AI agents gone rogue
The July 2026 Hugging Face / OpenAI incident was driven end-to-end by an AI agent. We walk the RCE chain through the lens of runtime containment.
By bifrost securityRead more
Thought Leadership
33 posts in this category
Beyond severity: triaging CVEs by what they actually entail
CISA moves federal vulnerability management off CVSS severity and onto real-world risk with new directive. We agree with that direction, and it mirrors how we think about CVEs: severity is one dimension among several, and runtime context is what narrows the list to the vulnerabilities that matter for your specific use.
By Hannes UllmanRead more
The outcomes of running bifrost in a CRA world
What actually changes for a security team once a runtime-driven platform meets the Cyber Resilience Act: a smaller backlog, self-generating evidence, a 24-hour reporting clock you can hit, and metrics that mean something to a board.
By Hannes UllmanRead more
The Cyber Resilience Act, in plain terms
An introduction to the EU Cyber Resilience Act, focused on companies that ship SaaS or containerised software into customer environments.
By Hannes UllmanRead more
Why Behaviour Allow-Listing Beats Endless Detection Rules in Container Security (Part 2)
Modern container environments move fast, and so do attackers. Traditional security approaches based on signature matching or static detection rules are...
By Hannes UllmanRead more
Why Behaviour Allow-Listing Beats Endless Detection Rules in Container Security (Part 1)
Modern container environments move fast, and so do attackers. Traditional security approaches based on signature matching or static detection rules are...
By Hannes UllmanRead more
NIS2 doesn’t care how many CVEs you have. It cares about what breaks in production
As NIS2 has become law in Sweden, we continue to explore the impact it will have on software engineering teams....
By Hannes UllmanRead more
Containers changed the attack surface. But security models didn’t
The shift from virtual machines to containers and Kubernetes fundamentally changed how software is built, shipped, and operated. Infrastructure became...
By Hannes UllmanRead more
The Hidden Risks of AI-Coding: Hallucinated Dependencies
Hallucinated dependencies become a vulnerability when attackers exploit common package names generated by AI models. This is called slopsquatting, and it is a...
By Hannes UllmanRead more
☔️ When Alert Fatigue Becomes the Real Threat
Alerts are pouring in. Your team’s stretched. And the critical signal is buried in noise.Bifrost flips the model: we understand each service’s legit runtime...
By Hannes UllmanRead more
✂️Cut costs, not security ✂️
Here’s how your company can cut costs without compromising on security by using bifrost:⚙️Automate manual processes⚠️Prevent costly breaches️Protect the...
By Hannes UllmanRead more
Thought Leadership16 September 2025
Who really owns your digital infrastructure?
Europe relies heavily on foreign tech giants, the issue of digital sovereignty has become more crucial than ever. It’s not just about where your servers are...
By Hannes UllmanRead more
Thought Leadership10 September 2025
🤖AI is rewriting the rules of cybersecurity 🤖
As a driving force behind innovation across nearly every industry, AI tools have revolutionised the software development landscape. In cybersecurity, AI brings...
By Hannes UllmanRead more
Not just another security tool
We know there’s plenty of security tools out there. But bifrost is built to do more than just alert you. It protects you automatically, from testing to...
By Yra Olsen ÖbrinkRead more
The Illusion of Protection
Are you sure that your security controls are adequate in practice, not just on paper? Every day, companies spend money on tools, policies, and processes that...
By Yra Olsen ÖbrinkRead more
AI writes the code, but who checks the security?
AI-generated code is quickly becoming a central part of modern software development. These AI agents can write, test, and deploy code with minimal human input,...
By Yra Olsen ÖbrinkRead more
For CTO and CISOs
Stop firefighting security threats and focus on what matters, building and shipping innovative products. bifrost automates security, empowering developers,...
By Bifrost TeamRead more
Industry Series: HR Tech 📄
The evolution of HR Technology is transforming how organisations attract, retain, and engage talent. As workforce expectations shift and hybrid models become...
By Bifrost TeamRead more
The Compliance Fatigue is Real
You’ve written the policies. You’ve stored the logs. But are you confident that your security controls are working in practice, or just on paper?...
By Katrin PuuseppRead more
Industry series: Online Gambling 🔍
Did you know the UK online gambling market generated over £15 billion in 2023? As the industry grows, so do the security challenges it faces. In the fast-paced...
By Bifrost TeamRead more
Scaling software quality & security with Applied AI
In a week bifrost security is co-hosting an evening with **QA.tech** and ** Netlight** to explore how DevOps and DevSecOps teams are using AI to deliver...
By Bifrost TeamRead more
For DevOps
**For DevOps ⚙️** We get it, DevOps is all about speed, reliability, and efficiency. But security? It often feels like an afterthought. Traditional security...
By Bifrost TeamRead more
Industry Series: FinTech
From mobile transfers and electronic payments to cryptocurrency trading, the fintech industry is improving the efficiency and convenience of the financial...
By Bifrost TeamRead more
Thought Leadership19 March 2025
Why Are Security Leaders Considering Stepping Down?
With rising cybersecurity threats, increasing legal scrutiny and the introduction of security regulations, CISOs are under significant pressure. In the annual...
By Bifrost TeamRead more
Industry Series: RegTech 🔎
The rise of RegTech is reshaping how businesses manage compliance and risk. As regulatory demands grow, more companies turn to RegTech providers to streamline...
By Bifrost TeamRead more
Industry series: HealthTech 🔎
Over the last decade, software, cloud computing and AI have increasingly been incorporated into healthcare. This has caused healthcare to move to online...
By Bifrost TeamRead more
The state of Kubernetes security 2024
As 2024 has come to an end, we take a look back at last year's Kubernetes environment. In a recent study by Redhat, insights from 600 professionals across...
By Bifrost TeamRead more
Containerised Applications in Production - The New Norm
In the report “Protecting the Cloud Native Enterprise: Build the Foundation to Secure Your Containers in Runtime” by @Aqua, 90% of global organisations are...
By Bifrost TeamRead more
Thought Leadership13 November 2024
Key Challenges and Insights from CISOs 🕵🏻
In the wake of the ongoing global transformation, cybersecurity's challenges have taken on new dimensions. The COVID-19 pandemic has accelerated changes,...
By Bifrost TeamRead more
Thought Leadership15 October 2024
Top 5 Challenges of Cyber Security ⚠️
Cyber security breaches have been projected to cost 8 trillion USD a year in damages. Comparable to the world's third-largest economy, following the US and...
By Bifrost TeamRead more
Insights from the ONE Conference 2024 🌟
bifrost attended the ONE Conference in the Hague last week. We participated in great discussions and presentations. Here are our key takeaways from the event...
By Bifrost TeamRead more
Thought Leadership10 September 2024
The 2024 State of SSCS
In 2024, the need to secure your software supply chains has become more evident than ever. A recent Software Supply Chain Security (SSCS) report by Checkmarx...
By Bifrost TeamRead more
Why is Cloud Native Security important to you?
The growing landscape of cloud computing has revolutionised the way modern applications are built. Bringing a wave of agility, automation, and innovation....
By Bifrost TeamRead more