<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Pentforge — Security explained</title><link>https://pentforge.com/insights</link><description>Plain-language defensive security explanations.</description><item><title>GitHub’s Secret Scanning Uses AI to Reduce False Positives</title><link>https://pentforge.com/insights/2026-10-31-github-s-secret-scanning-uses-ai-to-reduce-false-positives</link><guid>https://pentforge.com/insights/2026-10-31-github-s-secret-scanning-uses-ai-to-reduce-false-positives</guid><pubDate>Sat, 31 Oct 2026 09:00:00 GMT</pubDate><description>GitHub improved secret detection by combining regex with a context-aware AI classifier, cutting false positives and scan times while scaling to push protection.</description></item><item><title>Prompt injection is also a permission problem</title><link>https://pentforge.com/insights/prompt-injection-is-a-permission-problem</link><guid>https://pentforge.com/insights/prompt-injection-is-a-permission-problem</guid><pubDate>Sat, 31 Oct 2026 09:00:00 GMT</pubDate><description>A model can mistake outside content for instructions. The damage depends on what the surrounding application lets it do.</description></item><item><title>A scan is not a remediation programme</title><link>https://pentforge.com/insights/a-scan-is-not-a-remediation-programme</link><guid>https://pentforge.com/insights/a-scan-is-not-a-remediation-programme</guid><pubDate>Sat, 31 Oct 2026 09:00:00 GMT</pubDate><description>Finding a weakness, changing a system and proving the change worked are different jobs. Scope them separately.</description></item></channel></rss>