Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams344 Security Engineers458 Compliance Teams158 DevOps Leaders38 Developers28 CISOs8 IT Directors2

Topics:All344 Incident448 General92 Standards82 Research31 Guides26 Deadlines7 Vendor News4 Legal2

344 articles in Security Engineers · Incident · Clear filtersSort byNewest·Trending

The Trivy Compromise: 75 Version Tags Poisoned in 24 Hours

Incident

Latest

4 min read

The Trivy Compromise: 75 Version Tags Poisoned in 24 Hours

What Happened Attackers compromised the Aqua Security repository hosting Trivy , a widely used vulnerability scanner, poisoning 75 of 76 version tags. This turned a tool meant to find vulnerabilities

For Security EngineersRead article

513,000 Lines of AI Code Leaked Through a Source Map

Incident

4 min read

513,000 Lines of AI Code Leaked Through a Source Map

What Happened Security researcher Chaofan Shou recently discovered that Anthropic accidentally exposed the complete source code for Claude Code—their AI coding agent—through a public npm package. The

For Security EngineersRead

1,700 Malicious Packages: How UNC1069 Weaponized Four Package Ecosystems

Incident

5 min read

1,700 Malicious Packages: How UNC1069 Weaponized Four Package Ecosystems

What Happened Since January 2025, threat actor UNC1069—linked to North Korean groups BlueNoroff, Sapphire Sleet, and Stardust Chollima—deployed over 1,700 malicious packages across npm, PyPI, Go, and

For Security EngineersRead

21,764 Malware Packages in 90 Days: What npm's Supply Chain Crisis Teaches Us

Incident

3 min read

21,764 Malware Packages in 90 Days: What npm's Supply Chain Crisis Teaches Us

The Crisis Unfolds In Q1 2026, Sonatype identified 21,764 malicious packages in open source repositories, with npm accounting for 75% of these. That s 16,323 malicious packages targeting JavaScript de

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

AI Scans 100,000 Repositories in 72 Hours: The PRT-scan Attack

Incident

3 min read

AI Scans 100,000 Repositories in 72 Hours: The PRT-scan Attack

Overview of the Attack An attacker used an AI tool named PRT-scan to systematically scan GitHub repositories for misconfigurations that expose secrets. This attack automated the process of reconnaissa

For Security EngineersRead

Bitwarden CLI Trojan: How a GitHub Action Became a Supply Chain Weapon

Incident

4 min read

Bitwarden CLI Trojan: How a GitHub Action Became a Supply Chain Weapon

What Happened On April 22, 2025, attackers published a malicious version of the Bitwarden CLI password manager (version 2026.4.0) to the npm registry. The compromised package was available for about 1

For Security EngineersRead

Incident

Stolen Publishing Tokens: How CanisterSprawl Turned npm Maintainers Into Attack Vectors

What Happened In late 2024, security researchers at StepSecurity and Socket disclosed CanisterSprawl, an npm malware campaign that exploits developer environments to steal credentials and publish mali

For Security EngineersRead

Incident

Claude Found RCE Bugs in Vim and Emacs That Fire When You Open a File

What Happened An AI assistant discovered remote code execution (RCE) vulnerabilities in two widely-used text editors: Vim and GNU Emacs. These vulnerabilities do not require complex exploits or user i

For Security EngineersRead

Google's Antigravity Tool: When Prompt Injection Becomes Remote Code Execution

Incident

4 min read

Google's Antigravity Tool: When Prompt Injection Becomes Remote Code Execution

What Happened Google patched a critical remote code execution vulnerability in Antigravity, an internal AI-based tool. The flaw arose from a prompt-injection vulnerability that allowed attackers to es

For Security EngineersRead

13 Hours: An SSRF Vulnerability Goes from Disclosure to Active Exploitation

Incident

4 min read

13 Hours: An SSRF Vulnerability Goes from Disclosure to Active Exploitation

What Happened When CVE-2026-33626 was disclosed, attackers quickly began exploiting a server-side request forgery (SSRF) vulnerability in LMDeploy, an open-source toolkit for deploying large language

For Security EngineersRead

Bitwarden CLI Package Breach: How a Compromised GitHub Action Stole Developer Credentials

Incident

4 min read

Bitwarden CLI Package Breach: How a Compromised GitHub Action Stole Developer Credentials

What Happened On April 22, 2026, the @bitwarden/cli npm package was compromised with malicious code aiming to steal developer credentials. This package was available from 5:57 PM to 7:30 PM ET. During

For Security EngineersRead

A 9.3 CVSS Vulnerability That Will Never Be Patched

Incident

5 min read

A 9.3 CVSS Vulnerability That Will Never Be Patched

What Happened CVE-2026-5752, a critical vulnerability in Cohere AI s Terrarium sandbox, allows attackers to execute arbitrary code with root privileges and escape container isolation. This flaw exploi

For Security EngineersRead

An Attacker Executed Code Through Your AI Agent and You Never Saw It

Incident

4 min read

An Attacker Executed Code Through Your AI Agent and You Never Saw It

Understanding the Vulnerability OX Security disclosed a critical vulnerability in Anthropic s Model Context Protocol (MCP) SDK that enables remote code execution across Python, TypeScript, Java, and R

For Security EngineersRead

Grafana's AI Dashboard Flaw: When LLM Integration Bypasses URL Validation

Incident

3 min read

Grafana's AI Dashboard Flaw: When LLM Integration Bypasses URL Validation

Overview of the Vulnerability Noma Security has disclosed a vulnerability in Grafana s AI-powered dashboards, allowing attackers to exfiltrate sensitive data through indirect prompt injection. This fl

For Security EngineersRead

CVE-2025-59528: When a CVSS-10 Vulnerability Meets 15,000 Exposed Instances

Incident

4 min read

CVE-2025-59528: When a CVSS-10 Vulnerability Meets 15,000 Exposed Instances

What Happened Flowise, an open-source low-code platform for building AI chatbots and workflows, was found to have CVE-2025-59528—a critical arbitrary JavaScript code injection vulnerability. This flaw

For Security EngineersRead

10 Hours: The Marimo RCE Exploit Timeline

Incident

4 min read

10 Hours: The Marimo RCE Exploit Timeline

What Happened A remote code execution vulnerability in Marimo, an open-source Python notebook platform, was exploited within 10 hours of public disclosure. The flaw, tracked as CVE-2026-39987, affects

For Security EngineersRead

Showing 289-304 of 344 articles

PreviousPage 19 of 22Next