John P. Mello Jr.

AI-native AppSec: What it is — and why it matters Anyone in the software industry who still hasn’t accepted the fact that security that’s bolted on after the fact rather than built in isn’...

AI coding is changing everything—your AppSec strategy needs to keep up. See why AI-native security is now a must-have, not a nice-to-have. jpmellojr.blogspot.com/2026/03/ai-n... #AINativeAppSec #AppSec #AISecurity #SoftwareSupplyChain #DevSecOps

Aptera Rolls First Solar EV Off Validation Line Solar-powered automaker Aptera Motors announced Tuesday that it rolled its first vehicle off its validation assembly line, marking a major...

Aptera hits major milestone: first vehicle off validation assembly line! Solar-powered EV edges closer to production & delivery. jpmellojr.blogspot.com/2026/03/apte... #Aptera #SolarEV #CleanEnergy #GreenTech

Google Prepares Chrome for Post-Quantum TLS Security Google has announced a new program to make HTTPS certificates secure against quantum computers. more

Google is gearing Chrome up for the post-quantum future, testing new crypto to keep today’s data safe from tomorrow’s quantum attacks. jpmellojr.blogspot.com/2026/03/goog... #Google #Chrome #PostQuantum #CyberSecurity #Encryption

BSIMM16 confirms it: AI redefines the AppSec landscape It has become impossible to discuss software development without considering the effects of artificial intelligence, and the 16th edition ...

AI isn’t just changing how we code—it’s rewriting the rules of application security. See what BSIMM16 reveals about AI’s impact on AppSec priorities. jpmellojr.blogspot.com/2026/02/bsim... #AppSec #AISecurity #BSIMM16 #DevSecOps #BlackDuck

Can Data Centers in Space Ease AI’s Growing Power Demands? Data centers are emerging as a new environmental flashpoint for the tech industry. Public concern is growing over their hunger for power a...

AI data centers in orbit? Visionary infrastructure shift or just another hype cycle for the AI boom? jpmellojr.blogspot.com/2026/02/data... #AI #SpaceTech #DataCenters

AI Coding Boom Drives Surge in Open-Source Vulnerabilities The mean number of open-source vulnerabilities per codebase doubled in the past year, according to the annual Black Duck Open Source Softw...

Open-source vulnerabilities are surging as AI-generated code floods repos, putting the software supply chain under new pressure. jpmellojr.blogspot.com/2026/02/ai-c... #OpenSource #AIcoding #DevSecOps #OSS #BlackDuck

AI Washing Raises Risks for Customers, Workers, and Investors At the beginning of the hype cycle for any technology, companies’ claims can get exaggerated. Artificial intelligence is no exception to t...

Beware "AI washing!" Companies overhyping AI capabilities to boost stock prices & justify layoffs—without the tech to back it up. jpmellojr.blogspot.com/2026/02/ai-w... #AIWashing #AIhype #ArtificialIntelligence #TechEthics

Asynchronous Customer Support Is Failing Modern E-Commerce Rising expectations for rapid responses are draining the life from asynchronous customer support, according to a new study by a global cus...

Shoppers now expect real-time responses, not 24-hour waits. The shift from async to instant support is reshaping e-commerce. jpmellojr.blogspot.com/2026/02/asyn... #ecommerce #CustomerService #CX #retail #eDesk

Vulnerable MCP Servers Lab: 9 ways to boost ML security The Vulnerable MCP Servers Lab delivers integration training, demos, and instruction on LLM attack methods. more

ML models are only as strong as the servers behind them. Check out “Vulnerable MCP Servers Lab: 9 ways to boost ML security" and lock down your AI stack: jpmellojr.blogspot.com/2026/02/vuln... #MLSecurity #AppSec #CyberSecurity #AI #MCPlab

Vema Pilot Wells Lay Groundwork for Hydrogen Energy A developer of a “white” hydrogen production technology has completed two pilot wells, a move that could advance large-scale hydrogen prod...

