Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams771 Security Engineers1057 Compliance Teams280 DevOps Leaders89 Developers33 CISOs21 IT Directors2

Topics:All771 Incident951 General270 Standards94 Research90 Guides53 Deadlines17 Vendor News5 Legal2

771 articles in Security Engineers · Incident · Clear filtersSort byNewest·Trending

ServiceNow AI Platform Flaws: Three Injection Paths to Your Data

Incident

Latest

4 min read

ServiceNow AI Platform Flaws: Three Injection Paths to Your Data

What Happened ServiceNow patched three critical vulnerabilities in its AI Platform that allowed unauthenticated attackers to execute arbitrary code and SQL statements without user interaction. The vul

For Security EngineersRead article

NVD Reclassified 30,000 Vulnerabilities: What Broke

Incident

4 min read

NVD Reclassified 30,000 Vulnerabilities: What Broke

In April 2026, NIST reclassified roughly 30,000 vulnerabilities in the National Vulnerability Database as Not Scheduled. If your team relied on NVD as your single source of truth, you just lost visibi

For Security EngineersRead

GiveWP Flaw Exposes 100,000 Sites to Remote Takeover

Incident

5 min read

GiveWP Flaw Exposes 100,000 Sites to Remote Takeover

An unauthenticated attacker just created an admin account on a nonprofit s WordPress site. They didn t need credentials or exploit a complex chain. They sent a single HTTP request to a donation form.

For Security EngineersRead

8,300 Gitea Servers Still Vulnerable One Month After Patch

Incident

4 min read

8,300 Gitea Servers Still Vulnerable One Month After Patch

What happened On July 27, Gitea released version 1.27.1 to patch CVE-2026-60004, a critical remote code execution vulnerability in its diffpatch API endpoint. This flaw allows attackers to execute arb

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Incident

4 min read

Zero-Click Prompt Injection at Scale

What Happened In early 2024, security researchers disclosed EchoLeak, a zero-click prompt injection vulnerability in Microsoft 365 Copilot with a CVSS score of 9.3. This flaw allowed attackers to mani

For Security EngineersRead

Incident

4 min read

Two RCE Flaws in Next.js: What Broke

On April 17, 2025, Vercel shipped emergency patches for Next.js after discovering two critical vulnerabilities that let unauthenticated attackers execute arbitrary code on affected servers. One exploi

For Security EngineersRead

Two Arrests, Thousand Compromises: TeamPCP Teardown

Incident

4 min read

Two Arrests, Thousand Compromises: TeamPCP Teardown

A coordinated operation by the Australian Federal Police has led to the arrest of two individuals linked to TeamPCP, a hacking group responsible for supply-chain attacks that compromised over a thousa

For Security EngineersRead

Two Arrests, 3,800 Repositories: The TeamPCP Supply Chain Attack

Incident

4 min read

Two Arrests, 3,800 Repositories: The TeamPCP Supply Chain Attack

What Happened Australian Federal Police arrested two individuals linked to TeamPCP, a cybercrime group that compromised at least 3,800 GitHub repositories. The group deployed Shai-Hulud, a self-propag

For Security EngineersRead

1,000 Organizations Hit Through Poisoned npm Packages

Incident

4 min read

1,000 Organizations Hit Through Poisoned npm Packages

In April 2026, cyber threat assessment firms discovered malicious code in open-source npm packages. By the time Australian Federal Police and the FBI arrested two alleged members of TeamPCP, over 1,00

For Security EngineersRead

Incident

4 min read

Kiro IDE Vulnerability: What Went Wrong

A prompt injection flaw in Amazon s Kiro IDE allowed attackers to exfiltrate source code and credentials through a feature meant to assist developers. Disclosed by Mindgard in late 2024, the vulnerabi

For Security EngineersRead

HTTP Terminator Finds Six New Desync Variants

Incident

4 min read

HTTP Terminator Finds Six New Desync Variants

What Happened James Kettle from PortSwigger released HTTP Terminator, an AI-powered open source tool that discovered six previously unknown HTTP request-smuggling techniques. The tool uses machine lea

For Security EngineersRead

Two Unpatched Kaltura Flaws Expose Video Platforms

Incident

4 min read

Two Unpatched Kaltura Flaws Expose Video Platforms

What Happened CERT/CC disclosed two critical vulnerabilities in Kaltura s HTML5 video player library (mwEmbed) that remain unpatched. The flaws, tracked as CVE-2026-19913 and CVE-2026-19912, both resu

For Security EngineersRead

Gitea CVE-2026-60004: What Broke and How to Fix It

Incident

4 min read

Gitea CVE-2026-60004: What Broke and How to Fix It

On July 27, attackers began exploiting a critical vulnerability in Gitea, a popular self-hosted Git service. The flaw, tracked as CVE-2026-60004, allows remote attackers to execute arbitrary shell com

For Security EngineersRead

Gitea Crypto-Mining Attack: 11 Seconds From Login to Compromise

Incident

4 min read

Gitea Crypto-Mining Attack: 11 Seconds From Login to Compromise

What Happened Attackers exploited CVE-2026-60004 , a critical code injection vulnerability in Gitea, to execute arbitrary shell commands on unpatched self-hosted instances. The attack chain was straig

For Security EngineersRead

Avada RCE: Six Chained Flaws, Zero Clicks

Incident

4 min read

Avada RCE: Six Chained Flaws, Zero Clicks

On a Tuesday morning, Wordfence disclosed CVE-2026-18431, a critical vulnerability in Avada that lets unauthenticated attackers execute arbitrary PHP code on your server. No phishing email. No stolen

For Security EngineersRead

Incident

4 min read

AI Found Your Zero-Day Before You Did

On a Tuesday morning, your monitoring alerts fire. An attacker is exploiting a vulnerability in your API authentication layer that your last pentest missed. The exploit code is sophisticated, targetin

For Security EngineersRead

Promotional banner graphic asking if you are ready for PCI DSS 4.0 with a call-to-action to get the guide

Showing 65-80 of 771 articles

PreviousPage 5 of 49Next