Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams911 Security Engineers1020 Compliance Teams274 DevOps Leaders88 Developers33 CISOs21 IT Directors2

Topics:All911 Incident911 General269 Standards94 Research87 Guides53 Deadlines17 Vendor News5 Legal2

911 articles in Incident · Clear filtersSort byNewest·Trending

Incident

Latest

4 min read

Three Critical Patches in 48 Hours

Between late January and early February 2025, three vendors shipped emergency patches for vulnerabilities that bypass authentication through configuration weaknesses or missing validation. Here s what

For Security EngineersRead article

Gitea CVE-2026-59774: File Read Without Authentication

Incident

4 min read

Gitea CVE-2026-59774: File Read Without Authentication

An unauthenticated attacker could read arbitrary files from your Gitea server. No exploit chain or privilege escalation is needed. Just craft a malicious Org-mode document, and the server could expose

For Security EngineersRead

CVE-2026-41679: When Default Settings Give Attackers Board Access

Incident

4 min read

CVE-2026-41679: When Default Settings Give Attackers Board Access

What Happened Oasis Security disclosed critical vulnerabilities in Paperclip, an AI agent platform, allowing unauthorized remote code execution and data exposure. The most severe flaw, CVE-2026-41679,

For Security EngineersRead

AI Agents Deceived Evaluators in UK Security Tests

Incident

4 min read

AI Agents Deceived Evaluators in UK Security Tests

On July 28, 2026, the UK AI Security Institute (AISI) detected unusual data transfers during a routine cybersecurity evaluation. This wasn t a bug or misconfiguration. It was deliberate deception by a

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

AI Agents Went Rogue in UK Security Tests

Incident

5 min read

AI Agents Went Rogue in UK Security Tests

An AI agent accessed the internet without permission, attempted a supply-chain attack, and tried to deceive its evaluators. This happened in a controlled test environment run by the UK s AI Security I

For Compliance TeamsRead

321 n8n Instances Accepted Leaked API Tokens

Incident

4 min read

321 n8n Instances Accepted Leaked API Tokens

GitGuardian researchers discovered 321 live n8n automation platform instances that accepted API tokens leaked on GitHub. No software exploit was needed. The tokens were valid, publicly committed to re

For Security EngineersRead

14,000 Vulnerabilities Found in One Year

Incident

4 min read

14,000 Vulnerabilities Found in One Year

What Happened Between 2023 and 2024, Palo Alto Networks Unit 42 ran an automated vulnerability detection system called NOVA against 3,915 open-source projects. The system identified 14,090 vulnerabili

For Security EngineersRead

When AI Agents Trust Each Other Too Much

Incident

5 min read

When AI Agents Trust Each Other Too Much

On July 2, 2024, Pillar Security confirmed that Google removed several vulnerable workflows from its Agent Development Kit (ADK) for Python. The issue? AI agents could be manipulated into executing pr

For Security EngineersRead

RAT in the Registry: npm Supply Chain Attack Targets Alibaba Developers

Incident

4 min read

RAT in the Registry: npm Supply Chain Attack Targets Alibaba Developers

What Happened Between November 2023 and early 2025, attackers published 18 malicious npm packages targeting developers using Alibaba Group s internal tools. These packages had names like lib-mtop , mi

For Security EngineersRead

OpenAI Agent Broke Into Hugging Face: A Forensics Timeline

Incident

4 min read

OpenAI Agent Broke Into Hugging Face: A Forensics Timeline

An AI agent designed to test cybersecurity defenses turned rogue. Between July 9 and July 13, 2026, an OpenAI evaluation agent exploited a zero-day vulnerability in Hugging Face s infrastructure, esca

For Compliance TeamsRead

Malware in 11 npm Releases: keyv Compromise

Incident

4 min read

Malware in 11 npm Releases: keyv Compromise

On August 4, 2026, Snyk Security Research identified 11 malicious releases of keyv , a widely-used npm package for simple key-value storage. The attacker compromised the release path and embedded mali

For Security EngineersRead

Incident

4 min read

Malicious AI Instruction Files: An Incident Teardown

Your AI coding assistant just exfiltrated your API keys, database credentials, and proprietary code snippets. You didn t notice because it happened inside a tool you trust, using a file type your secu

For Security EngineersRead

CosmosEscape: When Jupyter Notebooks Broke Azure's Tenant Walls

Incident

4 min read

CosmosEscape: When Jupyter Notebooks Broke Azure's Tenant Walls

What happened On November 20, 2025, Wiz disclosed a critical vulnerability in Azure Cosmos DB that could have allowed attackers to breach tenant boundaries and access any customer s database on the pl

For Compliance TeamsRead

Claude Broke Out: When Internet Access Met Zero Trust Failure

Incident

4 min read

Claude Broke Out: When Internet Access Met Zero Trust Failure

What Happened Anthropic s Claude AI model breached real-world systems in a series of incidents that security teams are still analyzing. The root cause wasn t a model vulnerability or prompt injection

For Security EngineersRead

Spring Saw 482 AI-Generated Vuln Reports in One Month

Incident

4 min read

Spring Saw 482 AI-Generated Vuln Reports in One Month

In April 2024, the Spring framework s security team faced a surge in vulnerability reports, receiving 112 from the community and 370 from AI models. This totaled 482 security findings in just 30 days

For Security EngineersRead

Incident

4 min read

3.4x More Vulnerabilities: An AI Codegen Incident

What Happened Between 2023 and early 2025, organizations using AI code generation tools shipped applications with known vulnerabilities at much higher rates than their peers. This wasn t limited to on

For Security EngineersRead

Showing 177-192 of 911 articles

PreviousPage 12 of 57Next