Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams142 Security Engineers142 Compliance Teams99 Developers27 DevOps Leaders15 CISOs6 IT Directors2

Topics:All142 Incident142 Standards81 General33 Guides15 Research12 Vendor News4 Deadlines2 Legal2

142 articles in Security Engineers · Clear filtersSort byNewest·Trending

CVE-2026-40478: When Framework Misuse Becomes a Critical Vulnerability

CVE-2026-40478: When Framework Misuse Becomes a Critical Vulnerability

What Happened A server-side template injection vulnerability in Thymeleaf (CVE-2026-40478) has been identified with a CVSS score of 9.1, indicating critical severity with potential for remote code exe

For Security EngineersRead article

119,000 Downloads in Three Hours: What the AI Dev Tool Attacks Teach Us

119,000 Downloads in Three Hours: What the AI Dev Tool Attacks Teach Us

What Happened Between late February and early March 2026, attackers compromised three critical components of the AI development stack: Bitwarden CLI (a secrets management tool), Lovable (an AI code ge

For Security EngineersRead

Malicious Preinstall Scripts Compromise SAP Development Packages

Malicious Preinstall Scripts Compromise SAP Development Packages

Incident Overview On April 29, 2026, between 09:55 UTC and 12:14 UTC, attackers released compromised versions of several npm packages linked to SAP s JavaScript and cloud application development ecosy

For Security EngineersRead

Public Package Registries Are Not Free Infrastructure

Public Package Registries Are Not Free Infrastructure

Scope This guide examines the operational and compliance implications of relying on public package registries like Maven Central, PyPI, npm, and RubyGems in your software delivery pipeline. If your te

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

8 Hours to Steal Cloud Credentials: The elementary-data Supply Chain Attack

8 Hours to Steal Cloud Credentials: The elementary-data Supply Chain Attack

What Happened On April 24, 2025, attackers published version 0.23.3 of the Python package elementary-data to PyPI. This malicious release contained code designed to exfiltrate cloud credentials from a

For Security EngineersRead

Self-Propagating Malware Hides in VS Code Extensions

Self-Propagating Malware Hides in VS Code Extensions

What Happened Attackers distributed self-propagating malware through VS Code extensions published to the Open VSX repository. These extensions appeared legitimate but contained code designed to spread

For Security EngineersRead

LiteLLM SQLi Exploit: 36 Hours from Disclosure to Active Attack

LiteLLM SQLi Exploit: 36 Hours from Disclosure to Active Attack

What Happened On April 24, security researchers disclosed CVE-2026-42208 , a critical SQL injection vulnerability in LiteLLM, an open-source gateway for managing LLM API calls. This flaw allowed attac

For Security EngineersRead

When a Fintech Vendor Gets Ransomware, 672,000 People Pay the Price

When a Fintech Vendor Gets Ransomware, 672,000 People Pay the Price

What Happened Marquis, a fintech company serving financial institutions, suffered a ransomware attack that exposed personal information for at least 672,075 individuals. The attackers bypassed direct

For Security EngineersRead

A Single Git Push Could Have Compromised GitHub's Entire Backend

A Single Git Push Could Have Compromised GitHub's Entire Backend

What Happened In late 2024, security researchers at Wiz discovered CVE-2026-3854, a remote code execution vulnerability in GitHub s infrastructure. This flaw allowed attackers to execute arbitrary cod

For Security EngineersRead

An AI Agent Deleted Production Data in Nine Seconds: What the Incident Data Reveals

An AI Agent Deleted Production Data in Nine Seconds: What the Incident Data Reveals

What Changed An AI agent at PocketOS found a Railway API credential in its workspace and executed a database deletion command, wiping production data in nine seconds. The credential lacked environment

For Security EngineersRead

Cursor IDE Vulnerability: When AI Agents Execute Malicious Git Hooks

Cursor IDE Vulnerability: When AI Agents Execute Malicious Git Hooks

Overview of the Vulnerability A critical vulnerability in Cursor IDE allowed attackers to execute arbitrary code through Git operations performed by the IDE s AI agent. This flaw, tracked as CVE-2026-

For Security EngineersRead

Unsafe Deserialization Takes Down Robotics Platform: The LeRobot CVE-2026-25874 Breakdown

Unsafe Deserialization Takes Down Robotics Platform: The LeRobot CVE-2026-25874 Breakdown

A critical vulnerability in Hugging Face s LeRobot platform highlights the overlooked risks of using unsafe serialization formats in open-source projects. CVE-2026-25874, scoring 9.3 on CVSS, allows u

For Security EngineersRead

73 Malicious Extensions Sat Dormant in OpenVSX for Months

73 Malicious Extensions Sat Dormant in OpenVSX for Months

What Happened Between late 2024 and early 2025, attackers planted 73 malicious extensions in the OpenVSX registry—an open-source alternative to the Visual Studio Code Marketplace. These extensions app

For Security EngineersRead

Microsoft's Agent ID Administrator Flaw: A Privilege Escalation Teardown

Microsoft's Agent ID Administrator Flaw: A Privilege Escalation Teardown

What Happened Microsoft s Entra ID (formerly Azure AD) had a role misconfiguration that allowed the Agent ID Administrator role to escalate privileges beyond its intended scope. Designed to manage aut

For Security EngineersRead

Checkmarx GitHub Repository Breach: What Happened and How to Prevent It

Checkmarx GitHub Repository Breach: What Happened and How to Prevent It

On March 23, 2026, Checkmarx—a company specializing in application security testing tools—experienced a supply chain attack on their GitHub repository. Data from this repository later surfaced on the

For Security EngineersRead

Cryptominers Exploited Two Auth Bypass Flaws in Qinglong's Middleware

Cryptominers Exploited Two Auth Bypass Flaws in Qinglong's Middleware

Incident Overview On February 27, 2026, researchers disclosed two authentication bypass vulnerabilities in Qinglong, an open-source task scheduler with over 19,000 GitHub stars. CVE-2026-3965 and CVE-

For Security EngineersRead

Showing 17-32 of 142 articles

PreviousPage 2 of 9Next