Category

Cybersecurity

9 articles

AI Coding Agents Are Now a Supply Chain Attack Vector
Cybersecurity

AI Coding Agents Are Now a Supply Chain Attack Vector

Three systems asserted a condition and none of them checked whether it still held. A registry reported a package was attested. An evaluation harness reported a model was offline. An assistant reported a package would work.

José Palanco José Palanco ·
Webapplicatiebeveiliging: Beste praktijken, testen en beoordeling voor 2026
Cybersecurity

Webapplicatiebeveiliging: Beste praktijken, testen en beoordeling voor 2026

Webapplicatiebeveiliging is essentieel om uw apps te beschermen tegen cyberaanvallen die zich richten op gevoelige gegevens en de werking verstoren. Deze gids behandelt het belang van webappbeveiliging, veelvoorkomende kwetsbaarheden, beste praktijken en testmethoden, zodat u uw applicatie kunt beveiligen, naleving kunt waarborgen en gebruikersvertrouwen kunt behouden

José Palanco José Palanco ·
15 DevSecOps-trends om uw bedrijf te beveiligen
Cybersecurity

15 DevSecOps-trends om uw bedrijf te beveiligen

Een nachtmerrieachtige beveiligingsinbreuk is voor veel Europese bedrijven werkelijkheid geworden. Leer de 15 transformerende DevSecOps-trends die u moet kennen om van de inbreuklijst af te blijven.

José Palanco José Palanco ·
Plexicus en Céfiros Versterken Cyberbeveiliging in 19 Landen
Cybersecurity

Plexicus en Céfiros Versterken Cyberbeveiliging in 19 Landen

Een nieuwe samenwerking tussen Plexicus en Céfiros zal de applicatiebeveiliging in 19 landen in Latam en Iberia verbeteren. Deze cyberbeveiligings-samenwerking brengt geavanceerde Application Security Posture Management (ASPM) oplossingen naar organisaties die proactief willen verdedigen tegen cyberdreigingen.

José Palanco José Palanco ·
Ready to validate what matters?

Ready to validate what matters?

Plexicus is Proof-Driven AppSec: validated findings, contextual understanding, and reviewed remediation — anchored in evidence, scoped with you.

Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit

0 / 280

No commitment. If you don't fit, we'll tell you.

SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
Private Round For investors