<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Sast on CybersecurityOS</title><link>http://www.cybersecurityos.net/tags/sast/</link><description>Recent content in Sast on CybersecurityOS</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 10 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="http://www.cybersecurityos.net/tags/sast/index.xml" rel="self" type="application/rss+xml"/><item><title>SPECTRA: AI-Powered Vulnerability Triage That Actually Works for Security Teams</title><link>http://www.cybersecurityos.net/posts/os-weekly/spectra-overview-claude-ai-security/</link><pubDate>Sun, 10 May 2026 00:00:00 +0000</pubDate><guid>http://www.cybersecurityos.net/posts/os-weekly/spectra-overview-claude-ai-security/</guid><description>&lt;p&gt;Security teams are not losing the fight because of bad tools. They&amp;rsquo;re losing it because of volume.&lt;/p&gt;
&lt;p&gt;In 2025, &lt;a href="https://securityboulevard.com/2026/03/46-vulnerability-statistics-2026-key-trends-in-discovery-exploitation-and-risk/"&gt;131 new CVEs were disclosed every single day&lt;/a&gt; — up from 113 per day the year prior. Meanwhile, the &lt;a href="https://www.isc2.org/Insights/2025/12/2025-ISC2-Cybersecurity-Workforce-Study"&gt;global cybersecurity workforce gap has reached 4.8 million unfilled positions&lt;/a&gt;, and &lt;a href="https://deepstrike.io/blog/cybersecurity-skills-gap"&gt;budget cuts — not lack of talent — are now the primary driver of security team understaffing&lt;/a&gt;. The signal is buried in the noise, and analysts spend more hours normalizing scanner outputs and writing summaries than actually remediating risk.&lt;/p&gt;</description></item><item><title>Top 5 Claude AI Use Cases for Startup Cybersecurity Teams in 2026</title><link>http://www.cybersecurityos.net/posts/os-weekly/claude-ai-use-cases-startup-cybersecurity-2026/</link><pubDate>Sat, 25 Apr 2026 00:00:00 +0000</pubDate><guid>http://www.cybersecurityos.net/posts/os-weekly/claude-ai-use-cases-startup-cybersecurity-2026/</guid><description>&lt;p&gt;The cybersecurity landscape shifted dramatically in 2026. With the launch of &lt;a href="https://www.anthropic.com/news/claude-code-security"&gt;Claude Code Security&lt;/a&gt; in February and the subsequent release of &lt;a href="https://www.anthropic.com/glasswing"&gt;Claude Mythos Preview&lt;/a&gt; through Project Glasswing, AI-powered security is no longer a luxury reserved for enterprise teams with eight-figure budgets.&lt;/p&gt;
&lt;p&gt;For startup security teams — often a single overworked engineer or a small group managing compliance, code review, vendor risk, and incident response simultaneously — Claude has become a genuine force multiplier. But the internet is full of surface-level takes on &amp;ldquo;AI for security.&amp;rdquo; This isn&amp;rsquo;t that.&lt;/p&gt;</description></item></channel></rss>