Skip to content

Sorin Mustaca: Security-AI-Software

Cybersecurity, AI, Automotive Security, Antimalware Software, Product Management, Agile, Secure Software Development, SSDLC

  • Security
    • IT Security News English
    • IT Sicherheit News Deutsch
    • Securitate in limba Romana
    • Tipps und Ratschläge – IT Sicherheit
  • News
    • In the news
    • Quoted
  • About
    • About me
    • Contact
    • “Improve your security” free eBook
    • Scuba Diving Blog
  • Privacy Policy
  • Cyber Security Consulting
  • Work with me

Tag: agent

Agentic Scrum, Part 3 of 5: Write Specs a Coding Agent Can Actually Follow
agile Agile Delivery AI & ML Article ECS General

Agentic Scrum, Part 3 of 5: Write Specs a Coding Agent Can Actually Follow

A specification agent turns requirements into instructions a coding agent can follow. This part covers the agent-spec.md structure, how developers validate it, AGENTS.md and guardrails, the development loop and the handover file.

November 11, 2026November 11, 2026
Agentic Scrum, Part 2 of 5: Describe the Value
agile Agile Delivery AI & ML Article ECS

Agentic Scrum, Part 2 of 5: Describe the Value

The first two steps of the agentic pipeline have no agent in them. Here is how the product owner writes value.md, how developers turn it into requirements.md, and why a human gate before the specification agent is the brake the process needs.

November 9, 2026
Agentic Scrum, Part 1 of 5: The Product Owner Is Not a Vending Machine
agile Agile Delivery AI & ML Article ECS General SSDLC

Agentic Scrum, Part 1 of 5: The Product Owner Is Not a Vending Machine

AI coding agents eat user stories faster than a product owner can write them. Here is a spec-driven, agentic pipeline that spreads the work across people and agents, keeps humans at every gate, and keeps everything in the repository as markdown.

November 6, 2026November 6, 2026
AI Q&A: what is an Agent?
AI & ML Article Educational General

AI Q&A: what is an Agent?

Intro I talk a lot about AI these days… and I know I am not alone. People talk a lot about “agentic AI” or “AI Agents” or simply “Agents”. During these discussions, I see there is confusion sometimes what is an Agent and what’s the difference between “AI” and “AI Agents”. Here’s the core distinction, […]

September 25, 2026September 28, 2026
Sorin Mustaca on Twitter Sorin Mustaca on Facebook View Sorin Mustaca's profile on LinkedIn Sorin Mustaca on XING
Subscribe to me on Substack

Categories

Top Posts & Pages

  • Implementing ISO 27001:2022 Annex A.18 - Compliance
  • Sign files unattended in batch mode while having an eToken (no password popup!) (updated)
  • Defender Application Control or Defender SmartScreen - what can you do to not be blocked by it
  • NIS2: 1. Perform a gap analysis
  • TISAX: new Catalogue ISA v6 available
  • Understanding ISO 27001:2022 Annex A.8 - Asset Management
  • Understanding ISO 27001:2022 Annex A.14 - System Acquisition, Development, and Maintenance
  • How to implement an Information Security Management System (ISMS)
  • Implementing ISO 27001:2022 Annex A.16 - Information Security Incident Management

Work with me

Endpoint Cybersecurity

www.endpoint-cybersecurity.com

- Consulting in building your security products for Windows, MacOS, Linux, iOS, Android
- Pentests and Security tests for applications
- Cybersecurity Management Systems for Automotive(CSMS/ISO 21434, WP.29, ISO 16949)
- Support in TISAX(r) audits
- Support in ISO 27001, NIS2, CRA audits

Subscribe to Blog via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Join 151 other subscribers

Pages

  • About
  • Contact
  • Cybersecurity and AI Collection
  • Download the free eBook
  • In the news
  • ISO 27001:2022 Collection
  • NIS2 Collection
  • Privacy Policy
  • Securitate in limba Romana
  • Tipps und Ratschläge – IT Sicherheit
  • Work with me
RSS feed: IT Security News (EN) IT Security News (EN)
  • Kai extends Autonomous Defense Platform visibility to internet-facing assets
  • Anthropic’s Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark
  • Agentic Scrum, Part 3 of 5: Write Specs a Coding Agent Can Actually Follow
  • Bring Your Own CLM: Keyfactor Command Joins the Thales Imperva SSL Integration Center
  • October 2026 Cyber Threat Landscape: Record Ransomware, Rising GenAI Risk and an AI-Powered Newcomer
  • Binance Investigates ShinyHunters Breach Claims
  • Anthropic unveils Claude Fable 5.2, Mythos 5.2 with coding gains and lower prices
  • EU Proposes Digital Fairness Act to Ban Dark Patterns and Let Users Turn Off Streaks and Autoplay
  • Mythos 5.2: Anthropic’s AI Gets Better at Finding Vulnerabilities
  • Hundreds of Dutch sports clubs report cyberattack exposing members’ personal data
RSS feed: IT Sicherheitsnews (DE) IT Sicherheitsnews (DE)
  • Cybervorfälle nehmen deutlich zu, Schadenshöhe bleibt stabil
  • [UPDATE] [mittel] Nvidia GPU Display Treiber: Mehrere Schwachstellen
  • Konnect eMail: Outlook-Add-ins für revisionssichere Ablage in SharePoint
  • [UPDATE] [hoch] N-able N-Central: Mehrere Schwachstellen
  • Cloud-Schwachstellen vervierfachen sich binnen neun Monaten
  • [UPDATE] [mittel] 7-Zip: Mehrere Schwachstellen
  • 3.900 komprimierte Datensätze: Uni Tübingen meldet Sicherheitsvorfall
  • [UPDATE] [hoch] Oracle Java SE: Schwachstelle ermöglicht Offenlegung von Informationen
  • November-Patchday: Microsoft stopft erneut mehr als 1.000 Sicherheitslöcher
  • [UPDATE] [mittel] Shibboleth Identity Provider (OpenID Connect OP Plugin): Schwachstelle ermöglicht Cross-Site Scripting
RSS feed: AI News Brief AI News Brief
  • Work at the Frontier: AI’s effect on freelance work
  • Google’s AlphaGenome 2 zooms in on the cellular roots of disease
  • AlphaGenome 2: Deciphering how cells read DNA to better understand disease
  • Decision Models in Hugging Face
  • An Energy-Based Perspective on Machine Learning
  • Supermicro Ships H15 AMD EPYC Servers for AI and HPC Workloads
  • What Senior Data Science Job Postings Actually Ask for in 2026
  • Bits or permutations? Spending a fixed inference budget on weight precision or on option-order averaging in small local language models
  • Adobe Previews Four AI Experiments for Creative Workflows
  • CLADE: Category-Level Answering from Deficient Evidence in Retrieval-Augmented Language Models

Copyright © 2026 Sorin Mustaca: Security-AI-Software | Elite Blog by Ascendoor | Powered by WordPress.

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}