Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams707 Security Engineers759 Compliance Teams223 DevOps Leaders63 Developers31 CISOs17 IT Directors2

Topics:All707 Incident707 General188 Standards88 Research61 Guides34 Deadlines11 Vendor News4 Legal2

707 articles in Incident · Clear filtersSort byNewest·Trending

Glassworm Botnet: When C2 Infrastructure Lives on the Blockchain

Incident

Latest

4 min read

Glassworm Botnet: When C2 Infrastructure Lives on the Blockchain

What Happened Since October 2025, the Glassworm botnet has been targeting developers through software supply-chain attacks. Unlike traditional botnets that rely on centralized command-and-control (C2)

For Security EngineersRead article

Claude's Security Plugin Catches What Your PR Reviews Miss

Incident

3 min read

Claude's Security Plugin Catches What Your PR Reviews Miss

Introduction Anthropic has released a security-guidance plugin for Claude Code that runs vulnerability checks during active development. This tool is transforming how teams manage vulnerabilities by i

For Security EngineersRead

300 Repositories Poisoned: The GlassWorm Takedown

Incident

5 min read

300 Repositories Poisoned: The GlassWorm Takedown

What Happened GlassWorm infected developer workstations through malicious packages and browser extensions, using stolen credentials to poison over 300 GitHub repositories. The malware compromised deve

For Security EngineersRead

Incident

4 min read

$500k Lost to a Malicious IDE Extension

A developer installed what seemed to be a legitimate Solidity language extension for Cursor IDE. Within hours, their cryptocurrency wallet was drained of $500,000. The malware spread through the Open

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Incident

4 min read

NGINX Rift and nginx-poolslip: Teardown

What Happened In early 2025, two critical vulnerabilities in NGINX emerged within weeks of each other, both with CVSS v3x scores of 8.1. CVE-2026-42945, known as NGINX Rift, allows remote code executi

For Security EngineersRead

Gitea CVE-2026-27771: 30,000 Deployments Left Private Containers Exposed

Incident

3 min read

Gitea CVE-2026-27771: 30,000 Deployments Left Private Containers Exposed

A critical authentication bypass in Gitea s container registry exposed private images to unauthorized users across more than 30,000 deployments worldwide. No credentials were needed, leaving what team

For Security EngineersRead

Drupal PostgreSQL Sites Under Active Attack

Incident

4 min read

Drupal PostgreSQL Sites Under Active Attack

On May 20, 2026, Drupal disclosed CVE-2026-9082 , a critical SQL injection vulnerability with a CVSS score of 9.8. Two days later, CISA added it to the Known Exploited Vulnerabilities catalog. This vu

For Security EngineersRead

Nx Package Compromise: AI Agents as Exfiltration Tools

Incident

3 min read

Nx Package Compromise: AI Agents as Exfiltration Tools

What Happened On August 21, 2024, an attacker merged a pull request that altered the GitHub Actions workflow for the Nx monorepo toolchain, compromising the CI/CD pipeline. This led to the publication

For Security EngineersRead

ESLint Prettier Maintainer Phishing: What Failed

Incident

4 min read

ESLint Prettier Maintainer Phishing: What Failed

On July 19th, 2024, maintainers of eslint-config-prettier discovered their package had been compromised. Attackers published malicious versions containing credential-stealing malware. With 30,000,000

For Security EngineersRead

npm Maintainer Breach: Phishing to Package Poisoning

Incident

4 min read

npm Maintainer Breach: Phishing to Package Poisoning

On September 8th, an attacker compromised the npm account of ~qix, a prolific open source maintainer, through a phishing attack. The attacker injected malicious code into widely-used npm packages, red

For Security EngineersRead

18,000 NPM Packages Published in 48 Hours

Incident

4 min read

18,000 NPM Packages Published in 48 Hours

What Happened In November 2025, researchers detected a surge in NPM package publications. Thousands of packages appeared within a 48-hour period, all following similar naming patterns and structural t

For Security EngineersRead

Incident

5 min read

3,000 npm Packages Poisoned in 48 Hours

What Happened On September 15, 2025, attackers published malicious versions of ngx-bootstrap and ng2-file-upload to the npm registry. These compromised packages were designed to exfiltrate cloud crede

For Security EngineersRead

Federal Agencies Scramble to Patch Drupal Flaw

Incident

4 min read

Federal Agencies Scramble to Patch Drupal Flaw

What Happened The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-9082, a critical SQL injection vulnerability in Drupal, to its Known Exploited Vulnerabilities (KEV) catalo

For Compliance TeamsRead

Worm Turns CI Pipelines Into Attack Infrastructure

Incident

4 min read

Worm Turns CI Pipelines Into Attack Infrastructure

What Happened Between late 2024 and early 2025, a worm named SHA1-Hulud infiltrated the npm ecosystem through trojanized packages with hidden preinstall scripts. Snyk identified over 600 compromised n

For Security EngineersRead

34 Malicious Packages, 384 Versions: TrapDoor Teardown

Incident

4 min read

34 Malicious Packages, 384 Versions: TrapDoor Teardown

What Happened On May 22, 2026, at 8:20 p.m. UTC, attackers launched a coordinated supply chain attack across three major package registries. The TrapDoor operation deployed 34 malicious packages spann

For Security EngineersRead

Incident

5 min read

When Agent Sprawl Takes Down Production

Your fraud detection system just made 847 LLM calls to process a single transaction. The request timed out. Your observability dashboard shows nothing unusual. Welcome to multi-agent system failure in

For Security EngineersRead

Showing 401-416 of 707 articles

PreviousPage 26 of 45Next