Appsec

"L'AppSec est morte." Encore ! Sauf que cette fois, c'est l'IA qui l'a tué. Tous les 5 ans, quelqu'un annonce la mort de l'AppSec. Cette fois, la question mérite quand même d'être posée à cause des évolutions liées à l'…

My goal is to hit $10M from cybersecurity alone. When I said this 12 months ago, people laughed. "Too niche." "Cyber is complicated." "You'll limit yourself." 6 months later, 12 cybersecurity companies have worked wit…

A year and a half ago we were three founders in Lille with a prototype and a conviction. In ten days I get to spend Seattle Tech Week surrounded by the people building the next decade of software 🙌 I moved to Seattle …

April 2026. I watched Claude ship a feature. Not write. Ship. Branch created. Files written. Tests passing. PR opened. Total time: 11 minutes. The dev who triggered the session was getting coffee. Multiply this across…

This is one of our own projects. Every file in the codebase, mapped by how the code connects to itself. Four thousand nodes, eight hundred connections. It happened to come out looking like a face. But the face isn't th…

Writing secure code is easy.* *only when VibeDefend rides inside your coding agent and blocks the dangerous stuff before it's written. No vuln, no bill. #VibeDefend #AppSec #SecureByDesign #AICoding #ClaudeCode npx -…

It took us years to be able to show you this in four minutes. Years of refining how we see security, pushing our tool further, and figuring out what it should really do for the people who build. And we finally got there…

🚨 Cline got compromised by someone opening a GitHub issue 4,000 installs of a poisoned package before it was caught 👇 I broke down the full attack chain on my blog. AI triage bot, prompt injection in the issue title, …

500 bugs that survived decades of human review. Found in weeks. That's the headline. The article explains how Claude Code Security reasons through code (not just patterns), self-verifies findings, and shifts the security…

Un seul caractère dans un en-tête HTTP. C'est tout ce qu'il faut pour contourner l'authentification de milliers d'applications IA Pas un exploit sophistiqué. Un caractère. CVE-2026-48710, surnommée "BadHost", est un ca…