Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams737 Security Engineers1021 Compliance Teams275 DevOps Leaders88 Developers33 CISOs21 IT Directors2

Topics:All737 Incident912 General270 Standards94 Research87 Guides53 Deadlines17 Vendor News5 Legal2

737 articles in Security Engineers · Incident · Clear filtersSort byNewest·Trending

Four Malicious Packages, One Missing Approval Gate

Incident

Latest

5 min read

Four Malicious Packages, One Missing Approval Gate

What Happened On April 29, 2026, attackers published malicious versions of four npm packages in the SAP development ecosystem. They exploited a CI pipeline vulnerability that allowed unauthorized npm

For Security EngineersRead article

AI Agent Leaked OAuth Token Through Screenshot Manipulation

Incident

5 min read

AI Agent Leaked OAuth Token Through Screenshot Manipulation

An AI agent captured sensitive credentials and leaked them through an external messaging service. This incident occurred during research by Okta Threat Intelligence using OpenClaw, an AI agent framewo

For Security EngineersRead

CVE-2026-41940: When Authentication Bypass Meets Mass Hosting Infrastructure

Incident

3 min read

CVE-2026-41940: When Authentication Bypass Meets Mass Hosting Infrastructure

Summary of the Incident A critical authentication bypass vulnerability in cPanel WHM, identified as CVE-2026-41940, allowed attackers to access administrative functions without credentials. With a CVS

For Security EngineersRead

Two Malicious PyPI Packages Stole Credentials for 48 Hours

Incident

5 min read

Two Malicious PyPI Packages Stole Credentials for 48 Hours

What Happened On April 30, 2026, attackers published two malicious versions of PyTorch Lightning—versions 2.6.2 and 2.6.3—to the Python Package Index (PyPI) after compromising a publisher account. The

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Two Malicious PyTorch Lightning Versions Slipped Through PyPI's Gates

Incident

4 min read

Two Malicious PyTorch Lightning Versions Slipped Through PyPI's Gates

Incident Overview On April 30, 2026, attackers released two compromised versions of PyTorch Lightning —2.6.2 and 2.6.3—on the Python Package Index (PyPI) after gaining control of a publisher account.

For Security EngineersRead

PyTorch Lightning Supply Chain Attack: Two Versions, Thousands of Exposed Environments

Incident

4 min read

PyTorch Lightning Supply Chain Attack: Two Versions, Thousands of Exposed Environments

What Happened On April 30, 2026, threat actors released two malicious versions of PyTorch Lightning—2.6.2 and 2.6.3—on the Python Package Index (PyPI). These packages included a hidden _runtime direct

For Security EngineersRead

Four SAP npm Packages Shipped Malware for Two Weeks

Incident

5 min read

Four SAP npm Packages Shipped Malware for Two Weeks

On a routine Thursday, developers who ran npm install on SAP s Cloud Application Programming Model packages received more than they expected. Four official SAP packages — @cap-js/sqlite v2.2.2, @cap-j

For Security EngineersRead

How GitHub Patched a Critical RCE in Two Hours

Incident

3 min read

How GitHub Patched a Critical RCE in Two Hours

GitHub recently faced a potential crisis with CVE-2026-3854, a remote code execution vulnerability that threatened millions of private repositories. Within two hours of receiving the report, GitHub ha

For Security EngineersRead

GitHub's RCE Vulnerability: When 88% of Self-Hosted Instances Miss Critical Patches

Incident

4 min read

GitHub's RCE Vulnerability: When 88% of Self-Hosted Instances Miss Critical Patches

What Happened On January 15, 2025, GitHub disclosed a remote code execution (RCE) vulnerability affecting both GitHub.com and GitHub Enterprise Server. Wiz security researchers discovered the flaw usi

For Security EngineersRead

CVE-2026-40478: When Framework Misuse Becomes a Critical Vulnerability

Incident

4 min read

CVE-2026-40478: When Framework Misuse Becomes a Critical Vulnerability

What Happened A server-side template injection vulnerability in Thymeleaf (CVE-2026-40478) has been identified with a CVSS score of 9.1, indicating critical severity with potential for remote code exe

For Security EngineersRead

119,000 Downloads in Three Hours: What the AI Dev Tool Attacks Teach Us

Incident

4 min read

119,000 Downloads in Three Hours: What the AI Dev Tool Attacks Teach Us

What Happened Between late February and early March 2026, attackers compromised three critical components of the AI development stack: Bitwarden CLI (a secrets management tool), Lovable (an AI code ge

For Security EngineersRead

Malicious Preinstall Scripts Compromise SAP Development Packages

Incident

3 min read

Malicious Preinstall Scripts Compromise SAP Development Packages

Incident Overview On April 29, 2026, between 09:55 UTC and 12:14 UTC, attackers released compromised versions of several npm packages linked to SAP s JavaScript and cloud application development ecosy

For Security EngineersRead

8 Hours to Steal Cloud Credentials: The elementary-data Supply Chain Attack

Incident

5 min read

8 Hours to Steal Cloud Credentials: The elementary-data Supply Chain Attack

What Happened On April 24, 2025, attackers published version 0.23.3 of the Python package elementary-data to PyPI. This malicious release contained code designed to exfiltrate cloud credentials from a

For Security EngineersRead

Self-Propagating Malware Hides in VS Code Extensions

Incident

4 min read

Self-Propagating Malware Hides in VS Code Extensions

What Happened Attackers distributed self-propagating malware through VS Code extensions published to the Open VSX repository. These extensions appeared legitimate but contained code designed to spread

For Security EngineersRead

LiteLLM SQLi Exploit: 36 Hours from Disclosure to Active Attack

Incident

3 min read

LiteLLM SQLi Exploit: 36 Hours from Disclosure to Active Attack

What Happened On April 24, security researchers disclosed CVE-2026-42208 , a critical SQL injection vulnerability in LiteLLM, an open-source gateway for managing LLM API calls. This flaw allowed attac

For Security EngineersRead

When a Fintech Vendor Gets Ransomware, 672,000 People Pay the Price

Incident

3 min read

When a Fintech Vendor Gets Ransomware, 672,000 People Pay the Price

What Happened Marquis, a fintech company serving financial institutions, suffered a ransomware attack that exposed personal information for at least 672,075 individuals. The attackers bypassed direct

For Security EngineersRead

Showing 657-672 of 737 articles

PreviousPage 42 of 47Next