{"data":{"id":"9a893411-56f1-4fd1-96e4-f7101970a2d8","title":"The Secure Agentic Development Lifecycle (ADLC), Explained | Endor Labs","summary":"The source is an Endor Labs guide to the agentic development lifecycle (ADLC), in which AI agents plan, build, test, and ship software by acting directly in repos, tools, and pipelines. It says agents add risk through insecure code, hallucinated or unvetted dependencies (only 1 in 5 AI-recommended dependency versions are safe), and actions taken with the developer's permissions before review. It recommends a secure ADLC that governs agent access and independently verifies agent-produced code and dependencies.","solution":"Block risky packages at install time, review every PR for security impact, and prioritize findings by reachability so review keeps pace with agent speed.","labels":["security","industry"],"sourceUrl":"https://www.endorlabs.com/learn/the-secure-agentic-development-lifecycle-adlc-explained","publishedAt":"2026-10-23T17:41:17.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AI coding assistants","AI agents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-23T17:41:17.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":null,"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}