Secure Code Reviews, LLM Coding Assistants, and Trusting Code – Rey Bango, Karim Toubba, Gal Elbaz – ASW #330 – Go Health Pro

Secure Code Reviews, LLM Coding Assistants, and Trusting Code – Rey Bango, Karim Toubba, Gal Elbaz – ASW #330 – Go Health Pro

Developers are relying on LLMs as coding assistants, so where are the LLM assistants for appsec? The principles behind secure code reviews don’t really change based on who write the code, whether human or AI. But more code means more reasons for appsec to scale its practices and figure out how to establish trust in … Read more

DOGE Worker’s Code Supports NLRB Whistleblower – Krebs on Security – Go Health Pro

DOGE Worker’s Code Supports NLRB Whistleblower – Krebs on Security – Go Health Pro

A whistleblower at the National Labor Relations Board (NLRB) alleged last week that denizens of Elon Musk’s Department of Government Efficiency (DOGE) siphoned gigabytes of data from the agency’s sensitive case files in early March. The whistleblower said accounts created for DOGE at the NLRB downloaded three code repositories from GitHub. Further investigation into one … Read more

How the Armenian Civil Code Sank a $331 Million Claim – EJIL: Talk! – Go Health Pro

How the Armenian Civil Code Sank a 1 Million Claim – EJIL: Talk! – Go Health Pro

Can a three-year deadline in Armenia’s Civil Code derail a $331 million investment arbitration? The recent ICSID award in Rasia FZE and Joseph K. Borkowski v. Republic of Armenia says yes, exposing a critical spot in investor-state dispute settlement (ISDS): the quiet power of domestic law to strangle investment claims.

The dispute stemmed from a grand infrastructure project, a North-South railway corridor meant to link the Persian Gulf to the Black Sea via Armenia. In 2012, Armenia signed two Concession Agreements with Rasia FZE, a Dubai-based investment vehicle, to conduct feasibility studies and project development. The Claimants asserted Armenia subsequently: (1) abruptly withdrew political backing; (2) failed to provide promised support; and (3) engaged with competing investors, actions they claimed constituted both contractual breaches and violations of the US–Armenia BIT’s FET guarantees. Joseph K. Borkowski, Rasia’s US-national CEO, joined the arbitration seeking $331 million for the project’s collapse.

Read more

Second and Third drafts of the General-Purpose AI Code of Practice have been released – Go Health Pro

Second and Third drafts of the General-Purpose AI Code of Practice have been released – Go Health Pro

Photo by BoliviaInteligente on Unsplash Last year we reported on the European AI Office facilitating the drawing-up of the General-Purpose AI Code of Practice (the “Code”). The first draft of the Code was published on 14 November 2024. Our article on the first draft of the Code can be found here. This blog post is … Read more