tag
AI coding
2 articles with this tag
2026-06-26
AI-era security measures that work and ones that don't: why small sites get targeted too
Four AI-era misconceptions corrected: (1) too small to be targeted → automated attacks don't need a human to pick a target; (2) needs a special new control → the basics still work best; (3) a product makes you safe → prevention design before detection; (4) AI code is fast so it's safe → it can ship with vulnerabilities, so review before publishing. What works is the boring basics in the right order.
CriticalCVSS10.02026-06-07
An API key leaked from AI-written code and was used for fraudulent charges: the cause was an unpatched CVSS 10.0 vulnerability
The bill spike was a symptom. The cause was an unpatched, published CVSS 10.0 RCE. An anonymized case, distilled into defensive lessons.