Prompt injection: Can a fifth grader steal your data?
May 15, 2026
|
4 min read
Awareness
Awareness
44
Stories
19
Writers
What Anthropic’s Project Glasswing means for software builders
Apr 13, 2026
|
5 min read
The third wave of application security: How AI is reshaping AppSec at scale
Apr 10, 2026
|
4 min read
Strange but true software licenses: No foolin’
Apr 01, 2026
|
7 min read
Decoding AI-enabled dev: Top concerns, hidden benefits, and smart investment strategies
Mar 31, 2026
|
4 min read
Black Duck Signal: Security that moves at the speed of AI
Mar 23, 2026
|
3 min read
The importance of software quality audits during M&A due diligence: Stories from the field
Mar 16, 2026
|
5 min read
Unlimited test cases: The power of generative fuzzing
Mar 09, 2026
|
5 min read
Event-driven AppSec is here: Thoughtful automation finds risk earlier
Feb 05, 2026
|
6 min read
The BSIMM16 report: What today’s software security programs are really doing—and why it matters
Feb 04, 2026
|
2 min read
Navigating the AI security era: Key trends for software leaders in 2026
Jan 21, 2026
|
6 min read
Vibe coding and its implications
Jan 06, 2026
|
4 min read
AI coding security gap: 76% of orgs expose software supply chain to risk
Dec 16, 2025
|
1 min read
Embracing AI in embedded software development: A balanced approach
Dec 01, 2025
|
5 min read
Black Duck’s product release round-up: faster fixes, smarter security
Oct 27, 2025
|
1 min read
Scaling authenticated DAST with multimodal LLMs and vault-backed credentials
Oct 15, 2025
|
4 min read
AI in DevSecOps: A critical crossroads for security and risk management
Oct 08, 2025
|
6 min read
The next frontier in AppSec: Context-aware risk scoring
Sep 19, 2025
|
3 min read
The Shai-Hulud npm malware attack: A wake-up call for supply chain security
Sep 18, 2025
|
2 min read
Get the best from AI in software development without risking the worst
Sep 15, 2025
|
5 min read
The recent npm supply chain attack: Lessons in securing your software dependencies
Sep 11, 2025
|
3 min read
Key findings from “The State of Embedded Software Quality and Safety 2025” report
Aug 26, 2025
|
3 min read
Accelerate onboarding and testing of GitHub repos with the Black Duck Security app
Aug 19, 2025
|
2 min read
Addressing the hidden risks of AI coding tools
Aug 18, 2025
|
1 min read
What you need to know about the NIST Secure Software Development Framework
Aug 12, 2025
|
5 min read
Black Duck Assist: AI code security assistance in your IDE
Aug 05, 2025
|
3 min read
The Importance of a Third-Party Due Diligence Perspective on Code Risk
Aug 04, 2025
|
3 min read
Faster, Smarter Vulnerability Alerts: AI in Black Duck Security Advisories
Jul 31, 2025
|
5 min read
Navigating the EU Cyber Resilience Act
Jul 17, 2025
|
7 min read
The Black Duck Way: Strong culture drives leadership
Jul 15, 2025
|
3 min read
Understanding Section 524B of the FD&C Act
Jul 08, 2025
|
6 min read
Beyond detection: Understanding vulnerability reachability in SCA
Jun 30, 2025
|
6 min read
Remain code-compliant in a regulated, AI-powered world
Jun 23, 2025
|
3 min read
Detecting compromised source code using Rapid Scan Static’s Malicious URLs feature
Jun 16, 2025
|
4 min read
Black Duck named a 2025 Intellyx Digital Innovator Award winner
Jun 11, 2025
|
1 min read
Q&A: What You Need to Know About Open Source Software Risk in 2025
May 22, 2025
|
5 min read
A decade of open source risk: Reflecting on 10 years of OSSRA report insights
May 16, 2025
|
3 min read
AI-driven security: How AI is revolutionizing cybersecurity management
Mar 06, 2025
|
9 min read
BSIMM15: New focus on securing AI and the software supply chain
Jan 14, 2025
|
5 min read
Software Risk Is Business Risk. It’s Time for the C-Suite to Act.
Jul 31, 2023
|
2 min read