Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams338 Security Engineers451 Compliance Teams155 DevOps Leaders38 Developers28 CISOs8 IT Directors2

Topics:All338 Incident440 General91 Standards82 Research31 Guides25 Deadlines7 Vendor News4 Legal2

338 articles in Security Engineers · Incident · Clear filtersSort byNewest·Trending

Incident

Latest

4 min read

VS Code Extension Hijack: No Incident Yet, But the Timer Is Running

What Happened Microsoft has introduced a two-hour automatic update delay for Visual Studio Code extensions to mitigate supply chain attack risks. This delay applies to all third-party extensions excep

For Security EngineersRead article

Malicious npm Package Targeted Private Registry

Incident

4 min read

Malicious npm Package Targeted Private Registry

On May 1, 2022, npm removed a malicious package called gxm-reference-web-auth-server from the public registry. This targeted attack used encryption and multi-stage obfuscation to hide data exfiltratio

For Security EngineersRead

12 PyPI Packages Stole Discord Credentials via CDN

Incident

4 min read

12 PyPI Packages Stole Discord Credentials via CDN

Snyk discovered 12 malicious packages in the Python Package Index (PyPI) that stole Discord tokens, Roblox credentials, and payment card data. The attackers used Discord s content delivery network (CD

For Security EngineersRead

200+ Malicious npm Packages: What Went Wrong

Incident

4 min read

200+ Malicious npm Packages: What Went Wrong

What Happened Snyk s security research team discovered over 200 malicious packages in the npm registry, exploiting dependency confusion attacks to deliver Cobalt Strike payloads. These packages used i

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Apache Commons Config RCE: When Interpolation Became Exploitation

Incident

4 min read

Apache Commons Config RCE: When Interpolation Became Exploitation

What Happened CVE-2022-33980 allowed attackers to execute arbitrary code through Apache Commons Configuration s string interpolation feature. The vulnerability affected versions 2.4 through 2.7 and st

For Security EngineersRead

Everest Forms Pro Takeover: 29,300 Attacks in 48 Hours

Incident

4 min read

Everest Forms Pro Takeover: 29,300 Attacks in 48 Hours

What Happened Between April 13 and April 15, attackers exploited CVE-2026-3300 , a critical vulnerability in the Everest Forms Pro WordPress plugin, to create rogue administrator accounts on vulnerabl

For Security EngineersRead

Malicious Gem Installed via Pull Request

Incident

4 min read

Malicious Gem Installed via Pull Request

A developer on your team merges a routine dependency update. The diff shows a few version bumps in Gemfile.lock . Your CI passes. The code deploys. Three days later, your build server is mining crypto

For Security EngineersRead

73 Microsoft Repos Infected: Miasma Worm Teardown

Incident

4 min read

73 Microsoft Repos Infected: Miasma Worm Teardown

What Happened In mid-2026, the Miasma worm—a variant of Mini Shai-Hulud—compromised 73 Microsoft GitHub repositories. This attack didn t exploit a traditional vulnerability but instead manipulated the

For Security EngineersRead

Your Scanner Just Became the Attack Vector

Incident

4 min read

Your Scanner Just Became the Attack Vector

What Happened On September 29, 2022, Snyk disclosed CVE-2022-40764, a command injection vulnerability in their CLI tool that allowed arbitrary code execution. This flaw affected all versions before 1.

For Security EngineersRead

ChatGPT Prompt Injection: No Breach Required

Incident

4 min read

ChatGPT Prompt Injection: No Breach Required

What Happened OpenAI didn t suffer a data breach. Instead, they acknowledged a fundamental architectural risk: ChatGPT s features create multiple pathways for prompt injection attacks to exfiltrate da

For Security EngineersRead

AI Worm Hits Unnamed Enterprise: What Failed

Incident

4 min read

AI Worm Hits Unnamed Enterprise: What Failed

IMPORTANT NOTICE : This teardown analyzes a hypothetical scenario based on researcher predictions about AI worm capabilities. As of this writing, no documented enterprise breach by an autonomous AI wo

For Security EngineersRead

Microsoft Adds Seven AI Failure Modes: What Broke

Incident

4 min read

Microsoft Adds Seven AI Failure Modes: What Broke

Microsoft recently expanded its agentic AI security taxonomy with seven new failure modes. These patterns emerged from incidents involving deployed AI systems. If you re running AI agents in productio

For Security EngineersRead

29,300 Attack Attempts on a Single WordPress Plugin

Incident

4 min read

29,300 Attack Attempts on a Single WordPress Plugin

What Happened Between March 18 and today, attackers launched over 29,300 attempts to exploit WordPress sites using Everest Forms Pro, a premium form builder plugin. The vulnerability, tracked as CVE-2

For Security EngineersRead

CVE-2022-42889: When Default Interpolators Became Attack Vectors

Incident

4 min read

CVE-2022-42889: When Default Interpolators Became Attack Vectors

A remote code execution vulnerability in Apache Commons Text surfaced in October 2022, affecting versions 1.5.x through 1.9.x. While not as widespread as Log4Shell, CVE-2022-42889 highlights how trans

For Security EngineersRead

OpenSSL 3.0.7: Seven Days From Alert to Patch

Incident

3 min read

OpenSSL 3.0.7: Seven Days From Alert to Patch

What Happened On October 25, 2022, the OpenSSL project announced a critical vulnerability in OpenSSL 3.0.x. The patch was released on November 1, 2022, providing organizations exactly seven days to pr

For Security EngineersRead

Prompt Injection Took Over Claude Code Repos

Incident

4 min read

Prompt Injection Took Over Claude Code Repos

A malicious GitHub issue could hijack your entire repository. Security researcher RyotaK demonstrated this by finding a critical flaw in Anthropic s Claude Code GitHub Action, identifying around 50 wa

For Security EngineersRead

Showing 49-64 of 338 articles

PreviousPage 4 of 22Next