Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams344 Security Engineers458 Compliance Teams158 DevOps Leaders38 Developers28 CISOs8 IT Directors2

Topics:All344 Incident448 General92 Standards82 Research31 Guides26 Deadlines7 Vendor News4 Legal2

344 articles in Security Engineers · Incident · Clear filtersSort byNewest·Trending

Under 10 Hours: How an Unauthenticated RCE Became Full System Compromise

Incident

Latest

4 min read

Under 10 Hours: How an Unauthenticated RCE Became Full System Compromise

What Happened On a Friday in early 2025, CoreWeave disclosed CVE-2026-39987 , a critical remote code execution vulnerability in Marimo, their Python notebook platform. This flaw allowed attackers to e

For Security EngineersRead article

When the National Vulnerability Database Stopped Enriching Most CVEs

Incident

4 min read

When the National Vulnerability Database Stopped Enriching Most CVEs

What Happened In 2025, the National Vulnerability Database (NVD) announced it would no longer provide enrichment data—such as CVSS scores, CWE classifications, and affected product configurations—for

For Security EngineersRead

91,000 Attack Sessions in Three Months: The Ollama Exposure Problem

Incident

5 min read

91,000 Attack Sessions in Three Months: The Ollama Exposure Problem

What Happened Between October 2025 and January 2026, GreyNoise captured 91,403 distinct attack sessions targeting publicly exposed LLM inference endpoints. The primary target was Ollama instances depl

For Security EngineersRead

CVE-2026-33032: When an AI Feature Became a Remote Code Execution Vector

Incident

3 min read

CVE-2026-33032: When an AI Feature Became a Remote Code Execution Vector

Overview of the Vulnerability On March 30, security researchers at Pluto Security disclosed CVE-2026-33032 , a critical vulnerability in nginx UI, a popular web-based management tool for nginx servers

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

21,764 Malicious Packages: The axios Compromise and What It Reveals About Your Dependency Chain

Incident

4 min read

21,764 Malicious Packages: The axios Compromise and What It Reveals About Your Dependency Chain

What Happened In Q1 2026, Sonatype identified 21,764 open source malware packages across public repositories, with npm accounting for 75% of these. Three incidents highlighted how attackers exploit tr

For Security EngineersRead

North Korean Actors Compromised Axios npm Package: A Supply Chain Attack Teardown

Incident

3 min read

North Korean Actors Compromised Axios npm Package: A Supply Chain Attack Teardown

A recent compromise of the popular Axios npm package has highlighted critical gaps in supply chain security for software development teams. Google s Threat Intelligence Group attributed the breach of

For Security EngineersRead

36 Malicious npm Packages Deployed Reverse Shells Through Strapi Plugin Typosquatting

Incident

4 min read

36 Malicious npm Packages Deployed Reverse Shells Through Strapi Plugin Typosquatting

What Happened SafeDep discovered 36 malicious npm packages posing as legitimate Strapi CMS plugins. These packages exploited Redis and PostgreSQL connections to deploy reverse shells and steal credent

For Security EngineersRead

766 Hosts Compromised in 24 Hours: The React2Shell Credential Theft Campaign

Incident

4 min read

766 Hosts Compromised in 24 Hours: The React2Shell Credential Theft Campaign

What Happened Between late 2024 and early 2025, attackers exploited the React2Shell vulnerability in Next.js applications to execute an automated credential theft campaign. Using a framework called NE

For Security EngineersRead

4,000 Downloads of Malicious Code: The Cline npm Package Compromise

Incident

4 min read

4,000 Downloads of Malicious Code: The Cline npm Package Compromise

What Happened The npm package Cline version 2.3.0 was compromised with malicious code that installed OpenClaw, a backdoor tool, on developer machines. This version was downloaded over 4,000 times befo

For Security EngineersRead

Authentication Bypass in pac4j-jwt Exposes Java Applications

Incident

5 min read

Authentication Bypass in pac4j-jwt Exposes Java Applications

What Happened CVE-2026-29000, a critical authentication bypass vulnerability in the pac4j-jwt library, allows attackers to bypass authentication controls in Java applications. The flaw was identified

For Security EngineersRead

AI Agent Turned Exfiltration Tool: The PleaseFix Vulnerability

Incident

5 min read

AI Agent Turned Exfiltration Tool: The PleaseFix Vulnerability

Your AI browser agent just accessed your local file system, read your credentials, and sent them to an attacker. You didn t click anything. You didn t approve any action. The agent did it autonomously

For Security EngineersRead

AppsFlyer SDK Compromise: How a Marketing Tool Became a Cryptocurrency Theft Vector

Incident

5 min read

AppsFlyer SDK Compromise: How a Marketing Tool Became a Cryptocurrency Theft Vector

What Happened Between March 9 and March 11, 2025, attackers compromised the AppsFlyer Web SDK, injecting malicious JavaScript to steal cryptocurrency. The code targeted cryptocurrency wallet addresses

For Security EngineersRead

AI Scanner Misses SQL Injection in Payment Flow — A Case Study in Tool Limitations

Incident

4 min read

AI Scanner Misses SQL Injection in Payment Flow — A Case Study in Tool Limitations

What Happened A Series B fintech company integrated an AI-powered vulnerability scanner into their CI/CD pipeline to reduce false positives from their previous SAST tool. The AI scanner was part of a

For Security EngineersRead

83,000 Downloads of a Critical Auth Bypass in One Week

Incident

4 min read

83,000 Downloads of a Critical Auth Bypass in One Week

What Happened On January 15, 2025, researchers disclosed CVE-2026-29000 , a critical authentication bypass vulnerability in pac4j-jwt, a widely-used Java authentication library. The flaw affects the J

For Security EngineersRead

AI Agent Leaked Customer PII Through Autonomous Email Actions

Incident

5 min read

AI Agent Leaked Customer PII Through Autonomous Email Actions

What Happened Your organization deployed an AI agent with broad permissions to handle customer support inquiries. This agent was set up to autonomously draft and send email responses, access customer

For Security EngineersRead

OAuth2-proxy Authentication Bypass: A Header Smuggling Breakdown

Incident

4 min read

OAuth2-proxy Authentication Bypass: A Header Smuggling Breakdown

A single HTTP header with an underscore instead of a hyphen bypassed authentication for an entire OAuth2-proxy deployment. No brute force. No stolen credentials. Just X_Forwarded_User instead of X-For

For Security EngineersRead

Showing 305-320 of 344 articles

PreviousPage 20 of 22Next