AI isn’t just changing how we code—it’s rewriting the rules of application security. See what BSIMM16 reveals about AI’s impact on AppSec priorities. https://jpmellojr.blogspot.com/2026/02/bsimm16-confirms-it-ai-redefines-appsec.html #AppSec #AISecurity #BSIMM16 #DevSecOps #BlackDuck

Open-source vulnerabilities are surging as AI-generated code floods repos, putting the software supply chain under new pressure. https://jpmellojr.blogspot.com/2026/02/ai-coding-boom-drives-surge-in-open.html #OpenSource #AIcoding #DevSecOps #OSS #BlackDuck

Black Duck: AI coding demands modern supply chain governance https://www.developer-tech.com/news/black-duck-ai-coding-modern-supply-chain-governance/ #blackduck #devsecops #opensource #cybersecurity #ai #infosec #developers #technology

I work with #FOSS IPR and licence check sometimes. Now, that #BlackDuck utilizes #AI extensively for assessing the open-source dependencies, the reliability of its reports dropped to be zero.

It hallucinates random Java, Python, RPM and other stuff as being your #go code's dependencies. 🤪 Also, you can get a random unmaintained helloworld repo as a project "you derived yours from" or an "unmarked dependency" because it is nothing but a single go file, two lock files and a README.md and your project happens to have last three out of that four making 75% mach. 🤦 Yes, the content is different, you may have 172 other files, but these 3 matches cannot be a coincidence...

Report from Black Duck shows unmanaged open source components pose serious security risks
https://www.admin-magazine.com/News/Unmanaged-Open-Source-Components-Pose-Serious-Risks-Says-Black-Duck-Report?utm_source=SM
#BlackDuck #security #OpenSource #OSSRA #vulnerabilities #license #compliance #FOSS

https://chinstrap.community/is-it-a-liability-or-is-it-an-asset-and-a-coss-opportunity/

#blackduck #coss #cybersecurity #opensource #oss #ossra

Here's my latest article on Medium titled "Why You Need To Bake Security Into Your CI/CD Pipelines".

I hope you find it interesting! :)

#blackduck
#cicd
#cyberark
#dast
#devops
#devsecops
#github
#hashicorp #hashicorpvault
#iac
#mendio
#sast
#sca
#terraform
#vault
#vcs

https://medium.com/devops-by-nature/why-you-need-to-bake-security-into-your-ci-cd-pipelines-7c53a32d5c4d?sk=fe8f572583f8d49f192cf84644686db3

Slightly sweary rant on the worst thing I ever had to do as a software engineer: manually auditing and confirming the licences of 2500+ npm packages. …

Four Months of Software Licensing Hell https://aceade.net/2025/02/02/four-months-of-software-licensing-hell/

This is why I hate JavaScript development.

#BlackDuck #burnout #JavaScript #npm #SoftwareDevelopment #SoftwareLicencing #venting

Discover the latest trends in software security with BSIMM15. Learn about the importance of SBOMs, AI security, and modern tooling. https://jpmellojr.blogspot.com/2025/01/bsimm15-shines-light-on-compliance-and.html #BSIMM15 #SoftwareSecurity #AI #BlackDuck #AppSec

Check out these black ducks from Maryland.

#BirdsOfMastodon #birbs #duck #blackduck #birder

Reading: A Year at Yumburra #BLACKDUCK
#BrucePascoe (author of #DarkEmu) with Lyn Harwood. 2024
Maps, illustrations & photographs (black & white) of Three Salt Rivers area.

Six seasons on Country: Late Summer, Autumn, Winter, Early Spring, Spring, EarlySummer.

Synopsys releases Black Duck Supply Chain Edition, a new software composition analysis tool https://www.admin-magazine.com/News/Black-Duck-Supply-Chain-Edition-Released-by-Synopsys #SoftwareSupplyChain #security #tools #BlackDuck #SBOM #licensing

TIL: The #BlackDuck KnowledgeBase contains thousand of spam entries... (a search for "Gift Card" returns almost 20k hits)

Tune in to KALW Radio, 91.7, this afternoon (2-4pm PDT) on Folk Music and Beyond when Michele K-Tel will be featuring songs of the great outdoors. Plus the latest from Latin Indie act Y La Bamba, Amy May Ellis from Scotland's Isle of Eigg, Newcastle storyteller Me Lost Me, SF singer songwriter Indiana Hale, and for good measure, the mix of Folk and Flamenco that is "Mendrugo".

#BlackDuck #AmyMayEllis #NoraBrown #Mapache #JoanneSternberg #IndianaHale #MeLostMe #YLaBamba #Mendrugo

@michelektel

https://www.kalw.org/listen-to-kalw

Rubber Duck and Second #RubberDuck by sculptor #VilluJaanisoo made from used car tyres

#Tampere #Örebro #blackduck

Weeps at The Greater Fruit. That was very exhilarating!— crets this yearalthlystron - LOL Moeshe is greaネット初老会OOM a firm connected to #microsoft through #blackduck https://www.linuxinsider.com/story/

05.02 Open source et qualité juridique

https://framatube.org/w/ewhuqqxuy1tAK1mfPYYvCU