Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Developer secrets management that keeps delivery moving

In March 2025, attackers compromised a GitHub Action used in the development pipelines of more than 23,000 repositories. The malicious code exposed API keys, cloud credentials, SSH keys, and other tokens in workflow logs. Affected teams were advised to review their workflow runs and rotate any credentials the logs exposed.

Cognition's Jeff Wang on demoting the IDE, with Richard Liu from Anthropic

Zero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the complex decisions it takes to ship with AI. This episode features guest co-host Richard Liu, Head of API Products at Anthropic, who sits in for Dev.

The work runs itself with Jeff Wang from Cognition, Richard Liu from Anthropic | Zero-Shot Learning

While AI agents are already capable of writing and shipping code that works, standard operating procedure still requires human oversight and review. Cognition President of New Enterprise Jeff Wang is building a future where that’s no longer the case. In this episode, Jeff joins 1Password CTO Nancy Wang and special guest co-host Richard Liu, Head of API Products at Anthropic, for a conversation on cloud-based agents and how their ability to prove their own work could make human code reviews obsolete.

How AI Governance Reduces Security Risks

AI governance reduces security risk by enforcing least-privilege access, protecting the data and credentials AI systems handle and making every AI action auditable. This matters because most organizations deploy AI faster than they can govern it. Employees adopt unsanctioned tools, and autonomous AI agents are created under existing user identities. Each one adds unmonitored machine identities that expand your attack surface – the exact gap that governance closes.

4 Easy Steps To Secure Mobile Field Work

A field tech at a customer site can log into a scheduling app, pull up an invoice, and snap a site photo in under five minutes while connected to open Wi-Fi. That mobile device holds customer addresses, signed work orders, access codes, account credentials, and job-site photos. Unlike an office workstation that sits behind a firewall and never leaves the building, a field device moves through unfamiliar networks and high-risk physical spaces daily.