The Agentic Flattening
Twitter caused a real problem for the world. They “flattened” different contributors (experts, amateurs, trolls) into one feed with the same visual weight. You lost the contextual cues (credentials,
#appsec
Posts tagged #appsec
React2Shell: The Next Struts2-Style Bug Parade?
The React2Shell bug is giving me major déjà vu, and I think there are important lessons here in Abstract vs. Concrete Risk (maybe in B2B sales too—I haven’t fully thought that part through yet). In the 2010s, the Apache Struts team made (what appears...
The Battle of AI Wrappers vs. AI Systems
To do vulnerability triage, we use a number of tools: composable agents, workflows, zero-shot LLM calls, deep research, knowledge bases, code analysis tools — you get it. But, does any of it matter? We need to know if a simple “AI wrapper” from some ...
Pixee’s Approach to Security Focused UX and Design
An interview with Staff Product Designer Terra Caussin on bridging the gap between security and usability
The Illusion of Progress: Why Prioritization Alone Won't Make Us Safer
The Industry Needs Remediation, Not Just Prioritization
