Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams125 Security Engineers1022 Compliance Teams275 DevOps Leaders88 Developers33 CISOs21 IT Directors2

Topics:All125 Incident913 General270 Standards94 Research87 Guides53 Deadlines17 Vendor News5 Legal2

125 articles in Compliance Teams · Incident · Clear filtersSort byNewest·Trending

Security Fix Exists, But Your Users Are Still Vulnerable

Incident

Latest

4 min read

Security Fix Exists, But Your Users Are Still Vulnerable

What Happened Adversa discovered a vulnerability in Claude Code that allows attackers to bypass security controls by submitting more than 50 subcommands in a single request. When the system encounters

For Compliance TeamsRead article

A Security Scanner Becomes the Attack Vector: The Trivy Supply Chain Breach

Incident

4 min read

A Security Scanner Becomes the Attack Vector: The Trivy Supply Chain Breach

On March 19, 2026, TeamPCP compromised Aqua Security s Trivy vulnerability scanner—a tool millions of developers rely on to find security flaws. The attackers didn t exploit a zero-day in the scanner

For Compliance TeamsRead

56% of Vulnerable Magento Stores Hit Within 10 Days

Incident

5 min read

56% of Vulnerable Magento Stores Hit Within 10 Days

What Happened Mass exploitation of the PolyShell vulnerability in Magento Open Source and Adobe Commerce began on March 19th. Within days, attackers compromised 56.7% of all vulnerable stores. The att

For Compliance TeamsRead

1,000 SaaS Environments Compromised Through a Security Scanner

Incident

4 min read

1,000 SaaS Environments Compromised Through a Security Scanner

What Happened Between late 2024 and early 2025, attackers compromised the Trivy vulnerability scanner s supply chain by stealing npm publish tokens. They backdoored more than 29 packages that Trivy de

For Compliance TeamsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

15,000 Magento Stores Hit by Defacement: PolyShell Vulnerability Teardown

Incident

4 min read

15,000 Magento Stores Hit by Defacement: PolyShell Vulnerability Teardown

What Happened Security researchers at Sansec discovered a critical vulnerability in Magento s REST API, designated PolyShell, that allows attackers to upload malicious files to e-commerce sites withou

For Compliance TeamsRead

Trivy Scanner Breach: When 32,000 GitHub Stars Became a Liability

Incident

4 min read

Trivy Scanner Breach: When 32,000 GitHub Stars Became a Liability

What Happened On March 19, 2026, attackers compromised Aqua Security s Trivy vulnerability scanner through GitHub Actions. Trivy, with over 32,000 stars on GitHub, is a critical dependency in thousand

For Compliance TeamsRead

26 Malicious npm Packages: A Supply Chain Attack Breakdown

Incident

4 min read

26 Malicious npm Packages: A Supply Chain Attack Breakdown

What Happened A recent campaign by the North Korean threat actor group Famous Chollima involved the publication of 26 malicious packages to the npm registry. These packages deployed a cross-platform r

For Compliance TeamsRead

1.45 Billion Attacks: How SMBs Became the Primary Target for API Exploits

Incident

4 min read

1.45 Billion Attacks: How SMBs Became the Primary Target for API Exploits

The Surge in API Attacks In the first half of 2025, small and medium-sized businesses (SMBs) faced over 1.45 billion attacks, with API-targeted exploits increasing 74 times compared to previous period

For Compliance TeamsRead

2,863 Google Cloud Keys Became Auth Tokens Without Warning

Incident

5 min read

2,863 Google Cloud Keys Became Auth Tokens Without Warning

What Happened In late 2024, Truffle Security discovered 2,863 live Google Cloud API keys exposed in public repositories. These weren t stolen credentials or phishing victims—they were legitimate billi

For Compliance TeamsRead

When AI Agents Outpaced Every Human Researcher Combined

Incident

3 min read

When AI Agents Outpaced Every Human Researcher Combined

AI s Impact on Vulnerability Discovery In a 90-day period, an AI agent named XBOW submitted over 1,060 valid vulnerabilities to bug bounty programs, surpassing the combined efforts of thousands of hum

For Compliance TeamsRead

A Calendar Invite Hijacked an AI Browser: The PerplexedComet Breakdown

Incident

5 min read

A Calendar Invite Hijacked an AI Browser: The PerplexedComet Breakdown

What Happened In October 2024, security researchers at Zenity discovered a zero-click vulnerability in Perplexity s Comet AI browser. The flaw, named PerplexedComet, allowed attackers to inject malici

For Compliance TeamsRead

Incident

5 min read

3,000 API Keys Found in Public Code: A Google Cloud Incident Analysis

What Happened Truffle Security discovered nearly 3,000 Google Cloud API keys embedded in publicly accessible client-side code. These keys provided unauthorized access to Google s Gemini API endpoints,

For Compliance TeamsRead

Compromised npm Package Installed OpenClaw on 90,000 Weekly Downloads

Incident

4 min read

Compromised npm Package Installed OpenClaw on 90,000 Weekly Downloads

What Happened A threat actor compromised the Cline CLI package on npm and modified it to silently install OpenClaw—an AI coding agent—on developer machines without consent. The malicious version was l

For Compliance TeamsRead

Showing 113-125 of 125 articles

PreviousPage 8 of 8Next