2026
- Goldman restricts Claude Code as a 65B open model tops a benchmark
- AgentMon Live: Claude's answers, agent messages and a history that survives a reload
- Innovation Should Not Require Permission
- Scale without friction: review queues and long-running agents
- Harness comparison: Claude Code, Codex, Kiro or Cursor?
- AgentMon Live: seeing what your coding agent is actually doing
- Linux Misconfigurations: How Autonomous Security Fixes What Administrators Miss
- The EU Cyber Resilience Act Makes Automated Linux Patching and Security Essential
- AI Workflow Automation in 2026: Give Each System a Job
- AI Agents Are Accessing Production Systems Without Permission. Who Is Watching Them?
- AgentMon Start 1.3.0 See what happened then see why
- Codenotary Joins NVIDIA Inception to Accelerate Innovation in Agentic AI Security
- AgentMon Central Dashboard
- Reducing agent costs with AgentMon
- Monitoring agent tools and sessions with AgentMon
- AgentMon Start: AI Agent Monitoring for Developers and Teams
- Keep your Linux Instances Secure for Free
- Agentic Networks Need an Autonomous Control Layer: Why AgentX Is Becoming Urgent
- Who Is Watching Your AI Agents? How AgentMon Stops Rogue Agents Before They Cause Damage
- Claude Sonnet vs. DeepSeek V4 Flash: An S3 Storage Showdown
- Runtime Enforcement Is the Missing Layer in Agentic Security
- AI Agents Need Runtime Security, Not Just Detection
- What Cursor Under SpaceX Could Mean for Developers in the Long Term
- The Real Risk with AI Agents Is Not What They Do. It’s What They Quietly Stop Doing.
- SBOMs in the Age of AI
- Why the U.S. Government Was Right to Suspend Anthropic's Mythos 5 and Fable 5
- Securing AI Usage Where it’s Most Dangerous
- AI Agent Cost Monitoring: Track Spend Before It Spirals
- AI Agent Performance Monitoring with OpenTelemetry
- AI Agent Security: Stop Prompt Injection and Secret Leaks
- AI Agent Risk Monitoring: Runtime Visibility & Policy Enforcement
- The Death of Patch Cycles: Inside the FS-ISAC Mythos-Era Warning
- From Game Agent to AI-Powered Security Remediation: Training a Deep Q-Network That Actually Works
- AI Exploit Generation: How Reinforcement Learning Is Changing Cybersecurity
- Linux Security Requires a Holistic View
- Traefik, k3s and the proxy protocol
- Your AI Agents Already Have a Blind Spot. You Just Cannot See It!
- MCP's Dependency Problem, Solved in One Download
- One Platform, One Login: How Codenotary Is Redefining Linux Security Operations
- Protecting the Software Supply Chain
- Preventing AI Agents from Leaking Your Secrets
- Codenotary Granted U.S. Patent for Revolutionary Cryptographic Proof Technology
- SBOM for AI-Native Software: Why sbom.sh Goes Beyond Traditional Dependency Tracking
- React4Shell and Log4Shell: Why Patch-Only Security Is No Longer Enough
- DNS Leaks Explained: How Your Location Is Exposed Even Behind a VPN, and How to Restore Your Privacy
2025
- The Deepening of Language into the Machine
- CVE-2025-59287: How a WSUS Metadata Flaw Enables Enterprise-Wide Compromise
- What Are LOLBins and How Are They Used in Modern Cyber Attacks?
- Codenotary Raises $16.5M to Accelerate Global Expansion of Intelligent Cybersecurity & Trust Automation
- The Vibe Coding Revolution: Setting Up Your AI-Powered Development Environment on Ubuntu
- Detecting the Massive NPM Supply Chain Attack
- The Double-Edged Sword: AI's Non-Determinism in Software and IT
- A Reflective Perspective On Replit's AI Incident
- When AI Goes Rogue: The Replit Incident and Its Lessons
- AI-Powered Agentic Monitoring: The Next Generation of Linux Instance Scanning
- Why MITRE ATT&CK-Based Monitoring is Essential for Today’s Enterprise
- AI Integration for Linux apps with an agent approach
- Agentic Security Scanning for Linux Servers: MCP Integration for Next-Gen Threat Detection
- Linux Vulnerability Surge of 2024: Strategic Responses for IT Leaders
- Step-by-Step Guide: Refactoring a Large Rust Codebase with aider.dev and Custom LLMs
- Using Claude Code and Aider to Refactor Large Projects: Enhancing Maintainability and Scalability
- FIPS 140-3: The Cryptographic Backbone for PCI-Compliant E-Commerce Sites
- Cost Comparison Windsurf, Codex, Cursor
- Choosing the Right Programming Language for ChatGPT vs Claude: A Technical Comparison
- Which AI Code Assistant is Right for You?
