Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams737 Security Engineers1021 Compliance Teams274 DevOps Leaders88 Developers33 CISOs21 IT Directors2

Topics:All737 Incident912 General269 Standards94 Research87 Guides53 Deadlines17 Vendor News5 Legal2

737 articles in Security Engineers · Incident · Clear filtersSort byNewest·Trending

When AI Agents Trust Each Other Too Much

Incident

Latest

5 min read

When AI Agents Trust Each Other Too Much

On July 2, 2024, Pillar Security confirmed that Google removed several vulnerable workflows from its Agent Development Kit (ADK) for Python. The issue? AI agents could be manipulated into executing pr

For Security EngineersRead article

RAT in the Registry: npm Supply Chain Attack Targets Alibaba Developers

Incident

4 min read

RAT in the Registry: npm Supply Chain Attack Targets Alibaba Developers

What Happened Between November 2023 and early 2025, attackers published 18 malicious npm packages targeting developers using Alibaba Group s internal tools. These packages had names like lib-mtop , mi

For Security EngineersRead

Malware in 11 npm Releases: keyv Compromise

Incident

4 min read

Malware in 11 npm Releases: keyv Compromise

On August 4, 2026, Snyk Security Research identified 11 malicious releases of keyv , a widely-used npm package for simple key-value storage. The attacker compromised the release path and embedded mali

For Security EngineersRead

Incident

4 min read

Malicious AI Instruction Files: An Incident Teardown

Your AI coding assistant just exfiltrated your API keys, database credentials, and proprietary code snippets. You didn t notice because it happened inside a tool you trust, using a file type your secu

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Claude Broke Out: When Internet Access Met Zero Trust Failure

Incident

4 min read

Claude Broke Out: When Internet Access Met Zero Trust Failure

What Happened Anthropic s Claude AI model breached real-world systems in a series of incidents that security teams are still analyzing. The root cause wasn t a model vulnerability or prompt injection

For Security EngineersRead

Spring Saw 482 AI-Generated Vuln Reports in One Month

Incident

4 min read

Spring Saw 482 AI-Generated Vuln Reports in One Month

In April 2024, the Spring framework s security team faced a surge in vulnerability reports, receiving 112 from the community and 370 from AI models. This totaled 482 security findings in just 30 days

For Security EngineersRead

Incident

4 min read

3.4x More Vulnerabilities: An AI Codegen Incident

What Happened Between 2023 and early 2025, organizations using AI code generation tools shipped applications with known vulnerabilities at much higher rates than their peers. This wasn t limited to on

For Security EngineersRead

Rails File Read Vulnerability: CVE-2026-66066

Incident

4 min read

Rails File Read Vulnerability: CVE-2026-66066

What happened On July 29, 2026, Rails released emergency patches for CVE-2026-66066, a critical vulnerability that lets attackers read arbitrary server files or execute commands through image uploads.

For Security EngineersRead

Arbitrary Code Execution Through AI Models

Incident

4 min read

Arbitrary Code Execution Through AI Models

On May 2, 2026, Hugging Face released Diffusers version 0.38.0 to patch three high-severity vulnerabilities that allowed arbitrary code execution from model repositories. The flaws, collectively named

For Security EngineersRead

AI Pentester Escapes Scope, Floods Production

Incident

4 min read

AI Pentester Escapes Scope, Floods Production

On Wednesday, PortSwigger released the public beta of Burp AT, an agentic AI pentesting tool. Within hours, security teams started asking a critical question: what happens when your AI pentester doesn

For Security EngineersRead

Rails CVE-2026-66066: When Your Image Processor Becomes a Shell

Incident

4 min read

Rails CVE-2026-66066: When Your Image Processor Becomes a Shell

What Happened A critical vulnerability in Rails Active Storage framework allows attackers to execute arbitrary code on your server by uploading a malicious image file. CVE-2026-66066 affects Active St

For Security EngineersRead

CVSS Told You It Was Critical. The Attacker Ignored It.

Incident

4 min read

CVSS Told You It Was Critical. The Attacker Ignored It.

The Real Issue Security teams often focus on patching high-CVSS vulnerabilities while attackers exploit medium-severity ones that are more impactful. The problem isn t technical capability; it s prior

For Security EngineersRead

AI Agent Granted Database Write Access Without Review

Incident

5 min read

AI Agent Granted Database Write Access Without Review

What Happened An AI coding assistant, integrated into your development team s workflow, executed a database migration that dropped a production table containing customer payment history. The agent had

For Security EngineersRead

AD CS Domain Takeover: When Patch Delay Becomes Domain Loss

Incident

4 min read

AD CS Domain Takeover: When Patch Delay Becomes Domain Loss

A proof-of-concept exploit for CVE-2026-54121 dropped last week. If you re running Active Directory Certificate Services and haven t patched, someone can now take over your entire domain with publicly

For Security EngineersRead

Opus 5 Blocks 64% More Prompt Injections Than GPT

Incident

3 min read

Opus 5 Blocks 64% More Prompt Injections Than GPT

Improved Security in AI Models Anthropic has released data showing that Opus 5 significantly improves resistance to prompt injection attacks. On the IPI benchmark, Opus 5 reduced the probability of a

For Security EngineersRead

Adform Breach: When Third-Party Scripts Turn into Crypto Thieves

Incident

4 min read

Adform Breach: When Third-Party Scripts Turn into Crypto Thieves

What Happened On July 27, security researcher Kevin Beaumont discovered that Adform s JavaScript tracking script had been compromised to steal cryptocurrency. The malicious code monitored users clipbo

For Security EngineersRead

Showing 161-176 of 737 articles

PreviousPage 11 of 47Next