Expert perspectives on application security, compliance, and emerging threats
IncidentWhat Happened Between January 14 and February 12, 2025, WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 had a remote code execution vulnerability in the core REST API batch endpoint ( b
IncidentWhat Happened Attackers began exploiting two WordPress vulnerabilities within three days of their public disclosure. The attack chains CVE-2026-60137 and CVE-2026-63030 together, creating a path to re
IncidentWhat Happened Three RubyGems packages, impersonating legitimate Ruby tools, were hijacked and republished with malicious code to steal credentials from developer workstations. These packages scanned f
IncidentA critical vulnerability in ServiceNow s AI Platform is being actively exploited. CVE-2026-6875 allows attackers to execute code remotely without authentication. ServiceNow issued patches for self-hos
Get weekly security insights and compliance updates delivered to your inbox.
IncidentThe Hidden Threat Your security testing finds nothing. Your WAF sees clean traffic. Your SIEM logs look normal. Meanwhile, an attacker exfiltrates data through DNS queries you never monitored. This is
IncidentWhat Happened When Anthropic disclosed the Mythos vulnerability in their Claude AI platform, security teams faced a familiar issue: they knew what was broken but couldn t fix it quickly. The vulnerabi
IncidentWhat Happened Pillar Security discovered sandbox escape vulnerabilities in multiple AI coding agents, including Cursor, OpenAI s Codex, Google s Gemini CLI, and Antigravity. These vulnerabilities didn
IncidentYour machine learning pipeline just stopped. The model checkpoints your team spent three months training? Encrypted. The curated datasets you ve been building for two years? Inaccessible. The ransom n
IncidentOn January 14, 2025, WordPress disclosed two chained vulnerabilities that allowed unauthenticated attackers to achieve remote code execution on any WordPress Core installation. Within hours, WordPress
IncidentIn March 2026, the TeamPCP attack compromised Trivy, Checkmarx, LiteLLM, and dozens of npm packages. Security teams knew about the vulnerabilities. They d logged tickets, assigned severity scores, and
IncidentWhat Happened On July 15, F5 patched CVE-2026-42533, a heap buffer overflow in nginx that allows remote attackers to crash worker processes and potentially execute arbitrary code. The vulnerability af
IncidentWhat Happened Attackers have found a way to spoof OAuth client IDs to bypass Microsoft Entra ID sign-in logs. By using a fake OAuth client ID during authentication, the sign-in event either doesn t ap
IncidentWhat Happened In the past 18 months, security teams have noticed a shift in how attackers probe their systems. SQL injection vulnerabilities that sat dormant in quarterly scan reports for years are no
IncidentWhat Happened In early 2026, Searchlight Cyber discovered two critical remote code execution vulnerabilities in WordPress Core, tracked as CVE-2026-63030 and CVE-2026-60137. These vulnerabilities, kno
IncidentOn January 29, 2025, the WordPress security team disclosed two high-severity vulnerabilities affecting WordPress 6.9 and the 7.1 beta release. Both issues, tracked as CVE-2026-60137 and CVE-2026-63030
IncidentOn July 18, 2026, WordPress released emergency patches for versions 6.9 and 7.0 to fix a critical remote code execution vulnerability. The flaw, known as wp2shell, combines CVE-2026-63030 and CVE-2026
