Expert perspectives on application security, compliance, and emerging threats
IncidentBetween April 8 and May 5, 2026, Windows users who downloaded DAEMON Tools from its official website unknowingly installed malware. AVB Disc Soft s legitimate installers were compromised to deliver QU
IncidentWhat Happened A double-free vulnerability in Apache HTTP Server 2.4.66 (CVE-2026-23918, CVSS 8.8) allowed remote attackers to crash servers and potentially execute arbitrary code. The flaw existed in
IncidentThe Overlooked Vulnerability Threat Your Software Composition Analysis (SCA) tool flags 47 vulnerabilities in your production dependencies. You patch them, and your dashboard shows green. But here s t
IncidentWhat Happened Between late 2022 and early 2023, security researchers identified thirteen critical vulnerabilities in vm2 , a widely-used JavaScript sandbox package for Node.js. The most severe, CVE-20
Get weekly security insights and compliance updates delivered to your inbox.
IncidentWhat Happened Trend Micro researchers identified Quasar Linux RAT (QLNX), a remote access trojan targeting developer workstations. The malware seeks out credential files like .npmrc , .pypirc , .git-c
IncidentWhat Happened In September 2024, North Korea s Chollima APT group launched PromptMink, a supply-chain attack targeting AI coding agents. The attackers published two malicious npm packages — @hash-vali
IncidentIn early 2024, Google acknowledged a significant security gap: there was no reliable way to verify that the Google apps on your Android device were the exact ones Google intended to release. Digital s
IncidentOn May 5, 2025, Disc Soft Limited confirmed that their DAEMON Tools Lite software had been compromised at the source. Security researchers at Kaspersky had already detected this breach. Version 12.5.1
IncidentWhat Happened The vm2 library, a widely-used Node.js sandbox for executing untrusted JavaScript code, suffered multiple critical vulnerabilities that allowed attackers to break out of the sandbox and
IncidentWhat Happened Security researchers have disclosed CVE-2026-26956, a critical vulnerability in vm2 , a Node.js library used to execute untrusted JavaScript code in isolated environments. This flaw allo
IncidentWhat Happened An SQL injection vulnerability (CVE-2026-2413) in the Elementor Ally WordPress plugin exposed over 250,000 sites to unauthorized database access. The flaw stemmed from improper handling
IncidentOn April 30, a malicious version of PyTorch Lightning appeared on the Python Package Index (PyPI). This compromised package included a credential-stealing payload targeting .env files, API keys, secre
IncidentBetween January 31 and March 9, 2026, attackers deployed 72 malicious extensions on the Open VSX marketplace, affecting 151 GitHub repositories. The campaign, known as GlassWorm, used a two-stage atta
IncidentWhat Happened In early 2025, CISA and four international cybersecurity agencies issued a joint advisory warning about a specific failure mode: agentic AI systems operating with excessive permissions a
IncidentIncident Overview On March 8, 2026, attackers exploited stolen GitHub personal access tokens to force-push malicious code into legitimate Python repositories. This campaign, known as GlassWorm/ForceMe
IncidentBetween August 2025 and now, PhantomRaven published 126 malicious packages to the npm registry. These packages used slopsquatting—intentional misspellings of popular libraries—to trick JavaScript deve
