Expert perspectives on application security, compliance, and emerging threats
IncidentOn March 22, 2025, Aqua Security detected unauthorized Docker image tags for Trivy—their widely-used container vulnerability scanner—appearing without corresponding GitHub releases. The investigation
IncidentWhat Happened Security researcher Mihalis Haatainen discovered a critical vulnerability in Azure API Management Developer Portals: disabling self-signup in the administrative interface doesn t actuall
IncidentWhat Happened GitGuardian s State of Secrets Sprawl 2026 reported 28.65 million new hardcoded secrets committed to public GitHub repositories during 2025. These included not only API keys from legacy
IncidentWhat Happened The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-33017 to its Known Exploited Vulnerabilities catalog after confirming active exploitation of a remote code exec
Get weekly security insights and compliance updates delivered to your inbox.
IncidentWhat Happened Malicious versions of LiteLLM, a Python middleware for LLM API calls, were available on PyPI for about two hours. These versions contained malware designed to steal cloud provider keys a
IncidentImmediate Threat Overview On January 16, 2025, researchers disclosed CVE-2026-33017 , a critical vulnerability in Langflow versions 1.8.2 and earlier, allowing unauthenticated remote code execution. W
IncidentWhat Happened Threat actors exploited a code injection vulnerability in Langflow, an AI platform for building LLM-powered applications, within hours of its public disclosure. This vulnerability allowe
IncidentOn March 24, the cybercriminal group TeamPCP uploaded malicious versions 1.82.7 and 1.82.8 of LiteLLM—a popular Python library for AI application development—to the Python Package Index (PyPI). These
IncidentWhat happened TeamPCP, a threat actor group, published two malicious versions of the legitimate Telnyx package on the Python Package Index (PyPI) . Versions 4.87.1 and 4.87.2 contained malware hidden
IncidentWhat Happened In the past 18 months, organizations using AI systems have faced security failures that traditional identity-based controls couldn t stop. While no single breach stands out, the overall
IncidentA coordinated supply chain attack using poisoned Ruby gems and Go modules has exposed how attackers now target the seams between your package managers and CI/CD pipelines. The campaign, attributed to
IncidentWhat Happened In early 2026, security researchers disclosed CVE-2026-42208 , a critical SQL injection vulnerability in LiteLLM, a widely-used open-source AI Gateway. This flaw has a CVSS score of 9.3,
IncidentWhat Happened LiteLLM, an API gateway for accessing multiple AI model providers, had a critical SQL injection vulnerability (CVE-2026-42208) in its API key validation logic. This flaw allowed attacker
IncidentThe Shift in Vulnerability Discovery Mythos marks a pivotal change: AI-driven vulnerability discovery now outpaces human-led security responses. This advancement means vulnerabilities, which once took
IncidentWhat Happened On April 29, 2026, attackers published malicious versions of four npm packages in the SAP development ecosystem. They exploited a CI pipeline vulnerability that allowed unauthorized npm
IncidentAn AI agent captured sensitive credentials and leaked them through an external messaging service. This incident occurred during research by Okta Threat Intelligence using OpenClaw, an AI agent framewo