- The Security Challenges of the Model Context Protocol Ecosystem
- Critical Cybersecurity Infrastructure in Jeopardy: MITRE's CVE Program Faces Uncertain Future
- Streamlining Security Management: Integrating Guardian Security API with Google Sheets
- Streamlining Security Patch Management with Guardian and Zendesk APIs: Focus on Fixable Vulnerabilities
- CISA's Known Exploited Vulnerabilities Catalog: A Crucial Tool for Cybersecurity Defense
- Five Trends for You in 2025 Software Supply Chain Protection
- Dissecting CVE-2025-2825: A Critical Authentication Bypass in CrushFTP
- immudb v1.9.6 Released: Enhanced Security and Performance
- Codenotary’s Guardian: 630 Times Faster Than OpenSCAP: A Security Revolution
- Understanding the Critical IngressNightmare Vulnerabilities in Kubernetes
- GitHub Actions Supply Chain Attack: Critical Security Warning
- Secured Patent for Cryptographically Verifiable Database System
- EU Cyber Resilience Act - How Codenotary Enhances Compliance
- Defending Apache Struts: Codenotary Guardian's Swift RCE Protection
- Identifying and Neutralizing Attacks On your Linux Instances In 2025
- Vulnerability Management and Continuous Threat Exposure Monitoring
- Beyond Linux Updates: Holistic Security Remediation with Guardian AI
- Most dangerous Cyberattacks of the last 12 months
- Enhancing Asset Monitoring: Why Guardian Outperforms Open-Source Tools
- The U.S. Army's SBOM Mandate
- Guardian: Managing Linux Security from Your Windows Environment
- How to Implement Two-Factor Authentication (2FA) for SSH on Ubuntu and RHEL
- How to Block Brute-Force Attacks on SSH: Step by Step guide
- Securing Linux Systems: Why Vulnerability Scanning Matters
- Synchronizing a Remote Directory with a Local Directory Using rsync, ssh, and Compression
- Beyond CVSS: Contextual Intelligence for Vulnerability Management
- Guardian vs OpenSCAP: A Comparative Analysis
- Spotlight on Codenotary and SBOM Market Growth: A Thank You to OpenPR for Raising Awareness
2024
- The Perfect Disguise: Analyzing a Sophisticated Year-Long NPM Supply Chain Attack
- Popular npm Package Compromises Cryptocurrency Wallets
- Common Failures in Securing Software Supply Chains
- SBOM.sh Latest Release: Updates and New Features
- LitLyx: A Fresh Take on Event Tracking
- Simplifying SBOM Signing with SBOM.sh for CycloneDX JSON SBOMs
- GitHub's Latest Dependency Graph Update: What Developers Need to Know
- Enhancing Supply Chain Security: Signing SBOMs with CycloneDX
- Impact of Large Language Models on Software Supply Chain Security
- Die Wichtigkeit der CBOM und CycloneDX 1.6: Warum Jetzt der Richtige Zeitpunkt ist, kryptografische Module zu Katalogisieren
- Creating a Standard Compliant SBOM from a Distributions Package Manager
- Understanding the Difference: Vulnerabilities vs. Vulnerability Exploitability eXchange (VEX)
- Understanding the European Cyber Resilience Act (CRA)
- The Jenkins Automation Server Supply Chain Attack
- Enhancing security with OWASP dep-scan and CycloneDX 1.6 on sbom.sh
- Understanding the Impact of the EU Cyber Resilience Act on Business Operations for CISOs
- PR: Codenotary to Support SBOM Standards: CycloneDX 1.6 and SPDX 3.0
- XZ Vulnerability: Understanding Complex Supply Chain Attacks
- Binary Security: Using BLint for Effortless Generation of SBOMs
- Learn more about the backdoor in upstream xz/liblzma leading to ssh server compromise
- Stärkung der Cybersicherheit in Europa: Der Einfluss von SBOMs und Attestation gemäß dem Cyber Resilience Act
- OpenSSH: Leveraging the Match Directive
- Enhance Your Linux Server Governance with the ccze Command
- SSH Error: Unable to Negotiate - No Matching Cipher Found
- Codenotary’s SBOM.sh: Redefining Software Security for 100,000 Projects
- Automating Reverse SSH Tunnels to Maximize Remote Connectivity
- Cracking the Code: Understanding VEX and Prioritizing Vulnerabilities
- Okta Breach and the Growing Need for Better Cybersecurity
2023
- Trustcenter 4.0 with New Machine Learning Guided Search Engine
- Managing Proxmox for Production Environments
- Importance of Provenance Verification for Softwares
- Making the Most of Dependency Graphs for Softwares
- Guardians of Software Security: How SBOMs Impact Your Organization
- Monthly Quality Report for SBOM Tools (October 2023)
- GitHub Blunder: Accidental Exposure of 38TB of Sensitive Data
- sbom.sh: Your Ultimate SBOM Management Solution
- Enhancing Cybersecurity through SBOMs with sbom.sh
- Simplified SBOM Sharing with sbom.sh
- Monthly Quality Report for SBOM Tools
- Simplifying Vulnerability Prioritization with EPSS 3.0
- Ensuring PDF Document Integrity with Immudb Vault and QR Codes
