Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams736 Security Engineers1020 Compliance Teams274 DevOps Leaders88 Developers33 CISOs21 IT Directors2

Topics:All736 Incident911 General269 Standards94 Research87 Guides53 Deadlines17 Vendor News5 Legal2

736 articles in Security Engineers · Incident · Clear filtersSort byNewest·Trending

miniOrange SAML Flaws Gave Attackers Admin Access

Incident

Latest

4 min read

miniOrange SAML Flaws Gave Attackers Admin Access

Two critical vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin allowed attackers to access WordPress admin panels without credentials. Although both flaws are now patched, exploitation

For Security EngineersRead article

Marimo Notebook Flaw: When Edit Mode Becomes an Attack Vector

Incident

4 min read

Marimo Notebook Flaw: When Edit Mode Becomes an Attack Vector

A security flaw in Marimo s Python notebook software allowed attackers to execute arbitrary Model Context Protocol (MCP) commands before any cell code ran. The vulnerability, tracked as CVE-2026-75149

For Security EngineersRead

Gitea RCE Exploited in the Wild: Default Settings Turned Attack Vector

Incident

4 min read

Gitea RCE Exploited in the Wild: Default Settings Turned Attack Vector

Your Gitea instance just served cryptojacking malware to an attacker who never should have had access. This isn t hypothetical. CVE-2026-60004, a remote code execution vulnerability with a CVSS score

For Security EngineersRead

24 Packages Turned npm Mirrors Into Phishing Hosts

Incident

4 min read

24 Packages Turned npm Mirrors Into Phishing Hosts

What Happened OX Security discovered 24 npm packages containing malicious HTML pages designed to impersonate Cloudflare s security verification interface. The attack didn t target developers machines

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

A Single Prompt Poisoned the AI's Memory

Incident

4 min read

A Single Prompt Poisoned the AI's Memory

What Happened Researchers from Shanghai Jiao Tong University and Ant Group have demonstrated a new attack vector called InjecMEM. This attack compromises AI agent memory systems through normal user in

For Security EngineersRead

Phantom Raven: When AI Tooling Became the Entry Point

Incident

4 min read

Phantom Raven: When AI Tooling Became the Entry Point

What Happened Phantom Raven is an active AI-native supply chain attack targeting developer environments through compromised open-source packages. This campaign exploits the basic developer workflow: p

For Security EngineersRead

5,000 Records Leaked Through an Exposed API Key

Incident

4 min read

5,000 Records Leaked Through an Exposed API Key

What Happened South Korea s Modu-ui Changup platform, run by the Ministry of SMEs and Startups, leaked personal information and startup business ideas for about 5,000 applicants. The cause was an encr

For Security EngineersRead

Your Reachability Scanner Found 847 Vulnerabilities. How Many Matter?

Incident

4 min read

Your Reachability Scanner Found 847 Vulnerabilities. How Many Matter?

The Problem A security team at a financial services company ran static analysis tools and found 847 vulnerabilities in their codebase. Their reachability scanner confirmed 312 of these could execute.

For Security EngineersRead

Cursor IDE Remote Code Execution: When AI Tools Attack Themselves

Incident

5 min read

Cursor IDE Remote Code Execution: When AI Tools Attack Themselves

What Happened Novee s security research team discovered a vulnerability in Cursor, an AI-powered code editor, that allowed full remote code execution on a developer s workstation. The flaw exploited t

For Security EngineersRead

Prompt Injection Took Down a Customer Service Bot

Incident

4 min read

Prompt Injection Took Down a Customer Service Bot

What Happened A customer-facing LLM chatbot bypassed its safety guardrails when a user submitted input that overrode the system s original instructions. The bot disclosed internal prompts, leaked cust

For Security EngineersRead

LangChain's CVE-2026-34070: Where AI Met Path Traversal

Incident

4 min read

LangChain's CVE-2026-34070: Where AI Met Path Traversal

What Happened Cyera disclosed a path traversal vulnerability in LangChain, tracked as CVE-2026-34070, with a CVSS score of 7.5. This flaw lets attackers access files outside intended directories by ma

For Security EngineersRead

Claude Code Found Zero-Days in Vim and Emacs

Incident

4 min read

Claude Code Found Zero-Days in Vim and Emacs

A researcher used AI to review code, and within minutes, it flagged critical vulnerabilities in two widely used text editors. What Happened In early 2025, researcher Hung Nguyen employed Anthropic s C

For Security EngineersRead

Incident

5 min read

AI Finds What CodeQL Missed: A Teardown

GitHub s AI-powered scanning feature wasn t launched because their existing tools were flawless. It launched because traditional static analysis has blind spots, and those blind spots cost companies r

For Security EngineersRead

86% Can't See What Their AI Agents Share

Incident

5 min read

86% Can't See What Their AI Agents Share

The Visibility Problem Between 2024 and 2025, enterprise AI agent deployments surged. Security teams gained powerful automation tools capable of querying databases, calling APIs, and orchestrating wor

For Security EngineersRead

Incident

4 min read

Grok's Encrypted Instruction Flaw

On August 19, 2026, Adversa AI extracted private session data from xAI s Grok chatbot using a technique called Cryptographic Context Injection. This attack embeds encrypted instructions in web content

For Security EngineersRead

Incident

4 min read

DAO Hack Cost $60M: What Went Wrong

In June 2016, an attacker drained approximately $60 million in Ether from The DAO smart contract. The vulnerability was a reentrancy bug that let the attacker repeatedly call the withdrawal function b

For Security EngineersRead

Showing 49-64 of 736 articles

PreviousPage 4 of 46Next