[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-8nGYHxKl8VdsSlvmo9vO24D7MNSWLoI8czxpb5pYFg":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":58},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"0efe72c7-7ef5-490f-a0fc-0e1d06d91040","Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration","black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal--0efff2","Application security vendor Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, giving developers using Anthropic’s Claude Desktop a way to check code for security flaws without switching tools. The integration is built on the Model Context Protocol (MCP), the open standard that lets AI assistants like […] The post Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration appeared first on IT Security Guru.","Application security vendor Black Duck has launched its Signal vulnerability scanning engine within Anthropic's Claude Desktop via the Claude Directory. This integration allows developers to scan code for security flaws directly within their AI coding environment using the Model Context Protocol (MCP). The move aims to embed security checks earlier in the development process, keeping pace with the speed of AI-assisted coding.","Black Duck integrates AI-powered vulnerability scanning into Anthropic's Claude Desktop.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F09\u002F02\u002Fblack-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration\u002F?utm_source=rss&utm_medium=rss&utm_campaign=black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration","https:\u002F\u002Fwww.itsecurityguru.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FChatGPT-Image-Sep-2-2026-01_23_37-PM.png","2026-09-02T12:24:27+00:00","2026-09-02T18:00:21.857496+00:00",7,[17,20,23,25,27],{"name":18,"type":19},"Black Duck","vendor",{"name":21,"type":22},"Signal","product",{"name":24,"type":22},"Claude Desktop",{"name":26,"type":19},"Anthropic",{"name":28,"type":29},"MCP","technology","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":30,"icon":32,"name":33,"slug":34},null,"Tools","tools",[36,38,43,48],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[],[18,26,21],{"controls":56,"vendors":57},[],[],{"slug":59,"title":60,"body":61,"framework_refs":62,"framework_notes":71},"ai-coding-environments-need-embedded-security-scanning","AI Coding Environments Need Embedded Security Scanning","As AI-assisted development accelerates code output, security checks risk being bypassed or delayed, introducing vulnerabilities at scale before they are ever reviewed. Black Duck's Signal integration into Claude Desktop addresses the critical gap of 'shift-left' security by embedding scanning directly into the AI coding workflow via the Model Context Protocol (MCP). This matters because developers using AI tools may implicitly trust generated code, reducing manual scrutiny. Without automated, in-context security feedback, the speed advantage of AI coding can become a liability, rapidly propagating flawed or vulnerable code into production. Third-party integrations into AI platforms also introduce supply chain considerations that security teams must evaluate.",[63,64,65,66,67,68,69,70],"CIS Control 16 – Application Software Security","CIS Control 18 – Penetration Testing","NIST SP 800-218 (SSDF) – Secure Software Development Framework","NIST SA-11 – Developer Testing and Evaluation","NIST SA-15 – Development Process, Standards, and Tools","OWASP SAMM – Security Testing Practice","ISO\u002FIEC 27001 – A.14.2 Security in Development and Support Processes","SLSA Supply Chain Levels for Software Artifacts – Level 2+ provenance requirements",{}]