AI Is Accelerating CVE Exploitation in Legacy Dependencies. Here Is What to Do | Robert Nalen, HeroDevs | TFiR
Robert Nalen of HeroDevs explains how AI is accelerating CVE discovery in end-of-life open source, why standard ...
Why AI Agent Logs Are Not Enough and How to Get Cryptographic Proof | Yaron Schneider, Dapr | TFiR
Dapr 1.18 introduces verifiable execution, signing every workflow history event using SPIFFE-based cryptographic identity. Yaron Schneider explains ...
How to Stop Chasing CVEs and Ship Vulnerability-Free Containers | Eilon Elhadad, Echo | TFiR
Eilon Elhadad, Co-Founder and CEO of Echo, explains why the patch-and-chase model is broken, how AI agents ...
How to Secure AI Agents, MCP Servers, and LLM Supply Chains | Amy Chang, Cisco | TFiR
Amy Chang of Cisco breaks down the 2026 State of AI Security Report findings: prompt injection threats, ...
How to Prepare for EU Cyber Resilience Act Compliance Before Enforcement Hits | Christopher Robinson, OpenSSF | TFiR
Christopher "CRob" Robinson of OpenSSF breaks down who is liable under the EU Cyber Resilience Act, why ...
AI Code Floods Open Source: How Kusari Inspector Secures CNCF Projects Against Supply Chain Attacks | TFiR
Open source maintainers face an impossible burden: AI bots flood repositories with pull requests that may be ...
Open Source’s Contributor Crisis Is a Security Risk. Here’s How CNCF’s Merge Forward Is Fixing It | TFiR
Open source sustainability is not just about code—it's about people. Stéphane Este-Gracias of CNCF's Merge Forward explains ...
AI Code Is Leaking 29M Secrets: What Developers Must Know Now | Dwayne McDaniel, GitGuardian | TFiR
AI coding assistants are leaking credentials at 2x the baseline rate, with 29 million secrets hitting ...
The Hidden Risk of Open Source: What Happens When Maintainers Walk Away
When open source maintainers walk away from mature projects, companies are left with production dependencies and no ...
Fixing WordPress Supply Chain Security with FAIR | Karim Marucchi, Crowd Favorite & Joost de Valk, Emilia Capital
Karim Marucchi and Joost de Valk explain how the FAIR Package Manager decentralizes WordPress updates, embeds ...