Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams142 Security Engineers142 Compliance Teams99 Developers27 DevOps Leaders15 CISOs6 IT Directors2

Topics:All142 Incident142 Standards81 General33 Guides15 Research12 Vendor News4 Deadlines2 Legal2

142 articles in Incident · Clear filtersSort byNewest·Trending

GitHub's RCE Vulnerability: When 88% of Self-Hosted Instances Miss Critical Patches

Incident

Latest

4 min read

GitHub's RCE Vulnerability: When 88% of Self-Hosted Instances Miss Critical Patches

What Happened On January 15, 2025, GitHub disclosed a remote code execution (RCE) vulnerability affecting both GitHub.com and GitHub Enterprise Server. Wiz security researchers discovered the flaw usi

For Security EngineersRead article

CVE-2026-40478: When Framework Misuse Becomes a Critical Vulnerability

Incident

4 min read

CVE-2026-40478: When Framework Misuse Becomes a Critical Vulnerability

What Happened A server-side template injection vulnerability in Thymeleaf (CVE-2026-40478) has been identified with a CVSS score of 9.1, indicating critical severity with potential for remote code exe

For Security EngineersRead

119,000 Downloads in Three Hours: What the AI Dev Tool Attacks Teach Us

Incident

4 min read

119,000 Downloads in Three Hours: What the AI Dev Tool Attacks Teach Us

What Happened Between late February and early March 2026, attackers compromised three critical components of the AI development stack: Bitwarden CLI (a secrets management tool), Lovable (an AI code ge

For Security EngineersRead

Malicious Preinstall Scripts Compromise SAP Development Packages

Incident

3 min read

Malicious Preinstall Scripts Compromise SAP Development Packages

Incident Overview On April 29, 2026, between 09:55 UTC and 12:14 UTC, attackers released compromised versions of several npm packages linked to SAP s JavaScript and cloud application development ecosy

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

8 Hours to Steal Cloud Credentials: The elementary-data Supply Chain Attack

Incident

5 min read

8 Hours to Steal Cloud Credentials: The elementary-data Supply Chain Attack

What Happened On April 24, 2025, attackers published version 0.23.3 of the Python package elementary-data to PyPI. This malicious release contained code designed to exfiltrate cloud credentials from a

For Security EngineersRead

Self-Propagating Malware Hides in VS Code Extensions

Incident

4 min read

Self-Propagating Malware Hides in VS Code Extensions

What Happened Attackers distributed self-propagating malware through VS Code extensions published to the Open VSX repository. These extensions appeared legitimate but contained code designed to spread

For Security EngineersRead

LiteLLM SQLi Exploit: 36 Hours from Disclosure to Active Attack

Incident

3 min read

LiteLLM SQLi Exploit: 36 Hours from Disclosure to Active Attack

What Happened On April 24, security researchers disclosed CVE-2026-42208 , a critical SQL injection vulnerability in LiteLLM, an open-source gateway for managing LLM API calls. This flaw allowed attac

For Security EngineersRead

When a Fintech Vendor Gets Ransomware, 672,000 People Pay the Price

Incident

3 min read

When a Fintech Vendor Gets Ransomware, 672,000 People Pay the Price

What Happened Marquis, a fintech company serving financial institutions, suffered a ransomware attack that exposed personal information for at least 672,075 individuals. The attackers bypassed direct

For Security EngineersRead

A Single Git Push Could Have Compromised GitHub's Entire Backend

Incident

3 min read

A Single Git Push Could Have Compromised GitHub's Entire Backend

What Happened In late 2024, security researchers at Wiz discovered CVE-2026-3854, a remote code execution vulnerability in GitHub s infrastructure. This flaw allowed attackers to execute arbitrary cod

For Security EngineersRead

Cursor IDE Vulnerability: When AI Agents Execute Malicious Git Hooks

Incident

4 min read

Cursor IDE Vulnerability: When AI Agents Execute Malicious Git Hooks

Overview of the Vulnerability A critical vulnerability in Cursor IDE allowed attackers to execute arbitrary code through Git operations performed by the IDE s AI agent. This flaw, tracked as CVE-2026-

For Security EngineersRead

Unsafe Deserialization Takes Down Robotics Platform: The LeRobot CVE-2026-25874 Breakdown

Incident

4 min read

Unsafe Deserialization Takes Down Robotics Platform: The LeRobot CVE-2026-25874 Breakdown

A critical vulnerability in Hugging Face s LeRobot platform highlights the overlooked risks of using unsafe serialization formats in open-source projects. CVE-2026-25874, scoring 9.3 on CVSS, allows u

For Security EngineersRead

73 Malicious Extensions Sat Dormant in OpenVSX for Months

Incident

5 min read

73 Malicious Extensions Sat Dormant in OpenVSX for Months

What Happened Between late 2024 and early 2025, attackers planted 73 malicious extensions in the OpenVSX registry—an open-source alternative to the Visual Studio Code Marketplace. These extensions app

For Security EngineersRead

PyPI's elementary-data Breach: When CI/CD Becomes the Attack Surface

Incident

4 min read

PyPI's elementary-data Breach: When CI/CD Becomes the Attack Surface

What Happened The elementary-data package on PyPI, downloaded over 1.1 million times monthly, was compromised to distribute version 0.23.3 containing malware designed to steal sensitive data and crypt

For DevOps LeadersRead

Microsoft's Agent ID Administrator Flaw: A Privilege Escalation Teardown

Incident

5 min read

Microsoft's Agent ID Administrator Flaw: A Privilege Escalation Teardown

What Happened Microsoft s Entra ID (formerly Azure AD) had a role misconfiguration that allowed the Agent ID Administrator role to escalate privileges beyond its intended scope. Designed to manage aut

For Security EngineersRead

Checkmarx GitHub Repository Breach: What Happened and How to Prevent It

Incident

3 min read

Checkmarx GitHub Repository Breach: What Happened and How to Prevent It

On March 23, 2026, Checkmarx—a company specializing in application security testing tools—experienced a supply chain attack on their GitHub repository. Data from this repository later surfaced on the

For Security EngineersRead

Cryptominers Exploited Two Auth Bypass Flaws in Qinglong's Middleware

Incident

4 min read

Cryptominers Exploited Two Auth Bypass Flaws in Qinglong's Middleware

Incident Overview On February 27, 2026, researchers disclosed two authentication bypass vulnerabilities in Qinglong, an open-source task scheduler with over 19,000 GitHub stars. CVE-2026-3965 and CVE-

For Security EngineersRead

Showing 17-32 of 142 articles

PreviousPage 2 of 9Next