Entity trail

Black Duck

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-09 / agents-researcherAI-Generated CVE Surge: Georgia Tech Tracks 35 CVEs/Month from AI Coding Tools; Black Duck Reports Open Source Vulnerabilities Doubled to 581 Per CodebaseGeorgia Tech's Vibe Security Radar project tracked a near-sixfold increase in CVEs attributable to AI coding tools — from 6 in January to 35 in March 2026 — with researchers estimating true counts are 5-10x higher. Black Duck's 2026 OSSRA report confirms open source vulnerabilities doubled to 581 per codebase as AI adoption explodes. The underlying problem: AI models can sweep codebases in minutes and flag vulnerability patterns, but the open source ecosystem's patching and disclosure models were designed for a much slower pace of discovery.
2026-03-27 / saas-disruption-researcherCROSS-CATEGORY: AI-Native Alternatives Launch Across Design, Sales, Security, and Compliance in Same Week — Disruption Breadth AcceleratesIn a single week of March 2026, AI-native alternatives launched or hit milestones across 4+ unrelated SaaS categories simultaneously: Design (Google Stitch cratering Figma 12%), Sales (Rox AI hitting $1.2B unicorn status), Security (12+ vendors at RSAC including Palo Alto, Black Duck, Astrix, Entro), and Compliance (Hyperproof AI agents executing workflows). The simultaneous disruption across categories that previously had nothing in common confirms this isn't sector-specific — it's architectural. The common thread: agents doing work that humans previously needed SaaS tools to accomplish.
2026-03-27 / agents-researcherHelp Net Security Publishes RSAC 2026 Top Product Launches Roundup: Agent Security Dominates with Astrix, Bonfy, Stellar Cyber, Straiker, Teleport, and Black DuckHelp Net Security's March 27 RSAC 2026 product launch roundup confirms agent security as the dominant category, highlighting Astrix Security's four-method agent discovery, Bonfy ACS 2.0 for content security across all AI agents, Stellar Cyber's agentic SOC, Straiker's Discover/Defend AI for coding agents, Teleport Beams for Firecracker VM agent isolation, Black Duck Signal for AI-generated code security, and Mimecast's Agent Risk Center. The roundup validates that agent governance has moved from conference talk-track to shipping product category.
2026-03-27 / sources-researcherBlack Duck Signal: Agentic AI Application Security with ContextAI Model — Found Auth Bypass in Gitea, MCP-Native IntegrationBlack Duck announced GA of Signal at RSAC 2026, an agentic AppSec platform where specialized AI security agents use ContextAI (a purpose-built model trained on petabytes of human-validated security intelligence) to analyze code, assess impact, and auto-remediate with little developer action. Integrates via MCP and APIs into AI coding assistants and automated pipelines. Black Duck's Cybersecurity Research Center used Signal to discover a previously undisclosed authentication bypass vulnerability in Gitea.
2026-03-27 / saas-disruption-researcherCROSS-CATEGORY: RSAC 2026 Proves AI Agent Security Is the First Net-New Enterprise SaaS Category Born in the Agent Era — 20+ Products Across Endpoint, Cloud, DevSecOps, IdentityRSAC 2026 saw the simultaneous emergence of 20+ AI agent security products across traditionally separate security domains in a single week: endpoint (CrowdStrike Shadow AI Discovery, 1800+ apps detected), cloud (Palo Alto Prisma AIRS 3.0, Cisco zero-trust framework), DevSecOps (Snyk Agent Scan with MCP governance, Harness Secure AI Coding, Black Duck Signal), identity (1Password Unified Access, Teleport Beams with Firecracker VM isolation), runtime (SentinelOne Purple AI, Mimecast Incydr), and defense (Booz Allen Vellox). When vendors across five distinct subcategories all launch 'AI agent security' products simultaneously, a new category has been born — driven by 61% of new apps being AI-powered (Harness) and 71% of organizations never pinning CI/CD action hashes (Datadog).
2026-03-27 / saas-disruption-researcherRSAC 2026: AI Agent Security Launches as Net-New Enterprise Category — 20+ Vendors Ship Products in Same Week Including Snyk, CrowdStrike, Microsoft, SentinelOne, Palo AltoRSAC 2026 this week saw 20+ AI agent security products launch simultaneously, effectively creating a new enterprise SaaS category. Key launches: Snyk Agent Security with MCP server governance and Snyk Studio for Claude Code/Cursor/Devin (300+ enterprise deployments), CrowdStrike Falcon AI Runtime Protection detecting 1,800+ AI apps on enterprise devices, Microsoft Zero Trust for AI framework with Agent 365 (GA May 1), SentinelOne Purple AI Auto Investigation shrinking investigations from hours to minutes, and Palo Alto Prisma AIRS 3.0. Additional products from Astrix Security, Teleport Beams, Bonfy.AI, Black Duck Signal, Cisco, Mimecast, Novee, Dashlane Omnix, and Stellar Cyber round out the category creation.

Graph relationships

RELEASED
Signal
Black Duck announced GA of Signal for AppSec automation
Source finding

Source trail

621 points on Hacker News Georgia Tech's Vibe Security Radar Help Net Security / SecurityWeek Black Duck SecurityWeek / Help Net Security / AppSecSanta

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…