observability Costs&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/report-ai-agents-increase-observability-costs&quot;}]}, {&quot;id&quot;: &quot;junior&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Junior hiring decline&quot;, &quot;weight&quot;: 3, &quot;articles&quot;: [{&quot;title&quot;: &quot;This chart shows how junior-level hiring is down at Anthropic due to AI&quot;, &quot;url&quot;: &quot;https:\/\/www.businessinsider.com\/anthropic-chart-shows-junior-hiring-down-company-ai-2026-10?ref=wire.fourthweb.ai&quot;}, {&quot;title&quot;: &quot;Internal docs reveal how Google is shaking up its interview process with AI&quot;, &quot;url&quot;: &quot;https:\/\/www.businessinsider.com\/google-interview-process-ai-gemini-coding-comprehension-software-engineer-2026-10&quot;}, {&quot;title&quot;: &quot;Top Anthropic engineer says Claude now writes &#x27;literally all&#x27; her team&#x27;s code&quot;, &quot;url&quot;: &quot;https:\/\/www.businessinsider.com\/anthropic-katelyn-lesse-team-shifted-to-ai-coding-entirely-2026-10&quot;}]}, {&quot;id&quot;: &quot;ownership&quot;, &quot;type&quot;: &quot;concept&quot;, &quot;label&quot;: &quot;Agent ownership &amp; on-call&quot;, &quot;weight&quot;: 5, &quot;articles&quot;: [{&quot;title&quot;: &quot;Who on-calls an AI? This is the unresolved crisis of agent ownership&quot;, &quot;url&quot;: &quot;https:\/\/thenewstack.io\/production-ai-agent-ownership\/&quot;}, {&quot;title&quot;: &quot;Ramp built an AI agent harness in six weeks \\u2014 and LangChain&#x27;s CEO says it&#x27;s part of a bigger shift&quot;, &quot;url&quot;: &quot;https:\/\/thenewstack.io\/ramp-laminar-agent-harness\/&quot;}]}, {&quot;id&quot;: &quot;obscost&quot;, &quot;type&quot;: &quot;researcher&quot;, &quot;label&quot;: &quot;Splunk &amp; Omdia observability surveys&quot;, &quot;weight&quot;: 4, &quot;articles&quot;: [{&quot;title&quot;: &quot;Report: AI Agents Increase Observability Costs&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/report-ai-agents-increase-observability-costs&quot;}, {&quot;title&quot;: &quot;Reality complicates CIOs&#x27; big AI observability plans&quot;, &quot;url&quot;: &quot;https:\/\/www.techtarget.com\/it-strategy\/news\/366652427\/Reality-complicates-CIOs-big-AI-observability-plans&quot;}, {&quot;title&quot;: &quot;When 200 OK Isn&#x27;t OK: Observability for LLM Systems&quot;, &quot;url&quot;: &quot;https:\/\/devops.com\/when-200-ok-isnt-ok-observability-for-llm-systems&quot;}]}], &quot;links&quot;: [{&quot;source&quot;: &quot;curl&quot;, &quot;target&quot;: &quot;reportflood&quot;, &quot;weight&quot;: 6}, {&quot;source&quot;: &quot;curl&quot;, &quot;target&quot;: &quot;capacity&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;reportflood&quot;, &quot;target&quot;: &quot;capacity&quot;, &quot;weight&quot;: 7}, {&quot;source&quot;: &quot;lf&quot;, &quot;target&quot;: &quot;slop&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;slop&quot;, &quot;target&quot;: &quot;capacity&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;torvalds&quot;, &quot;target&quot;: &quot;kernel&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;kernel&quot;, &quot;target&quot;: &quot;capacity&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;torvalds&quot;, &quot;target&quot;: &quot;slop&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;lf&quot;, &quot;target&quot;: &quot;aaif&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;lf&quot;, &quot;target&quot;: &quot;kernel&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;ossscanner&quot;, &quot;weight&quot;: 6}, {&quot;source&quot;: &quot;ossscanner&quot;, &quot;target&quot;: &quot;reportflood&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;ossscanner&quot;, &quot;target&quot;: &quot;cvd&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;attacksurface&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;attacksurface&quot;, &quot;target&quot;: &quot;ossscanner&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;openai&quot;, &quot;target&quot;: &quot;cvd&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;clearing&quot;, &quot;target&quot;: &quot;cvd&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;clearing&quot;, &quot;target&quot;: &quot;reportflood&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;curl&quot;, &quot;target&quot;: &quot;cvd&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;sbom&quot;, &quot;target&quot;: &quot;enisa&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;enisa&quot;, &quot;target&quot;: &quot;cra&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;sbom&quot;, &quot;target&quot;: &quot;cra&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;gemara&quot;, &quot;target&quot;: &quot;cra&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;gemara&quot;, &quot;target&quot;: &quot;sbom&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;devguard&quot;, &quot;target&quot;: &quot;sbom&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;devguard&quot;, &quot;target&quot;: &quot;cra&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;cvd&quot;, &quot;target&quot;: &quot;cra&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;shadowai&quot;, &quot;target&quot;: &quot;jfrog&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;jfrog&quot;, &quot;target&quot;: &quot;skills&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;shadowai&quot;, &quot;target&quot;: &quot;skills&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;shadowai&quot;, &quot;target&quot;: &quot;preinstall&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;preinstall&quot;, &quot;target&quot;: &quot;sbom&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;preinstall&quot;, &quot;target&quot;: &quot;cisecrets&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;skills&quot;, &quot;target&quot;: &quot;aaif&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;aaif&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;openai&quot;, &quot;target&quot;: &quot;aaif&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;jfrog&quot;, &quot;target&quot;: &quot;sbom&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;review&quot;, &quot;target&quot;: &quot;capacity&quot;, &quot;weight&quot;: 5}, {&quot;source&quot;: &quot;rework&quot;, &quot;target&quot;: &quot;review&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;rework&quot;, &quot;target&quot;: &quot;preinstall&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;cisco&quot;, &quot;target&quot;: &quot;review&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;review&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;anthropic&quot;, &quot;target&quot;: &quot;junior&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;cisco&quot;, &quot;target&quot;: &quot;junior&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;slop&quot;, &quot;target&quot;: &quot;review&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;ownership&quot;, &quot;target&quot;: &quot;obscost&quot;, &quot;weight&quot;: 4}, {&quot;source&quot;: &quot;ownership&quot;, &quot;target&quot;: &quot;skills&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;cisco&quot;, &quot;target&quot;: &quot;ownership&quot;, &quot;weight&quot;: 3}, {&quot;source&quot;: &quot;ownership&quot;, &quot;target&quot;: &quot;review&quot;, &quot;weight&quot;: 2}, {&quot;source&quot;: &quot;obscost&quot;, &quot;target&quot;: &quot;cisco&quot;, &quot;weight&quot;: 2}]};\nconst TYPE_COLORS = {&quot;actor&quot;: &quot;#dc2626&quot;, &quot;malware&quot;: &quot;#991b1b&quot;, &quot;cve&quot;: &quot;#ea580c&quot;, &quot;product&quot;: &quot;#2563eb&quot;, &quot;vendor&quot;: &quot;#16a34a&quot;, &quot;researcher&quot;: &quot;#0d9488&quot;, &quot;person&quot;: &quot;#475569&quot;, &quot;location&quot;: &quot;#7c3aed&quot;, &quot;law&quot;: &quot;#ca8a04&quot;, &quot;campaign&quot;: &quot;#be185d&quot;, &quot;concept&quot;: &quot;#0891b2&quot;, &quot;standard&quot;: &quot;#64748b&quot;};\nconst TYPE_LABELS = {&quot;actor&quot;: &quot;Threat actor \/ APT&quot;, &quot;malware&quot;: &quot;Malware \/ worm&quot;, &quot;cve&quot;: &quot;CVE \/ vulnerability&quot;, &quot;product&quot;: &quot;Product \/ platform&quot;, &quot;vendor&quot;: &quot;Vendor \/ company&quot;, &quot;researcher&quot;: &quot;Researcher \/ source&quot;, &quot;person&quot;: &quot;Person&quot;, &quot;location&quot;: &quot;Country \/ region&quot;, &quot;law&quot;: &quot;Regulator \/ law enforcement&quot;, &quot;campaign&quot;: &quot;Campaign \/ event&quot;, &quot;concept&quot;: &quot;Theme \/ stat&quot;, &quot;standard&quot;: &quot;Standard \/ framework&quot;};\n\nconst wrap = document.getElementById(&#x27;canvas-wrap&#x27;);\nconst svg = d3.select(&#x27;#canvas&#x27;);\nlet width = wrap.clientWidth, height = wrap.clientHeight;\n\nconst g = svg.append(&#x27;g&#x27;);\n\nconst zoom = d3.zoom()\n  .scaleExtent([0.2, 6])\n  .on(&#x27;zoom&#x27;, (event) =&gt; g.attr(&#x27;transform&#x27;, event.transform));\nsvg.call(zoom);\n\ndocument.getElementById(&#x27;zoom-in&#x27;).onclick = () =&gt; svg.transition().duration(200).call(zoom.scaleBy, 1.3);\ndocument.getElementById(&#x27;zoom-out&#x27;).onclick = () =&gt; svg.transition().duration(200).call(zoom.scaleBy, 1\/1.3);\ndocument.getElementById(&#x27;zoom-reset&#x27;).onclick = () =&gt; svg.transition().duration(300).call(zoom.transform, d3.zoomIdentity);\n\nconst maxW = d3.max(DATA.nodes, d =&gt; d.weight) || 1;\nconst rScale = d3.scaleSqrt().domain([1, maxW]).range([8, 34]);\nconst maxEdgeW = d3.max(DATA.links, l =&gt; l.weight) || 1;\nconst edgeScale = d3.scaleLinear().domain([1, maxEdgeW]).range([1, 7]);\n\nconst simulation = d3.forceSimulation(DATA.nodes)\n  .force(&#x27;link&#x27;, d3.forceLink(DATA.links).id(d =&gt; d.id).distance(l =&gt; 90 + 10 * (5 - Math.min(l.weight,5))).strength(0.35))\n  .force(&#x27;charge&#x27;, d3.forceManyBody().strength(-420))\n  .force(&#x27;center&#x27;, d3.forceCenter(width \/ 2, height \/ 2))\n  .force(&#x27;collide&#x27;, d3.forceCollide(d =&gt; rScale(d.weight) + 18));\n\nconst link = g.append(&#x27;g&#x27;).attr(&#x27;class&#x27;, &#x27;links&#x27;)\n  .selectAll(&#x27;line&#x27;).data(DATA.links).join(&#x27;line&#x27;)\n  .attr(&#x27;class&#x27;, &#x27;link&#x27;)\n  .attr(&#x27;stroke-width&#x27;, d =&gt; edgeScale(d.weight));\n\nconst node = g.append(&#x27;g&#x27;).attr(&#x27;class&#x27;, &#x27;nodes&#x27;)\n  .selectAll(&#x27;circle&#x27;).data(DATA.nodes).join(&#x27;circle&#x27;)\n  .attr(&#x27;r&#x27;, d =&gt; rScale(d.weight))\n  .attr(&#x27;fill&#x27;, d =&gt; TYPE_COLORS[d.type] || &#x27;#64748b&#x27;)\n  .attr(&#x27;stroke&#x27;, &#x27;#ffffff&#x27;).attr(&#x27;stroke-width&#x27;, 1.5)\n  .style(&#x27;cursor&#x27;, &#x27;grab&#x27;)\n  .call(d3.drag()\n    .on(&#x27;start&#x27;, (event, d) =&gt; { if (!event.active) simulation.alphaTarget(0.2).restart(); d.fx = d.x; d.fy = d.y; })\n    .on(&#x27;drag&#x27;, (event, d) =&gt; { d.fx = event.x; d.fy = event.y; })\n    .on(&#x27;end&#x27;, (event, d) =&gt; { if (!event.active) simulation.alphaTarget(0); d.fx = null; d.fy = null; }));\n\nconst label = g.append(&#x27;g&#x27;).attr(&#x27;class&#x27;, &#x27;labels&#x27;)\n  .selectAll(&#x27;text&#x27;).data(DATA.nodes).join(&#x27;text&#x27;)\n  .attr(&#x27;class&#x27;, d =&gt; &#x27;node-label&#x27; + (d.weight &gt;= maxW * 0.7 ? &#x27; bold&#x27; : &#x27;&#x27;))\n  .attr(&#x27;dy&#x27;, d =&gt; -(rScale(d.weight) + 6))\n  .attr(&#x27;text-anchor&#x27;, &#x27;middle&#x27;)\n  .text(d =&gt; d.label);\n\nconst tooltip = d3.select(&#x27;#tooltip&#x27;);\nconst tooltipEl = document.getElementById(&#x27;tooltip&#x27;);\nlet hideTimer = null;\n\nfunction escapeHtml(s) {\n  return String(s).replace(\/&amp;\/g, &#x27;&amp;amp;&#x27;).replace(\/&lt;\/g, &#x27;&amp;lt;&#x27;).replace(\/&gt;\/g, &#x27;&amp;gt;&#x27;).replace(\/&quot;\/g, &#x27;&amp;quot;&#x27;);\n}\n\nfunction showTooltip(d) {\n  clearTimeout(hideTimer);\n  let html = &#x27;&lt;div class=&quot;tooltip-head&quot;&gt;&lt;strong&gt;&#x27; + escapeHtml(d.label) + &#x27;&lt;\/strong&gt;&lt;br&gt;&#x27; +\n    escapeHtml(TYPE_LABELS[d.type] || d.type) + &#x27; &amp;middot; &#x27; + d.weight + &#x27; mentions&lt;\/div&gt;&#x27;;\n  const articles = d.articles || [];\n  if (articles.length) {\n    html += &#x27;&lt;div class=&quot;tooltip-articles&quot;&gt;&lt;div class=&quot;tooltip-articles-title&quot;&gt;Related articles&lt;\/div&gt;&#x27; +\n      articles.map(a =&gt; &#x27;&lt;a href=&quot;&#x27; + escapeHtml(a.url) + &#x27;&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot;&gt;&#x27; + escapeHtml(a.title) + &#x27;&lt;\/a&gt;&#x27;).join(&#x27;&#x27;) +\n      &#x27;&lt;\/div&gt;&#x27;;\n  }\n  tooltip.style(&#x27;opacity&#x27;, 1).html(html);\n}\n\nfunction hideTooltipNow() {\n  tooltip.style(&#x27;opacity&#x27;, 0);\n}\n\n\/\/ Hide only when the cursor leaves the WHOLE graph area (canvas + tooltip),\n\/\/ not when it leaves a node&#x27;s small circular hit-area. A per-node mouseout with a\n\/\/ short timer is a race: if the cursor takes even slightly longer than the timer to\n\/\/ travel from the node&#x27;s edge to the tooltip (which can be tall, with a scrollable\n\/\/ article list), it disappears before a click can land. Binding to the wrap&#x27;s\n\/\/ mouseleave instead means the tooltip only closes when you actually leave the graph,\n\/\/ or immediately when you click empty canvas space, or updates in place when you move\n\/\/ to a different node -- all far more forgiving.\nwrap.addEventListener(&#x27;mouseleave&#x27;, hideTooltipNow);\n\nsvg.on(&#x27;click&#x27;, (event) =&gt; {\n  if (event.target === svg.node()) hideTooltipNow();\n});\n\nnode.on(&#x27;mouseover&#x27;, (event, d) =&gt; showTooltip(d))\n  .on(&#x27;mousemove&#x27;, (event) =&gt; {\n    const [mx, my] = d3.pointer(event, wrap);\n    let left = mx + 16, top = my + 8;\n    const maxLeft = wrap.clientWidth - 296, maxTop = wrap.clientHeight - 40;\n    if (left &gt; maxLeft) left = Math.max(8, mx - 296);\n    if (top &gt; maxTop) top = Math.max(8, maxTop);\n    tooltip.style(&#x27;left&#x27;, left + &#x27;px&#x27;).style(&#x27;top&#x27;, top + &#x27;px&#x27;);\n  });\n\nfunction renderPositions() {\n  link.attr(&#x27;x1&#x27;, d =&gt; d.source.x).attr(&#x27;y1&#x27;, d =&gt; d.source.y)\n      .attr(&#x27;x2&#x27;, d =&gt; d.target.x).attr(&#x27;y2&#x27;, d =&gt; d.target.y);\n  node.attr(&#x27;cx&#x27;, d =&gt; d.x).attr(&#x27;cy&#x27;, d =&gt; d.y);\n  label.attr(&#x27;x&#x27;, d =&gt; d.x).attr(&#x27;y&#x27;, d =&gt; d.y);\n}\n\n\/\/ Fit the whole graph inside the visible canvas (accounting for node radius and the\n\/\/ label sitting just above each node) by computing the bounding box of all node\n\/\/ positions and applying a translate+scale transform through the existing zoom\n\/\/ behavior. duration=0 applies it instantly (used on first paint); a duration applies\n\/\/ a smooth transition (used after a resize).