company
Developer security company selling tooling that scans code, dependencies and containers for vulnerabilities, and running its own vulnerability research team.
Docker released its Sandbox Kit Spec under Apache 2.0 and is taking it to CNCF, with nine named vendors already shipping Kits for their own tools. Enforcement still belongs to the runtime. In the post, that runtime is Docker Sandboxes.
Reality
Tool text is fetched from the server every time an agent connects, so the description reviewed at install time can differ from the one the model reads next week. A dev.to post proposes pinning a hash of it and checking that hash in CI.
Reality
A dev.to checklist of ten software delivery gates for AI agents insists every check be automated, fast, blocking and observable. The gate its author calls no replacement for human review cannot meet that bar.
Reality
AgentGate read the shipped code behind 30-plus OSV and GHSA flags, verified 19 npm packages as malicious, and found 18 still resolvable on publication day. Removal, not detection, is where the chain stopped.
Reality
The upgrade request is an HTTP GET that carries session cookies cross-origin with no preflight, so CORS never sees it, and the frameworks that could check the Origin header for you mostly hand that job to your route code.
Reality
JFrog found that 54 of 55 advisories from one new GitHub account were machine-generated fiction. They reached enterprise scanners by the normal route, which is the problem.
Reality
Slopsquatting stopped being a thought experiment. The only thing standing between an AI suggestion and an install was a reviewer who happened to check the registry page.
Reality
The set runs from AI SAST to virtual patching. Harness has published no customer results, so the case rests on owning the pipeline rather than on detection quality.
Reality
A backdoored LiteLLM build was downloaded about 47,000 times in a three-hour window. Most agent incidents never get a CVE, so your scanner dashboard is not the control you think it is.
Reality