Expert perspectives on application security, compliance, and emerging threats
IncidentThe Challenge A financial services organization believed they had a robust security architecture with WAFs , application-layer security controls, runtime protection, and comprehensive monitoring. Howe
GeneralYour cloud environment contains more service accounts, API keys, and bot credentials than employee logins—and most security teams can t inventory them. This shift in identity architecture fundamentall
StandardsLast month, an AI system identified twelve zero-day vulnerabilities in OpenSSL—ten assigned CVE-2025 identifiers and two CVE-2026 identifiers. Five of those findings came with AI-proposed patches that
IncidentAttack Overview Attackers have targeted government and public-sector organizations by exploiting OAuth 2.0 s error handling mechanisms. The attack began with phishing emails containing malicious links
Get weekly security insights and compliance updates delivered to your inbox.
StandardsWhen OpenClaw patched the ClawJacked vulnerability within 24 hours of disclosure, they acted swiftly. If you re running AI agents—whether OpenClaw, AutoGPT, LangChain agents, or custom implementations
StandardsThe release candidate of ASVS 5.0 was announced on April 9, 2025. You have a limited opportunity to influence what becomes the benchmark for application security verification. Elar Lang will present t
IncidentWhat Happened On February 17, 2026, an attacker exploited a compromised npm publish token to release Cline CLI version 2.3.0, an unauthorized update that installed OpenClaw on developer systems. This
IncidentOverview of the Incident On February 6, n8n released version 2.6.4 to address a stored cross-site scripting (XSS) vulnerability in its handling of OAuth credentials. Security researchers at Imperva fo
IncidentYour security team invested in threat intelligence feeds, built a threat modeling framework, and ran quarterly vulnerability assessments. Yet, an adversary exploited a gap you d documented but never v
GeneralYour security team just approved an AI coding assistant for your engineering team. Within days, developers are using it to refactor authentication logic, query production databases, and push code chan
Vendor NewsThe Challenge of AI-Generated Code Your team is using AI coding assistants to accelerate development, but this introduces a new challenge: how do you secure AI-generated code? Should you rely on tradi
GuidesYour team may have adopted tools like GitHub Copilot or Claude to accelerate development. While management appreciates the increased productivity, and developers enjoy bypassing repetitive tasks, secu
ResearchThe Decision You Face Your organization needs a new identity and access management (IAM) system. You re evaluating options: should you adopt an open source IAM platform that you ll need to operate and
StandardsYour employee receives an email about a critical security issue. Minutes later, someone claiming to be from IT calls to help resolve it. Eleven hours later, attackers have compromised nine additional
IncidentWhat Happened OpenClaw, a self-hosted AI platform, had a vulnerability that allowed malicious websites to hijack local instances through brute-force password attacks. The attack was simple: a user vis
GeneralThe Conventional Wisdom Security teams often view AI-powered vulnerability detection as an add-on to existing processes. You conduct static analysis, dynamic scans, and dependency checks, then perhaps
