--- title: "#software-security articles | Hashnode" description: "Explore 52 articles tagged #software-security on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/software-security" --- Tag # #software-security 52 posts · 1 followers [404 Founders](https://hashnode.com/@404-founders) · [Oct 27](https://hashnode.com/posts/cra-sbom-requirements-software-manufacturers-december-2027/6ae1f0e522b74bab41f4cf74) ### [CRA SBOM Requirements: What Software Manufacturers Must Document by December 2027](https://404-founders.com/blog/cra-sbom-requirements-software-manufacturers-december-2027?utm_source=hashnode&utm_medium=feed) What the CRA SBOM requirements ask of software manufacturers before the 11 December 2027 deadline, where the gaps still sit, and what to build now. 11 min read · [404-founders.com](https://404-founders.com/blog/cra-sbom-requirements-software-manufacturers-december-2027?utm_source=hashnode&utm_medium=feed) [Marc Wojcik](https://hashnode.com/@thecgaigroup) · [Sep 24](https://hashnode.com/posts/agentic-coding-loops-enterprise-guide/6ab5696788c3a1536cc034de) ### [Agentic Coding Loops: The Enterprise Engineering Guide](https://blog.thecgaigroup.com/agentic-coding-loops-enterprise-guide?utm_source=hashnode&utm_medium=feed) Inside the Ralph Wiggum loop, the governance gaps it exposes, and the guardrails enterprises need to adopt autonomous agents safely 13 min read · [blog.thecgaigroup.com](https://blog.thecgaigroup.com/agentic-coding-loops-enterprise-guide?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/agentic-coding-loops-enterprise-guide/6ab5696788c3a1536cc034de) [praveen](https://hashnode.com/@thecoderegistry) · [Sep 22](https://hashnode.com/posts/top-20-tools-for-enterprises-to-assess-overall-software-risk/6ab2e218582b9225191b07e8) ### [Top 20 Tools for Enterprises to Assess Overall Software Risk](https://thecoderegistry.hashnode.dev/top-20-tools-for-enterprises-to-assess-overall-software-risk?utm_source=hashnode&utm_medium=feed) Compare the top software risk assessment tools for security, code quality, technical debt, dependencies, and overall software risk. 11 min read · [thecoderegistry.hashnode.dev](https://thecoderegistry.hashnode.dev/top-20-tools-for-enterprises-to-assess-overall-software-risk?utm_source=hashnode&utm_medium=feed) [praveen](https://hashnode.com/@thecoderegistry) · [Sep 19](https://hashnode.com/posts/top-20-software-due-diligence-tools-compared-2026/6aaee562c1b2c4e4aae1e2e3) ### [Top 20 Software Due Diligence Tools Compared (2026)](https://thecoderegistry.hashnode.dev/top-20-software-due-diligence-tools-compared-2026?utm_source=hashnode&utm_medium=feed) Compare the best software due diligence tools in 2026 for code quality, security, technical debt, compliance, and software risk. 36 min read · [thecoderegistry.hashnode.dev](https://thecoderegistry.hashnode.dev/top-20-software-due-diligence-tools-compared-2026?utm_source=hashnode&utm_medium=feed) [praveen](https://hashnode.com/@thecoderegistry) · [Sep 11](https://hashnode.com/posts/static-analysis-vs-dynamic-analysis-vs-ai-code-analysis/6aa39fb27bd69049308d5433) ### [Static Analysis vs Dynamic Analysis vs AI Code Analysis](https://thecoderegistry.hashnode.dev/static-analysis-vs-dynamic-analysis-vs-ai-code-analysis?utm_source=hashnode&utm_medium=feed) Compare static analysis, dynamic analysis, and AI code analysis to understand their strengths, limitations, and how they help improve code quality, security, and software reliability. 24 min read · [thecoderegistry.hashnode.dev](https://thecoderegistry.hashnode.dev/static-analysis-vs-dynamic-analysis-vs-ai-code-analysis?