Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams759 Security Engineers759 Compliance Teams223 DevOps Leaders63 Developers31 CISOs17 IT Directors2

Topics:All759 Incident707 General188 Standards88 Research61 Guides34 Deadlines11 Vendor News4 Legal2

759 articles in Security Engineers · Clear filtersSort byNewest·Trending

Incident

Latest

5 min read

282 iOS AI Apps Exposed Their API Keys

What Happened Researchers at Wake Forest University tested 444 iOS AI chatbot applications and found that 282 of them—63%—transmitted API keys in plaintext through network traffic. These keys granted

For Security EngineersRead article

Incident

4 min read

Trojanized Pyrogram Forks on PyPI

What Happened Attackers published at least eight malicious packages to the Python Package Index (PyPI), each pretending to be a legitimate fork of Pyrogram, a popular Python framework for building Tel

For Security EngineersRead

AI Agent Cloned a Repo and Opened a Backdoor

Incident

4 min read

AI Agent Cloned a Repo and Opened a Backdoor

What Happened Mozilla s Zero Day Investigative Network (0DIN) documented an indirect prompt injection attack against Claude Code, an AI-powered coding assistant. A developer used the agent to interact

For Security EngineersRead

Incident

4 min read

61% of AI Vulnerabilities Go Unpatched

The Growing Security Debt in AI Organizations rushing to deploy AI features are creating a security backlog they cannot manage. According to Cobalt s AI and Pentesting Pulse Report 2026, AI and LLM ap

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

AI Penetration Testing: Separating the Brain from the Hands

General

5 min read

AI Penetration Testing: Separating the Brain from the Hands

If you ve ever watched a junior pentester run Nmap without understanding what they re looking for, you ve seen the problem AI-driven security tools must solve. Automation without reasoning creates noi

For Security EngineersRead

ReDoS Spike in npm: What 143% Growth Means for Your Pipeline

Incident

4 min read

ReDoS Spike in npm: What 143% Growth Means for Your Pipeline

The Issue at Hand Between 2017 and 2018, ReDoS (Regular Expression Denial of Service) vulnerabilities in npm packages surged by 143%. This wasn t an isolated incident but a widespread issue across the

For Security EngineersRead

Incident

4 min read

CVE-2019-5736: Root Escape Through runC

Understanding the Vulnerability On February 11, 2019, security researchers disclosed CVE-2019-5736 , a critical vulnerability in runC that allows a malicious container to overwrite the host s runC bin

For Security EngineersRead

78% of Vulnerabilities Hide in Code You Didn't Write

Incident

4 min read

78% of Vulnerabilities Hide in Code You Didn't Write

The Growing Threat of Third-Party Library Vulnerabilities Between 2022 and 2024, vulnerabilities in application libraries surged by 88%. This isn t just a story of breaches—it s about the growing tech

For Security EngineersRead

78% of Vulnerabilities Hide in Your Dependency Tree

Incident

5 min read

78% of Vulnerabilities Hide in Your Dependency Tree

The Hidden Risk in Your Dependency Tree Snyk s analysis of over one million open source projects revealed a significant supply chain issue: 78% of vulnerabilities exist in indirect dependencies—the pa

For Security EngineersRead

Hijacked npm Packages Deployed Malware Through VS Code

Incident

4 min read

Hijacked npm Packages Deployed Malware Through VS Code

On May 25, 2026, attackers uploaded compromised npm packages that exploited Visual Studio Code to deploy InvisibleFerret, a Python-based information stealer. The attack targeted developers on Windows,

For Security EngineersRead

urllib3 CRLF Injection: What 500+ Libraries Got Wrong

Incident

3 min read

urllib3 CRLF Injection: What 500+ Libraries Got Wrong

What Happened On April 18, 2019, security researchers disclosed a CRLF injection vulnerability in urllib3 , a Python HTTP client library foundational to over 500 open-source libraries. This vulnerabil

For Security EngineersRead

Lodash CVE-2019-10744: When 80M Downloads Met Zero Patching

Incident

4 min read

Lodash CVE-2019-10744: When 80M Downloads Met Zero Patching

What Happened On July 2, 2019, Snyk published CVE-2019-10744 , a prototype pollution vulnerability affecting every version of lodash. This library, used by 4.35 million projects on GitHub and download

For Security EngineersRead

70% of .NET Vulnerabilities Are High Severity

Incident

3 min read

70% of .NET Vulnerabilities Are High Severity

Overview of the Issue A security analysis of the .NET ecosystem has highlighted a significant concentration of critical vulnerabilities that require immediate attention from your security team. Remote

For Security EngineersRead

jQuery Prototype Pollution: What the 3.4.0 Patch Reveals About Library Risk

Incident

4 min read

jQuery Prototype Pollution: What the 3.4.0 Patch Reveals About Library Risk

The Issue at Hand The jQuery team released version 3.4.0 to address a prototype pollution vulnerability in the library s object extension functionality. Researcher Olivier Arteau identified the flaw,

For Security EngineersRead

190,000 Docker Hub Accounts: What Failed

Incident

3 min read

190,000 Docker Hub Accounts: What Failed

On April 25, 2019, Docker Hub discovered unauthorized access to a database containing user data. Approximately 190,000 accounts were affected, exposing usernames, hashed passwords, and GitHub and Bitb

For Security EngineersRead

Komodo Wallet Attack: $13M at Risk from a Single npm Package

Incident

4 min read

Komodo Wallet Attack: $13M at Risk from a Single npm Package

What Happened A malicious npm package named electron-native-notify targeted users of Komodo s Agama cryptocurrency wallet. A GitHub user, sawlysawly, disclosed the threat via a public commit, triggeri

For Security EngineersRead

Showing 209-224 of 759 articles

PreviousPage 14 of 48Next