The Qwiet blog

After years of uncovering investment and retail banking fraud, I’ve developed a finely tuned radar for risk disguised as innovation. So when security vendors market “community rules” as a revolutionary leap forward, my fraud-detection instincts go haywire. It’s a wolf in sheep’s clothing, a potential threat masquerading as transparency. Let’s be clear: regulated financial institutions […]

RSA 2025 is almost here, and if you plan just to wing it, good luck. With a packed schedule and an overwhelming amount of vendor noise, this year’s conference will be full of AI hype, a key theme shaping the discussions and presentations. You’ll need a solid plan to cut through the clutter and get […]

Did you miss the first post? Check out: AppSec House of Cards: Legacy Scanners vs. Agentic Workflows Modern applications aren’t monoliths. They’re sprawling, service-based systems built in multiple languages and stitched with queues, APIs, and serialization layers. In this environment, user input doesn’t just move it migrates across boundaries. The Business Risk: When One Missed […]

Security engineers know that some critical vulnerabilities don’t appear in simple scans. They cross language boundaries, involve dynamic behavior, or emerge from patterns that don’t exist in any public rule set. Traditional SAST tools, especially those built on static rules or syntax matching, weren’t designed to catch these risks. Graph-based analysis changes that. It enables […]

Recent breaches at GitLab and GitHub and new research into AI-driven coding expose a troubling pattern in software security: developers have built unified pipelines of tightly integrated tools. While these boost efficiency, they introduce new risks if attackers breach the platform: GitLab disclosed an actively exploited vulnerability tied to how CI/CD job tokens were handled […]

Help me CPG, you’re our only hope! The fundamental challenge in software security today isn’t just finding vulnerabilities, it is the inherently fragmented understanding of complex systems. When we examine why critical vulnerabilities persist despite sophisticated expertise and tooling, we often find they exist in the connections and interactions that traditional approaches are simply blind […]

The latest executive order on cybersecurity issued today, Jan 16 2025, covers a lot of ground across multiple cybersecurity domains, from software security to post-quantum cryptography. The White House is sending a clear message to both the public and private sectors that the threats from foreign adversaries are more dire than ever. It comes at […]

GitHub Copilot, the AI-powered coding assistant, has emerged as a game-changer in the software development landscape. By harnessing the power of generative AI, Copilot promises to accelerate coding tasks, boost developer productivity, and even democratize coding by making it more accessible to newcomers. However, as with any transformative technology, there are caveats. In Copilot’s case, […]

Qwiet AI and the ancient Greek physicians like the father of medicine Hippocrates have much in common. Hippocrates highlighted the significance of a healthy diet and lifestyle in preventing diseases and acknowledged the root cause of physical and psychological ailments as diet and lifestyle choices (Διαιτήμασί in Greek), and now Qwiet AI is delivering his […]