[The Hugging Face Incident Changes the Vulnerability Equation](/content/blog/the-hugging-face-incident-changes-the-vulnerability-equation "Internal link to The Hugging Face Incident Changes the Vulnerability Equation resource"/index.html)
[What Is Grounding? Why AI Coding Assistants Need Better Intelligence](/content/blog/what-is-grounding-why-ai-coding-assistants-need-better-intelligence "Internal link to What Is Grounding? Why AI Coding Assistants Need Better Intelligence resource"/index.html)
[Open Source, Open Infrastructure, and the Space Between](/content/blog/open-source-open-infrastructure-and-the-space-between "Internal link to Open Source, Open Infrastructure, and the Space Between resource"/index.html)
[Request for Comments: CARE, Emergency Remediation, and Maven Central](/content/blog/request-for-comments-care-and-maven-central "Internal link to Request for Comments: CARE, Emergency Remediation, and Maven Central resource"/index.html)
[Q2 2026 Open Source Malware Index: Attackers Abuse Developer Trust](/content/blog/q2-2026-open-source-malware-index-attackers-abuse-developer-trust "Internal link to Q2 2026 Open Source Malware Index: Attackers Abuse Developer Trust resource"/index.html)
[AI Is Forcing a New Open Source Security Model](/content/blog/ai-is-forcing-a-new-open-source-security-model "Internal link to AI Is Forcing a New Open Source Security Model resource"/index.html)
[Focusing on Vulnerability Prioritization Is Missing the AI-Era Point](/content/blog/focusing-on-vulnerability-prioritization-is-missing-the-ai-era-point "Internal link to Focusing on Vulnerability Prioritization Is Missing the AI-Era Point resource"/index.html)
[The Hidden National Security Threat Inside AI-Driven Software](/content/blog/the-hidden-national-security-threat-inside-ai-driven-software "Internal link to The Hidden National Security Threat Inside AI-Driven Software resource"/index.html)
[Miasma Returns: Leo Platform Compromise Shows Why Package Detection Needs Context](/content/blog/miasma-returns-leo-platform-compromise-in-npm "Internal link to Miasma Returns: Leo Platform Compromise Shows Why Package Detection Needs Context resource"/index.html)
[The Rise of Collective Defense for Open Source](/content/blog/the-rise-of-collective-defense-for-open-source "Internal link to The Rise of Collective Defense for Open Source resource"/index.html)
[Signal Over Noise: Reachability Analysis Is the Reality Check SCA Has Been Missing](/content/blog/signal-over-noise-reachability-analysis-is-the-reality-check-sca-has-been-missing "Internal link to Signal Over Noise: Reachability Analysis Is the Reality Check SCA Has Been Missing resource"/index.html)
[Shift Left Is No Longer Early Enough: Software Security Has to Start at Assembly](/content/blog/shift-left-is-no-longer-early-enough-for-software-security "Internal link to Shift Left Is No Longer Early Enough: Software Security Has to Start at Assembly resource"/index.html)