Hydrogen wells are laying the foundation for next-gen clean power, showing how underground storage could reshape future energy systems. jpmellojr.blogspot.com/2026/02/vema... #Hydrogen #EnergyTech #Vema

AI Is Rapidly Rendering Cyber Defenses Obsolete Rapid enterprise adoption of artificial intelligence is outpacing organizations’ ability to secure their operations, according to a new in...

AI attacks are moving at machine speed—and most orgs can’t keep up. Zscaler's new report shows how fast defenses are falling behind. jpmellojr.blogspot.com/2026/02/ai-i... #Cybersecurity #AIThreats #Zscaler #AIrisk

How AI coding is breathing new life into Rust Having gained adherents year after year over the past decade, the Rust programming language may be about to break out in new ways, as its ...

AI is giving Rust a major boost—from Microsoft’s massive codebases to Linux kernel work. Why the memory?safe future is arriving faster than anyone expected: jpmellojr.blogspot.com/2026/01/how-... #RustLang #AICoding #SoftwareSecurity #DevSecOps

eBay Draws Line on Agentic Shopping eBay is tapping the brakes on agentic shopping, blocking autonomous AI checkout while it reassesses the risks and rewards of bot-driven co...

eBay is tapping the brakes on agentic shopping, blocking autonomous AI checkout while it reassesses the risks and rewards of bot-driven commerce. jpmellojr.blogspot.com/2026/01/ebay... #eBay #AgenticAI #AIShopping #Ecommerce

Identity, Data Security Converging Into Trouble for Security Teams The traditional divide between identity and data security is closing rapidly, and that’s bad news for security teams. more

The traditional divide between identity and data security is closing rapidly, and that's bad news for security teams. jpmellojr.blogspot.com/2026/01/iden... #DataSecurity #AI #IdentitySecurity #Netwrix

SSDF 1.2 recognizes AppSec is a journey The National Institute of Standards and Technology is tweaking a key tool that has helped development organizations produce more secure co...

NIST SSDF 1.2 shifts focus from "write secure code" to "operate secure software" across the full SDLC—recognizing AppSec as a journey, not a destination.
jpmellojr.blogspot.com/2026/01/ssdf...
#NIST #SSDF #AppSec #DevSecOps

Mandatory SBOMs: What CRA is — and why it matters New regulations are elevating software bills of materials from a best practice nice-to-have to a must-have for organizations to meet compl...

The EU Cyber Resilience Act changing game for software transparency. Say goodbye to voluntary best practices—mandatory SBOMs are becoming a legal condition for market access.
jpmellojr.blogspot.com/2026/01/new-... #SBOM #EUCRA #SupplyChainSecurity #CyberSecurity

OpenAI CFO Signals End of AI Hype Cycle OpenAI’s focus this year on “practical adoption" could signal that the AI industry is ready to stop living off its hype and embrace bare-m...

OpenAI CFO's comments spark debate about AI industry's future. Is the hype cycle ending? jpmellojr.blogspot.com/2026/01/open... #OpenAI #AI #AIHype #SarahFriar

Hackers Going for Gold at Winter Olympics The Milano Cortina 2026 Winter Olympics will be a magnet for all types of online threat actors, from nation-state spooks to petty scam art...

From ransomware to fake ticket scams, a new report warns that hackers are ready to exploit the Milano Cortina games. jpmellojr.blogspot.com/2026/01/hack... #PaloAltoNetworks #WinterOlympics #MilanoCortina2026 #Unit42 #scams #cybercrime

Why governance is essential for safe AI adoption A new report on AI security from the Cloud Security Alliance (CSA) finds security leaders working to secure AI systems even as they begin ...

AI isn’t failing because of models—it’s failing because of missing governance. Turn AI from risky experiment into trusted, auditable reality.
jpmellojr.blogspot.com/2026/01/why-...
#AIGovernance #AISecurity #AIAdoption #CSA #GoogleCloud

Adversarial AI is on the rise: What you need to know To date, threat actors have used artificial intelligence (AI) to mainly enhance their productivity, but that’s changing, a report released...

AI isn’t just writing phishing emails anymore—it's inside malware, mutating code in real time to evade defenses. Learn why adversarial AI is a game-changer for defenders. jpmellojr.blogspot.com/2026/01/adve...
#AdversarialAI #CyberSecurity #AIMalware #GTIG

US E-Commerce Orders Soared 147% in 2025 E-commerce orders in the United States jumped 147% year-over-year in 2025, with more than half that growth spurred by top-performing brand...