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/static-analysis-vs-dynamic-analysis-vs-ai-code-analysis/6aa39fb27bd69049308d5433) [praveen](https://hashnode.com/@thecoderegistry) · [Sep 4](https://hashnode.com/posts/a-practical-framework-for-software-due-diligence/6a9b2002f1436044e53cf15e) ### [A Practical Framework for Software Due Diligence](https://thecoderegistry.hashnode.dev/a-practical-framework-for-software-due-diligence?utm_source=hashnode&utm_medium=feed) How to Identify and Assess Hidden Software Risks Before They Impact Your Business 33 min read · [thecoderegistry.hashnode.dev](https://thecoderegistry.hashnode.dev/a-practical-framework-for-software-due-diligence?utm_source=hashnode&utm_medium=feed) [Reetain Raina](https://hashnode.com/@reetain) · [Sep 4](https://hashnode.com/posts/how-ai-is-breaking-traditional-patch-management/6a9aefa26eac286787fb7078) ### [How AI Is Changing Patching and What Devs Need to Know About Exposure Management](https://freecodecamp.org/news/how-ai-is-breaking-traditional-patch-management?utm_source=hashnode&utm_medium=feed) When a vulnerability scanner reports 23 vulnerabilities in your application, of which 4 are critical, 7 are high, and the remaining 12 are medium, at first glance the answer seems clear: start patchin 15 min read · [freecodecamp.org](https://freecodecamp.org/news/how-ai-is-breaking-traditional-patch-management?utm_source=hashnode&utm_medium=feed) [David Timothy](https://hashnode.com/@davidtimothy) · [Aug 31](https://hashnode.com/posts/google-quietly-killed-mte-on-the-pixel-11-and-it-s-worse-than-it-sounds/6a95c167b0a734d222773392) ### [Google Quietly Killed MTE on the Pixel 11, and It's Worse Than It Sounds](https://digitalunpacked.hashnode.dev/google-quietly-killed-mte-on-the-pixel-11-and-it-s-worse-than-it-sounds?utm_source=hashnode&utm_medium=feed) Google's Pixel 11 reportedly drops hardware MTE, weakening a key defense against memory corruption and mobile exploits. 12 min read · [digitalunpacked.hashnode.dev](https://digitalunpacked.hashnode.dev/google-quietly-killed-mte-on-the-pixel-11-and-it-s-worse-than-it-sounds?utm_source=hashnode&utm_medium=feed) [infosprint technologies](https://hashnode.com/@infosprint) · [Sep 1](https://hashnode.com/posts/software-supply-chain-security-what-changes-when-trusted-code-enters-production/6a96a1debd281d47c3f2b378) ### [Software Supply Chain Security: What Changes When Trusted Code Enters Production](https://infosprinttechnologies.hashnode.dev/software-supply-chain-security-what-changes-when-trusted-code-enters-production?utm_source=hashnode&utm_medium=feed) Explore software supply chain security and why trusted code needs security controls before it reaches production. 7 min read · [infosprinttechnologies.hashnode.dev](https://infosprinttechnologies.hashnode.dev/software-supply-chain-security-what-changes-when-trusted-code-enters-production?utm_source=hashnode&utm_medium=feed) [praveen](https://hashnode.com/@thecoderegistry) · [Aug 25](https://hashnode.com/posts/how-to-detect-hidden-risks-in-third-party-software/6a8dcc2e643d0366f570c21a) ### [How to Detect Hidden Risks in Third-Party Software](https://thecoderegistry.hashnode.dev/how-to-detect-hidden-risks-in-third-party-software?utm_source=hashnode&utm_medium=feed) Identify Security, Dependency, Licensing, and Code Risks in Third-Party Software 17 min read · [thecoderegistry.hashnode.dev](https://thecoderegistry.hashnode.dev/how-to-detect-hidden-risks-in-third-party-software?utm_source=hashnode&utm_medium=feed)