Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams711 Security Engineers765 Compliance Teams225 DevOps Leaders64 Developers31 CISOs17 IT Directors2

Topics:All711 Incident711 General190 Standards88 Research61 Guides36 Deadlines12 Vendor News4 Legal2

711 articles in Incident · Clear filtersSort byNewest·Trending

24,700 Unpatched n8n Instances: When Patch Management Fails at Scale

Incident

Latest

4 min read

24,700 Unpatched n8n Instances: When Patch Management Fails at Scale

What Happened On March 5, 2025, CISA added CVE-2025-68613 to its Known Exploited Vulnerabilities catalog. This vulnerability affects n8n, a workflow automation platform used to connect APIs and automa

For Security EngineersRead article

Three AI Platforms, Three Critical Flaws

Incident

5 min read

Three AI Platforms, Three Critical Flaws

Your AI infrastructure just became an exfiltration pipeline. Recent disclosures reveal how Amazon Bedrock, LangSmith, and SGLang each failed fundamental security controls—and how those failures map di

For Security EngineersRead

433 Compromised Packages: What the GlassWorm Supply-Chain Attack Reveals About Your Dependencies

Incident

3 min read

433 Compromised Packages: What the GlassWorm Supply-Chain Attack Reveals About Your Dependencies

What Happened Between late 2024 and early 2025, attackers compromised 433 code repositories and packages across GitHub, npm, and OpenVSX marketplaces. The malware, known as GlassWorm, infiltrated thes

For Security EngineersRead

1,800 Repositories Compromised: The Mini Shai-Hulud Supply Chain Breach

Incident

4 min read

1,800 Repositories Compromised: The Mini Shai-Hulud Supply Chain Breach

What Happened On April 29, TeamPCP executed a supply chain attack that compromised over 1,800 developer repositories across PyPI, NPM, and PHP ecosystems. The attackers published malicious versions of

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

75 GitHub Action Tags Hijacked in Trivy Supply Chain Attack

Incident

5 min read

75 GitHub Action Tags Hijacked in Trivy Supply Chain Attack

On a recent weekend, attackers rewrote nearly every version tag in the aquasecurity/trivy-action repository. Within hours, CI/CD pipelines across hundreds of organizations were executing malicious cod

For Security EngineersRead

CVE-2026-33017: When 20 Hours Is All Attackers Need

Incident

4 min read

CVE-2026-33017: When 20 Hours Is All Attackers Need

What Happened On January 8, 2025, researchers disclosed CVE-2026-33017 , a critical unauthenticated remote code execution vulnerability in Langflow, an open-source platform for building AI application

For Compliance TeamsRead

75 of 76 Version Tags Overwritten: The Trivy Supply Chain Attack

Incident

4 min read

75 of 76 Version Tags Overwritten: The Trivy Supply Chain Attack

What Happened On January 17, 2025, attackers compromised Aqua Security s Trivy vulnerability scanner through its GitHub Actions repository. The breach affected trivy-action, a GitHub Action wrapper us

For Security EngineersRead

Two npm Packages Turned Data Thieves Through Compromised Maintainer Credentials

Incident

4 min read

Two npm Packages Turned Data Thieves Through Compromised Maintainer Credentials

What Happened On March 19, 2026, Sonatype Security Research reported two malicious npm packages—sbx-mask and touch-adv—to npm s maintainers. These packages were published through a compromised trusted

For Security EngineersRead

Trivy Breach: When Your Vulnerability Scanner Ships Malware

Incident

4 min read

Trivy Breach: When Your Vulnerability Scanner Ships Malware

What Happened In 2024, TeamPCP compromised the Trivy vulnerability scanner, an open-source tool used by many organizations to detect security issues in containers and dependencies. The attackers publi

For DevOps LeadersRead

Checkmarx GitHub Actions Breach: A CI/CD Credential Theft Teardown

Incident

4 min read

Checkmarx GitHub Actions Breach: A CI/CD Credential Theft Teardown

On January 14, 2025, Checkmarx disclosed that threat actor TeamPCP compromised their GitHub Actions workflows by stealing CI credentials. This incident, similar to a previous attack on Aqua Security s

For Security EngineersRead

A Poisoned Security Scanner Backdoored a Python Package in Three Hours

Incident

4 min read

A Poisoned Security Scanner Backdoored a Python Package in Three Hours

On PyPI, malicious versions of LiteLLM were available for download for about three hours. The attack vector? A compromised Trivy GitHub Action that stole the maintainer s PyPI publishing credentials.

For Security EngineersRead

Credential Harvester Hiding in Your Security Scanner: The LiteLLM Backdoor

Incident

4 min read

Credential Harvester Hiding in Your Security Scanner: The LiteLLM Backdoor

What Happened On March 24, 2026, threat actor TeamPCP released two compromised versions of the Python package litellm—versions 1.82.7 and 1.82.8. These contained a multi-stage attack toolkit, includin

For Security EngineersRead

Trivy Infostealer: How a Security Scanner Became an Exfiltration Tool

Incident

4 min read

Trivy Infostealer: How a Security Scanner Became an Exfiltration Tool

Incident Overview A threat actor compromised CI/CD pipelines by deploying malicious code through an open source security tool. This attack used an infostealer to exfiltrate cloud credentials, SSH keys

For Security EngineersRead

3,000 Repositories Poisoned in Two Minutes: The Trivy Supply Chain Attack

Incident

5 min read

3,000 Repositories Poisoned in Two Minutes: The Trivy Supply Chain Attack

What Happened On March 22, 2026, threat actor TeamPCP compromised the Trivy vulnerability scanner s Docker Hub distribution channel and attacked Aqua Security s GitHub infrastructure. Malicious versio

For Security EngineersRead

Checkmarx Supply Chain Compromise: Four Hours That Exposed CI/CD Pipeline Risks

Incident

4 min read

Checkmarx Supply Chain Compromise: Four Hours That Exposed CI/CD Pipeline Risks

Incident Overview On March 23, 2026, an attacker published malicious versions of two Checkmarx plugins to the OpenVSX registry: ast-results-2.53.0.vsix and cx-dev-assist-1.7.0.vsix. Between 12:58 and

For DevOps LeadersRead

Microsoft Logs the First Major AI Prompt Abuse Campaign

Incident

4 min read

Microsoft Logs the First Major AI Prompt Abuse Campaign

In late 2024, Microsoft s Security Response Center documented a coordinated attempt to manipulate enterprise AI assistants through carefully crafted prompts. Attackers used role-playing scenarios and

For Security EngineersRead

Showing 545-560 of 711 articles

PreviousPage 35 of 45Next