https://cyberment.ee/blog/ Practical writing on secure development, DevSecOps and the security of AI-assisted development, including the Build Security In series. en-gb Sun, 11 Oct 2026 08:00:00 +0000 https://cyberment.ee/blog/output-is-not-evidence/ https://cyberment.ee/blog/output-is-not-evidence/ Fri, 21 Aug 2026 08:00:00 +0000 AI development security Three pieces of AI security research landed in a single month, on three different problems. They all point at the same soft spot. https://cyberment.ee/blog/ai-writes-the-code/ https://cyberment.ee/blog/ai-writes-the-code/ Tue, 11 Aug 2026 08:00:00 +0000 AI development security AI ships code faster and repeats old vulnerability patterns with confidence, while NIS2 raises the bar on how software is built. Why security belongs in design and review. https://cyberment.ee/blog/vulnerability-nobody-wrote/ https://cyberment.ee/blog/vulnerability-nobody-wrote/ Fri, 26 Jun 2026 08:00:00 +0000 DevSecOps and CI/CD A free GitHub account was enough to puppeteer the pipelines of Microsoft, Google, Apache and Cloudflare. Here is why your scanner never saw it coming, and what AI coding is about to do to the problem.