❌

Visualização normal

Antes de ontemSpiderLabs Blog
  • ✇SpiderLabs Blog
  • Securing the Software Development Lifecycle and Supply Chain in an AI-Forward World Pauline Bolaños
    It’s no secret how artificial intelligence (AI)-powered tools and systems, which promise users exponential productivity, growth, and efficiency, have quickly become integral in organizations' processes and workflows. AI — specifically generative AI (GenAI) and large language models (LLMs) — is now a foundational element of the software development process, allowing developers to build and scale software at a velocity that would have been impossible a mere decade ago. These technologies have perm
     

Securing the Software Development Lifecycle and Supply Chain in an AI-Forward World

22 de Outubro de 2026, 11:00

It’s no secret how artificial intelligence (AI)-powered tools and systems, which promise users exponential productivity, growth, and efficiency, have quickly become integral in organizations' processes and workflows. AI — specifically generative AI (GenAI) and large language models (LLMs) — is now a foundational element of the software development process, allowing developers to build and scale software at a velocity that would have been impossible a mere decade ago. These technologies have permeated the software development lifecycle (SDLC), from ideation to maintaining software, ensuring that concepts are translated swiftly into code.

PHP2Shell: Critical RCE Vulnerabilities Affect a Large Majority of Web Servers

22 de Outubro de 2026, 09:18

Update Oct 22 2026: New sections were added for “Observed Threat Activity and Indicators” and “Mitigations and Recommendations.”

Reversing NVIDIA’s CVE-2026-24190: How a Kernel Flaw Put Enterprise AI Clusters and Workstations at Risk

15 de Junho de 2026, 11:00

Executive Summary: Bypassing Boundaries in Enterprise AI Infrastructure

The massive global adoption of artificial intelligence (AI) and large language models (LLMs) has fundamentally rewritten the enterprise threat landscape. Modern high-compute bare metal clusters, cloud nodes, and developer workstations now routinely host dense data science stacks running frameworks such as TensorRT LLM, PyTorch, and deep CUDA execution layers. To process complex matrix calculations efficiently, low-privilege user mode tasks require direct pipelines straight to the underlying graphics acceleration hardware.

Two Approaches for Offensive Testing of AI Systems: Architecture-led AI Application Penetration Test and Threat-led AI Red Team Assessment

27 de Maio de 2026, 10:59

Artificial intelligence (AI) is changing the shape of the application attack surface. A traditional application assessment usually starts with familiar questions, such as:

❌
❌