AARM: Finding a Path to Secure the Agentic Runtime
Blog Published: 04/30/2026
Over the past year, I have found myself returning to the same observation in many different conversations: we are not simply watching AI improve. We are watching a new operational layer in computing emerge in front of us. Autonomous agents are beginning to write code, manage infrastructure, p...
SAGE: The Format STIX, OSCAL, and SARIF Don't Cover
Blog Published: 05/04/2026
Security research lives in PDFs. PDFs are good for humans and useless to machines. That mismatch was annoying a few years ago. It's expensive today. Detection engineers are feeding those PDFs into RAG pipelines so their copilots can answer questions about threat actors, control mappings, an...
