Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams753 Security Engineers753 Compliance Teams221 DevOps Leaders63 Developers31 CISOs17 IT Directors2

Topics:All753 Incident702 General186 Standards88 Research61 Guides33 Deadlines11 Vendor News4 Legal2

753 articles in Security Engineers · Clear filtersSort byNewest·Trending

AI Agent Turned Insider Threat in Four Clicks

Incident

Latest

5 min read

AI Agent Turned Insider Threat in Four Clicks

An attacker sent a phishing link. The victim clicked it while logged into ChatGPT. Four clicks later, an autonomous AI agent was installed in their OpenAI workspace with persistent access to Outlook,

For Security EngineersRead article

Windmill CVE-2026-29059: Path Traversal Teardown

Incident

4 min read

Windmill CVE-2026-29059: Path Traversal Teardown

A critical vulnerability in Windmill s workflow platform lets attackers read any file on your server without logging in. If you re running an unpatched instance, they ve likely already done it. What H

For Security EngineersRead

Firefox Patch Turned Exploit in 59 Minutes

Incident

4 min read

Firefox Patch Turned Exploit in 59 Minutes

On the day Mozilla released 18 security patches for Firefox, Anthropic s red team used Claude Mythos Preview to analyze them. Within an hour, the AI had reverse-engineered the first patch into working

For Security EngineersRead

Fortune 100 Bank Cut Vulnerability Triage Time 80% Using Reachability Analysis

Incident

4 min read

Fortune 100 Bank Cut Vulnerability Triage Time 80% Using Reachability Analysis

The Problem: Overwhelming Vulnerability Alerts A Fortune 100 financial enterprise was overwhelmed by vulnerability alerts. Their scanning tools flagged about 40 million potential vulnerabilities acros

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Incident

3 min read

Cisco's Antares Model Misses the Incident

What s Happening? Cisco has introduced Antares, a family of AI models with 350 million, 1 billion, and 3 billion parameters. These models aim to help your security team identify vulnerable code by pro

For Security EngineersRead

AI Code Generator Introduced 15 Flaws Per Repo

Incident

4 min read

AI Code Generator Introduced 15 Flaws Per Repo

A security assessment of AI-generated codebases revealed a consistent pattern: each repository contained an average of 15 vulnerabilities. This finding emerged from analyzing production code written b

For Security EngineersRead

1,200 Downloads of a Typosquatted NuGet Package

Incident

4 min read

1,200 Downloads of a Typosquatted NuGet Package

Between August 13 and October 10, 2025, a package named Newtonsoftt.Json.Net appeared on NuGet . It mimicked Newtonsoft.Json, a popular JSON library in .NET, but it was a trojan targeting the Digitain

For Security EngineersRead

WordPress wp2shell: What 60% Exposure Tells Us About Update Hygiene

Incident

4 min read

WordPress wp2shell: What 60% Exposure Tells Us About Update Hygiene

What Happened Between December 2025 and early January 2026, attackers exploited two chained vulnerabilities in WordPress core to achieve unauthenticated remote code execution. The exploit chain, dubbe

For Security EngineersRead

Webshells Deployed Within 5 Hours of wp2shell Disclosure

Incident

4 min read

Webshells Deployed Within 5 Hours of wp2shell Disclosure

What Happened On July 17, 2025, attackers exploited critical vulnerabilities in WordPress s REST API batch-processing feature to install webshells and malicious plugins on unpatched sites. SearchLight

For Security EngineersRead

SharePoint RCE Exploited Within Days of PoC Release

Incident

4 min read

SharePoint RCE Exploited Within Days of PoC Release

What Happened Microsoft patched CVE-2026-50522 in their January 2025 security update, but attackers quickly exploited it. The vulnerability, discovered by DEVCORE researchers, allows an attacker with

For Security EngineersRead

AWS Kiro Config Rewrite: When AI Tools Bypass Approval

Incident

4 min read

AWS Kiro Config Rewrite: When AI Tools Bypass Approval

What Happened AWS s Kiro IDE had a vulnerability that allowed attackers to rewrite its configuration file and execute code without triggering approval prompts. Intezer s research team found that Kiro

For Security EngineersRead

AI Agents Broke Sandboxing by Not Breaking It

Incident

4 min read

AI Agents Broke Sandboxing by Not Breaking It

What Happened Pillar Security disclosed vulnerabilities in Cursor, Codex CLI, Gemini CLI, and Antigravity that allow AI agents to execute arbitrary code without triggering sandbox violations. Instead

For Security EngineersRead

WordPress Exploit Chain: 72 Hours to Weaponization

Incident

4 min read

WordPress Exploit Chain: 72 Hours to Weaponization

What Happened Attackers began exploiting two WordPress vulnerabilities within three days of their public disclosure. The attack chains CVE-2026-60137 and CVE-2026-63030 together, creating a path to re

For Security EngineersRead

Three Dormant RubyGems Accounts Hijacked to Spread Malware

Incident

4 min read

Three Dormant RubyGems Accounts Hijacked to Spread Malware

What Happened Three RubyGems packages, impersonating legitimate Ruby tools, were hijacked and republished with malicious code to steal credentials from developer workstations. These packages scanned f

For Security EngineersRead

ServiceNow CVE-2026-6875: Pre-Auth RCE Under Active Exploit

Incident

4 min read

ServiceNow CVE-2026-6875: Pre-Auth RCE Under Active Exploit

A critical vulnerability in ServiceNow s AI Platform is being actively exploited. CVE-2026-6875 allows attackers to execute code remotely without authentication. ServiceNow issued patches for self-hos

For Security EngineersRead

Out-of-Band Vulnerabilities Exposed: What Missing Detection Tools Cost You

Incident

4 min read

Out-of-Band Vulnerabilities Exposed: What Missing Detection Tools Cost You

The Hidden Threat Your security testing finds nothing. Your WAF sees clean traffic. Your SIEM logs look normal. Meanwhile, an attacker exfiltrates data through DNS queries you never monitored. This is

For Security EngineersRead

Showing 49-64 of 753 articles

PreviousPage 4 of 48Next