US ecommerce orders skyrocketed by 147% in 2025 with top-performing brands leading the charge. jpmellojr.blogspot.com/2026/01/us-e... #Ecommerce #RetailTrends #Marketing #Shopping #Omnisend

AI PCs' Unmet Promise Is Slowing Adoption Since their arrival in earnest in early 2024, AI PCs have yet to capture the imagination of consumers. more

AI PCs are failing to impress consumers, with Dell admitting that the AI PCs strategy isn't working. Is Microsoft's AI-first approach backfiring? jpmellojr.blogspot.com/2026/01/ai-p... #AIPC #AIadoption #Microsoft #PCsales

AI Dominates 2026 Cybersecurity Predictions Artificial intelligence was an inescapable technology in 2025 and will be even more so in 2026, particularly in cybersecurity. more

In 2026, AI won’t just be a tool—it’ll be a co-worker. From the rise of Agentic AI to the hidden risks of Shadow AI, see how the cybers landscape is shifting. jpmellojr.blogspot.com/2026/01/ai-d... #AI #Predictions #Cyber

AI Dominates 2026 Cybersecurity Predictions Artificial intelligence was an inescapable technology in 2025 and will be even more so in 2026, particularly in cybersecurity. more

In 2026, AI won’t just be a tool—it’ll be a co-worker. From the rise of Agentic AI to the hidden risks of Shadow AI, see how the cybers landscape is shifting. jpmellojr.blogspot.com/2026/01/ai-d... #AI #Predictions #Cyber

AI technical debt: What it is — and why it matters One of the most dangerous drivers of data risk today isn’t even on the radar of most security teams. AI technical debt is all the more per...

One of the most dangerous drivers of data risk today isn’t even on the radar of most security teams. AI technical debt is perilous because it's poorly understood. jpmellojr.blogspot.com/2026/01/ai-t... #AITechnicalDebt #Forcepoint #AIrisks #SoftwareDevelopment

Amazon Expands Alexa+ With Browser-Based AI Access Alexa+, Amazon’s AI-powered digital assistant, is coming to a browser near you. The internet’s largest retailer announced Monday that it h...

Amazon launches Alexa+ on the web, bringing its AI assistant directly into browsers to compete with ChatGPT & Gemini. jpmellojr.blogspot.com/2026/01/amaz... #Amazon #AI #Alexa

Holiday Returns Become a Margin Problem in Returnuary January, also known as Returnuary in retail circles, can be a month when merchants see their margins melt due to product returns. January,...

January is the cruelest month for retailers as "Returnuary" threatens holiday margins. jpmellojr.blogspot.com/2026/01/holi...
#Ecommerce #Retail #Returnuary #BusinessStrategy #HolidayShopping #ReturnPro

OWASP tackles AI risk in bold new push As 2025 comes to a close, the Open Worldwide Application Security Project Foundation has ramped up its efforts to provide security teams w...

OWASP releases game-changing AI security tools: Top 10 for Agentic AI, 250-page testing guide & vulnerability scoring system to help security teams tackle autonomous AI risks jpmellojr.blogspot.com/2025/12/owas... #OWASP #AIsecurity #AgenticAI

Deepfakes Expose New Risks in Identity and Digital Trust Deepfakes aren’t just entertainment—they’re a growing weapon in social engineering attacks. Organizations must adapt fast to counter AI-dr...

Deepfakes aren’t just entertainment—they’re a growing weapon in social engineering attacks. jpmellojr.blogspot.com/2025/12/deep... #Deepfakes #AI #KnowBe4 #SocialEngineering

Post-Holiday Return Surge Predicted to Pressure Retailers An e-commerce customer service support company is predicting a 45% increase in customer returns following Christmas, a development that wi...

Retailers brace for tsunami of post-holiday returns. jpmellojr.blogspot.com/2025/12/post... #eDesk #RetailTrends #CustomerService #HolidayReturns #FraudPrevention #ReturnsManagement