The Real Mechanics of Vulnerabilities in an Upstream/Downstream, Topsy-Turvy EOL World
In this article you’ll learn Why CVEs record that a vulnerability exists, not that a usable fix exists How vulnerabilities are often …
Security
The 5 Knights of the MCP Apocalypse
AI MCP is awesome to connect our Agents to real time data, but also open a dangerous door to security threats
Java Security Starts with the JVM
When it comes to Java security, the first thing that comes to mind should be the JVM. If you’re relying on outdated, unpatched, or …
JC-AI Newsletter #8
This newsletter focuses on examining how AI enhances productivity through enterprise studies, agentic system architecture, attack vectors, …
How Chat Memory Manipulation Can Ruin Your AI System
Did you know that by tampering with chat history, you're able to make LLMs respond and execute functions that are out of policy?
Save Time and Money by Reducing False Positives
Recently Azul announced that AVD makes it possible to identify vulnerable components on a jar file level but also on class file level.
Ensuring Safe and Reliable AI Interactions with LLM Guardrails
We know that LLMs can and will make mistakes, and while enriching your prompts with the proper context can help align results with your …
Sonar Connect Amsterdam 2025
Sonar Connect Amsterdam : learn about code quality and code security specially when using AI generated code.
What is RAG, and How to Secure It
The implementation of RAG introduces security considerations. Risks such as prompt injection, data poisoning, access control gaps, and data …
Time to panic? AI and Cybercrime legislation is on your doorstep now
As we settle into 2025, legislation around AI and cybercrime is no longer a distant threat or vague aspiration.