[
  {
    "title": "GhostApproval and the Coding-Agent Supply Chain",
    "link": "https://clinesec.substack.com/p/ghostapproval-and-the-coding-agent",
    "pubDate": "Tue, 04 Aug 2026 14:35:12 GMT",
    "description": "A category-level flaw in six major AI coding tools landed with a thud in July. The more interesting story is what the bug says about treating agent-written code, and the agents themselves"
  },
  {
    "title": "The AI Security Questions Your SOC 2 Report Doesn't Answer",
    "link": "https://clinesec.substack.com/p/the-ai-security-questions-your-soc",
    "pubDate": "Mon, 13 Jul 2026 15:21:41 GMT",
    "description": "A field guide to the AI section that enterprise security questionnaires grew between 2023 and 2026, why a SOC 2 attestation doesn't answer it, and the program that does."
  },
  {
    "title": "Your MCP servers are part of your supply chain. Nobody is treating them like it.",
    "link": "https://clinesec.substack.com/p/your-mcp-servers-are-part-of-your",
    "pubDate": "Mon, 08 Jun 2026 13:02:04 GMT",
    "description": "Monday morning — A groggy engineer rolls out of bed, stumbles to the couch, grabs his laptop and opens Cursor while he waits for his coffee to finish brewing."
  }
]