- How to Share SBOM (Without Software Installation)
- Introducing SBOM.sh: Effortless SBOM Sharing
- Navigating the Path to Secure Software with SBOM
- AI-Gateway: Advanced AI Integration for Workforce Communication
- Decoding the UNC4899 Supply Chain Attack
- Certificate and Public Key Pinning Made Easy with immudb Vault
- Gartner Hype Cycle Recognizes Codenotary in Open Source Software Report
- Using Immudb Vault To Store Documents Immutably and Safe from Tampering
- Tamper-Proof Encrypted Communication Channel Backed by immudb Vault
- Why You Should Use an Immutable Database To Share Structured Data
- Bringing PostgreSQL audit to a new level
- There is a need for an SBOM Exchange Platform
- Track Slack content changes in immudb Vault
- Store Docker Container logs for audits in immudb Vault
- Welcome immudb Vault - the fully managed immutable cloud database
- The 3CX Breach: A Wake-up Call on the Risks of Software Supply Chain Attacks
- Joining the Snyk Technology Alliance Partner Program
- Secure your software supply chain with Trustcenter using GitHub Actions
- Secure your software supply chain with Trustcenter
- Old Software Bugs exploited by Majority of Ransomware Attacks last Year
- CISA Director urges mentality shift in regards to cybersecurity
- Trustcenter/Teams - a software component security and risk analysis platform
- Why SBOM is important for software development
- Codenotary among three companies named IDC Innovator
- The advantages of DevSecOps compared to traditional Security Operations Centers
- Monitoring certificate expiration with Prometheus
- Trustcenter helps complying with NIST SSDF
- Apps Need to Provide Their Own SBOM
- Ongoing massive phishing software attacks
2022
- TrueSBOM for Serverless Applications
- One year has passed and Log4Shell is more dangerous than ever before
- Your Application Development Organization Inadvertently Leaves Door Open for Hackers
- When hidden Java packages put your company at risk
- Introducing the Developer’s Guide to SBOMs
- WHAT IS AN SBOM BILL OF MATERIALS AND WHAT DOES IT DO?
- Rust-based Ransomware can hit anywhere including Windows, Linux and VMware ESXi
- A Jenkins shared library to execute commands with vcn, our CLI tool
- A GitHub Action to download and use our enterprise tool vcn in CI
- Serious security vulnerabilities in Atlassian Confluence affect many organizations
- Notarizing Container images using JFrog’s API
- Always know about the dependency of your Pods: here comes SBOM operator for Kubernetes
- The rise of supply chain attacks
- Dirty Pipe, a new vulnerability
- Get a Handle on Your Software Supply Chain
- Use Google Sheets Apps Script to track Open Source GitHub and Docker statistics
- TechStrong TV interviews Dennis Zimmer about securing Software Supply Chain
- Immutability Specialist Codenotary Now Offers Trusted Software Supply Chain Assurance in a Fast, Easy, Inexpensive Cloud
- Detect unwanted dependencies in your software like versions of faker.js or colors.js
- Log4j, the brick movie
2021
- Apache Log4j vulnerability shows the importance of SBOMs
- Risks Of Not Understanding The Software Bill Of Materials
- Introducing the SLSA framework
- Software_Bill_of_Materials_SBoM_what_it_is_and_why_it_is_so_important
- accenture-falls-victim-to-ransomware
- installing-immutable-ledger-on-almalinux
- sbom-executive-order
- when-digital-certificates-fail
- immutable-infrastructure
- Secured-Github-Actions
- Jenkins Build Deployment Pipeline: A How To for Ensuring Integrity
- the-trusted-CICD-pipeline
2020
- ubuntu-how-to-use-intel-optane-memory-for-ssd-caching
- enlarge-a-disk-and-partition-of-any-linux-vm-without-a-reboot
2019
- use-github-actions-for-validated-builds
- fully-trusted-gitlab-pipeline
- validated-builds-using-circleci-ci-cd
- github-actions-are-live
- vmware-vsphere-install-centos-8-and-run-minishift
- powershell-file-trust
- securing-your-azure-devops-ecosystem-jenkins-and-kubernetes-aks
- securing-your-azure-devops-ecosystem-jenkins-and-kubernetes-aks-using-Codenotary-part-1
- notarizing-for-the-first-time-report-from-the-frontline-customer-feedback
- docker-swarm-monitoring
- install-and-use-docker-swarm
- using-blockchain-to-protect-against-wire-fraud-scams
- recover-kubectl-config-running-kubernetes-on-ubuntu
- installing-a-openshift-test-environment-using-minishift
- 410m-microservices-security-market-validation-and-the-cicd-pipeline
- Find & Continuously monitor your Kubernetes-environment for unwanted Docker images
- How to Avoid VMWare ESXi Timedrift?
- debugging-crashed-kubernetes-container
- The Ultimate Docker Commands Cheat Sheet