\nfunction zoomToFit(duration) {\n  if (!DATA.nodes.length) return;\n  let minX = Infinity, maxX = -Infinity, minY = Infinity, maxY = -Infinity;\n  DATA.nodes.forEach(d =&gt; {\n    const r = rScale(d.weight);\n    minX = Math.min(minX, d.x - r);\n    maxX = Math.max(maxX, d.x + r);\n    minY = Math.min(minY, d.y - r - 24); \/\/ extra headroom for the label above the node\n    maxY = Math.max(maxY, d.y + r);\n  });\n  const graphW = maxX - minX, graphH = maxY - minY;\n  if (graphW &lt;= 0 || graphH &lt;= 0) return;\n  const fitFraction = 0.9; \/\/ leave a small margin so edge nodes\/labels aren&#x27;t flush against the frame\n  const scale = Math.max(0.2, Math.min(2, fitFraction \/ Math.max(graphW \/ width, graphH \/ height)));\n  const tx = width \/ 2 - scale * (minX + maxX) \/ 2;\n  const ty = height \/ 2 - scale * (minY + maxY) \/ 2;\n  const transform = d3.zoomIdentity.translate(tx, ty).scale(scale);\n  if (duration &gt; 0) {\n    svg.transition().duration(duration).call(zoom.transform, transform);\n  } else {\n    svg.call(zoom.transform, transform);\n  }\n}\n\n\/\/ Pre-settle the force layout synchronously (no on-screen animation) so the very\n\/\/ first paint already shows a converged graph that&#x27;s fully framed by zoomToFit,\n\/\/ instead of nodes flying in from D3&#x27;s random initial scatter with the view\n\/\/ potentially clipping some of them before things settle.\nconst PRESETTLE_TICKS = 300;\nsimulation.stop();\nfor (let i = 0; i &lt; PRESETTLE_TICKS; i++) simulation.tick();\nrenderPositions();\nzoomToFit(0);\n\nsimulation.on(&#x27;tick&#x27;, renderPositions);\n\n\/\/ Legend: only show entity types actually present in this map.\nconst typesPresent = Array.from(new Set(DATA.nodes.map(d =&gt; d.type)));\nconst legend = document.getElementById(&#x27;legend&#x27;);\nlegend.innerHTML = &#x27;&lt;div class=&quot;legend-title&quot;&gt;Entity types&lt;\/div&gt;&#x27; + typesPresent.map(t =&gt;\n  &#x27;&lt;div class=&quot;legend-row&quot;&gt;&lt;span class=&quot;legend-dot&quot; style=&quot;background:&#x27; + (TYPE_COLORS[t] || &#x27;#64748b&#x27;) + &#x27;&quot;&gt;&lt;\/span&gt;&#x27; + (TYPE_LABELS[t] || t) + &#x27;&lt;\/div&gt;&#x27;\n).join(&#x27;&#x27;);\n\nwindow.addEventListener(&#x27;resize&#x27;, () =&gt; {\n  width = wrap.clientWidth; height = wrap.clientHeight;\n  simulation.force(&#x27;center&#x27;, d3.forceCenter(width \/ 2, height \/ 2));\n  simulation.alpha(0.3).restart();\n  zoomToFit(400);\n});\n&lt;\/script&gt;\n&lt;\/body&gt;\n&lt;\/html&gt;\n\" style=\"width:100%;height:82vh;min-height:600px;border:1px solid #e2e8f0;border-radius:8px;\" title=\"Interactive topic map\"><\/iframe><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,11],"tags":[],"class_list":["post-6159","post","type-post","status-publish","format-standard","hentry","category-secure","category-trends"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6159","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6159"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6159\/revisions"}],"predecessor-version":[{"id":6175,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6159\/revisions\/6175"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6159"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6159"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6159"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}