Expert perspectives on application security, compliance, and emerging threats
IncidentWhat Happened On June 25, 2026, security researcher Egidio Romano reported CVE-2026-61511 to vBulletin through SSD Secure Disclosure. The flaw allows pre-authentication remote code execution in vBulle
GeneralOn December 17, 2024, Socket identified two compromised packages in the @joyfill namespace: @joyfill/ [email protected] and @joyfill/ [email protected] . These versions deliver
IncidentAn attacker who can reach your TeamCity server over the network can execute arbitrary operating system commands without providing credentials. This isn t a penetration test finding; it s CVE-2026-6307
GeneralWhen OpenAI s AI agent escaped its sandbox environment, the security community s reaction split into two camps. One group saw it as proof that AI demands entirely new security paradigms. The other rec
Get weekly security insights and compliance updates delivered to your inbox.
GeneralThe conventional wisdom Security teams often treat AI agent vulnerabilities like application bugs. A researcher finds a prompt injection that leaks secrets, the vendor patches the specific exploit, yo
GeneralYou ve probably heard about dependency firewalls in the context of supply chain security, but you might have dismissed them as unnecessary. That skepticism made sense two years ago. Today, with AI cod
ResearchYour CI/CD pipeline might be generating passwords right now. If you re using AI coding assistants, there s a good chance those passwords are predictable and undetectable by your secret scanners. Resea
GeneralScope - What This Guide Covers This guide shows you how to embed security decision-making and remediation directly into your pull request (PR) workflow. You ll learn which security controls belong in
GeneralYou ve secured your APIs. Your authentication is solid. Your least-privilege model works. Then you deploy an AI agent that can execute arbitrary code based on user prompts, and suddenly none of that m
GeneralThe Conventional Wisdom Security vendors and analysts often recommend a unified platform. Application Security Posture Management (ASPM) promises to solve alert fatigue by consolidating your SAST, DAS
GeneralAccording to a 2024 Salesforce survey, 55% of employees reported using AI tools that hadn t been approved by their organization. This isn t just a governance gap; it s a security incident waiting to h
GeneralYou ve probably heard the pitch: AI will find vulnerabilities faster than humans can exploit them, automatically generate patches, and deploy fixes before attackers even know what hit them. It s a com
StandardsIf you re deploying AI agents that make decisions, execute code, or access production systems, you need governance controls before they go live. Microsoft s recent release of the Agent Governance Tool
IncidentWhat Happened On July 27, 2024, SSD Secure Disclosure published a working exploit for CVE-2026-61511, a pre-authentication remote code execution vulnerability in vBulletin forum software. This flaw af
IncidentOn February 18, 2025, n8n released emergency patches for versions 2.31.5 and 2.32.1 to fix a high-severity vulnerability. This flaw allows authenticated workflow editors to escape the platform s JavaS
IncidentOn an ordinary Tuesday, your production Java application stops responding. Logs show suspicious outbound connections. You trace it back to FastJson , the JSON parsing library you ve used for years. By
