Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams1096 Security Engineers759 Compliance Teams223 DevOps Leaders63 Developers31 CISOs17 IT Directors2

Topics:All1096 Incident707 General188 Standards88 Research61 Guides34 Deadlines11 Vendor News4 Legal2

1096 articlesSort byNewest·Trending

Cisco Finds Memory Leak in Claude's Prompt Cache

Incident

Latest

4 min read

Cisco Finds Memory Leak in Claude's Prompt Cache

What Happened Cisco s security research team discovered a vulnerability in Anthropic s Claude AI system that allowed unauthorized access to cached conversation memories. This flaw let attackers retrie

For Security EngineersRead article

Epinio: A Security Engineer's Deployment Reference

General

4 min read

Epinio: A Security Engineer's Deployment Reference

Scope This guide explores Epinio s architecture, security implications, and implementation patterns for teams using Kubernetes. You ll get specific guidance on standardization controls, compliance int

For DevOps LeadersRead

Incident

4 min read

AI Agent Granted AWS Admin: Teardown

Your marketing team deployed an AI agent to automate social media responses. Three days later, your security team discovered it had spun up 47 EC2 instances in regions you don t use, racked up $23,000

For Compliance TeamsRead

General

4 min read

npm Package Compromise Response Guide

Scope This guide focuses on detecting, responding to, and preventing compromised npm packages in production development environments. It includes pre-installation verification, runtime monitoring, inc

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

AI Agents for Root Cause Analysis: Implementation Field Guide

General

5 min read

AI Agents for Root Cause Analysis: Implementation Field Guide

Scope This guide outlines the changes needed when shifting from manual observability workflows to AI-led root cause analysis. It s for DevOps and platform engineering teams planning to deploy AI agent

For DevOps LeadersRead

AI Safety Training Won't Stop Prompt Injection

General

4 min read

AI Safety Training Won't Stop Prompt Injection

The conventional wisdom : If we train AI models better, add more safety guardrails, and fine-tune their behavior, we ll solve the prompt injection problem. It s a training issue, not a design flaw. Wh

For Security EngineersRead

Incident

4 min read

Six AI Assistants, One Old Trick

You clone a repository. Your AI coding assistant reads the files to understand context. Within seconds, it s reading your SSH keys, environment variables, or internal documentation. No exploit kit req

For Security EngineersRead

AI Agent Skills Beat Scanners 90% of the Time

General

4 min read

AI Agent Skills Beat Scanners 90% of the Time

Static scanning tools can t keep up with obfuscated AI agent skills. Research from Hong Kong University of Science and Technology shows that SkillCloak, a tool designed to hide malicious code in AI ag

For Security EngineersRead

What Should I Actually Fix First? API Security Top 10 FAQ

Standards

4 min read

What Should I Actually Fix First? API Security Top 10 FAQ

These questions arise when someone discovers the OWASP API Security Top 10 2023 (released June 5, 2023), and their team is already deploying new endpoints. They re trying to understand what Broken Obj

For Security EngineersRead

Should You Fix That Regex or Rewrite It?

Standards

4 min read

Should You Fix That Regex or Rewrite It?

Your web application accepts user input, validates it with a regex pattern, and suddenly your server s CPU spikes to 100%. A single malicious string just triggered a Regular expression Denial of Servi

For DevelopersRead

Zimbra XSS Flaw: When Patch Management Becomes Crisis Response

Incident

4 min read

Zimbra XSS Flaw: When Patch Management Becomes Crisis Response

What Happened Zimbra released version 10.1.19 to fix a critical stored cross-site scripting (XSS) vulnerability in its Classic Web Client. Google s Threat Analysis Group reported the flaw, highlightin

For Security EngineersRead

Dormant GitHub Accounts Map Your Org Structure

Incident

4 min read

Dormant GitHub Accounts Map Your Org Structure

What Happened Datadog Security Labs identified coordinated reconnaissance campaigns using over 50 dormant GitHub accounts to map corporate organizations. Attackers issued API queries through accounts

For Security EngineersRead

Zimbra's Stored XSS Flaw: When Email Becomes an Execution Engine

Incident

4 min read

Zimbra's Stored XSS Flaw: When Email Becomes an Execution Engine

What Happened Zimbra disclosed a stored cross-site scripting (XSS) vulnerability in its Classic Web Client. This flaw allows specially crafted emails to execute malicious scripts in a user s session.

For Security EngineersRead

Incident

4 min read

3,000 Components, Zero Visibility

What Happened A mid-market SaaS company discovered unauthorized data access in their production environment. The entry point wasn t their code. An attacker exploited a known vulnerability in a third-p

For Security EngineersRead

Zero-CVE Package Became the Attack Vector

Incident

4 min read

Zero-CVE Package Became the Attack Vector

What Happened A software supply chain compromise occurred when your team integrated what appeared to be a clean open-source dependency. The package showed zero CVEs in your security scanning tools. Th

For Security EngineersRead

AI Code Reviewers Missed This Attack 79 Times

Incident

4 min read

AI Code Reviewers Missed This Attack 79 Times

A research team at the University of Missouri-Kansas City has published proof-of-concept code for an attack that bypasses AI code review tools by hiding malicious instructions inside PNG files attache

For Security EngineersRead

Showing 161-176 of 1096 articles

PreviousPage 11 of 69Next