tag
AI coding
2 articles with this tag
2026-06-26
What works (and what doesn't) for AI-era security — why small sites get hit too
Four AI-era myths corrected: (1) too small to be targeted → automation removes 'a human picks you'; (2) needs a special new control → the basics still win; (3) a product makes you safe → prevention design before detection; (4) AI code is fast so it's safe → it ships with vulns, review before publishing. What works is the boring basics in the right order.
CVSS10.02026-06-07
AI-written code leaked an API key and ran up fraudulent charges — the real cause was an unpatched CVSS 10.0
The bill spike was a symptom. The real cause was an unpatched, public CVSS 10.0 RCE. An anonymized case, distilled into defensive lessons.