Expert perspectives on application security, compliance, and emerging threats
IncidentOn May 11, 2026, attackers published 84 malicious npm packages across 42 @tanstack repositories. Each package carried cryptographically valid SLSA Build Level 3 attestations. If your team relies on SL
IncidentWhat Happened Microsoft removed 73 GitHub repositories after malware compromised developer credentials and exposed a PyPI publishing token. The attack targeted the durabletask PyPI token, allowing an
IncidentA path traversal vulnerability in Langflow—an open-source AI development platform with more than 149,000 GitHub stars—is being actively exploited. CVE-2026-5027 allows attackers to write arbitrary fil
IncidentCyera s security researchers disclosed six vulnerabilities in protobuf.js that turned schema validation—a process most teams assume is safe—into a remote code execution (RCE) pathway. The vulnerabilit
Get weekly security insights and compliance updates delivered to your inbox.
IncidentWhat Happened An unauthenticated remote code execution vulnerability (CVE-2026-5027) in Langflow, an open-source platform for building AI applications, remains unpatched despite active exploitation. T
IncidentSummary of Events For over 15 years, npm allowed packages to execute arbitrary code during installation through preinstall, install, and postinstall scripts. These scripts ran automatically whenever a
IncidentOverview of the Vulnerability A critical remote code execution vulnerability in the Mirasvit Full Page Cache Warmer extension for Magento 2 and Adobe Commerce allowed attackers to execute arbitrary co
IncidentWhat Happened StepSecurity researchers uncovered a malware campaign targeting Python development environments and AI-powered security tools. The malware, named Hades, compromised the C++ library ensma
IncidentWhat Happened BerriAI s LiteLLM, a proxy layer for managing multiple LLM providers, contained a command injection vulnerability ( CVE-2026-42271 ) that allowed authenticated users to execute arbitrary
IncidentA command injection vulnerability in BerryAI s LiteLLM has been added to CISA s Known Exploited Vulnerabilities catalog and is under active exploitation. CVE-2026-42271 allows attackers to execute arb
IncidentWhat Happened On June 5, 2026, ServiceNow applied an emergency security update after discovering that attackers had exploited an unauthenticated REST endpoint to query customer instance data. The vuln
IncidentWhat Happened On April 27, 2026, security researcher 303f06e3 reported a type confusion vulnerability in Chrome s V8 JavaScript engine to Google. The company confirmed active exploitation and assigned
IncidentMicrosoft s January 2025 Patch Tuesday shipped 206 CVEs—a single-month record. Before you blame Microsoft s code quality, consider this: AI-driven vulnerability scanners are finding bugs faster than h
IncidentOn a Tuesday morning, a developer ran pip install on what appeared to be a legitimate Python package. Instantly, before any of their code executed, a credential harvester was active—extracting AWS key
IncidentRecently, Microsoft temporarily removed 73 of its open-source repositories from GitHub due to an information stealer injected through compromised CI/CD pipelines. Some repositories have been restored,
IncidentOn March 29, 2022, a tweet claiming a zero-day in the Spring Framework triggered a 72-hour scramble across engineering teams worldwide. This incident became a textbook case of how not to handle vulner
