Expert perspectives on application security, compliance, and emerging threats
IncidentWhat Happened GlassWorm infected developer workstations through malicious packages and browser extensions, using stolen credentials to poison over 300 GitHub repositories. The malware compromised deve
GeneralScope This guide outlines immediate measures to secure GitHub repositories following the Megalodon campaign, which compromised over 5,500 repositories in six hours. You ll find detection workflows, cr
IncidentA developer installed what seemed to be a legitimate Solidity language extension for Cursor IDE. Within hours, their cryptocurrency wallet was drained of $500,000. The malware spread through the Open
IncidentWhat Happened In early 2025, two critical vulnerabilities in NGINX emerged within weeks of each other, both with CVSS v3x scores of 8.1. CVE-2026-42945, known as NGINX Rift, allows remote code executi
Get weekly security insights and compliance updates delivered to your inbox.
IncidentA critical authentication bypass in Gitea s container registry exposed private images to unauthorized users across more than 30,000 deployments worldwide. No credentials were needed, leaving what team
IncidentOn May 20, 2026, Drupal disclosed CVE-2026-9082 , a critical SQL injection vulnerability with a CVSS score of 9.8. Two days later, CISA added it to the Known Exploited Vulnerabilities catalog. This vu
IncidentWhat Happened On August 21, 2024, an attacker merged a pull request that altered the GitHub Actions workflow for the Nx monorepo toolchain, compromising the CI/CD pipeline. This led to the publication
ResearchSocket s research into the TrapDoor campaign reveals a critical issue your security team may have overlooked: developer workstations are now high-value targets. These workstations often run unmonitore
IncidentOn July 19th, 2024, maintainers of eslint-config-prettier discovered their package had been compromised. Attackers published malicious versions containing credential-stealing malware. With 30,000,000
IncidentOn September 8th, an attacker compromised the npm account of ~qix, a prolific open source maintainer, through a phishing attack. The attacker injected malicious code into widely-used npm packages, red
IncidentWhat Happened In November 2025, researchers detected a surge in NPM package publications. Thousands of packages appeared within a 48-hour period, all following similar naming patterns and structural t
IncidentWhat Happened On September 15, 2025, attackers published malicious versions of ngx-bootstrap and ng2-file-upload to the npm registry. These compromised packages were designed to exfiltrate cloud crede
GeneralScope This guide focuses on detecting and responding to supply chain attacks targeting email transmission libraries. You ll learn to identify BCC-based exfiltration backdoors in npm packages, implemen
IncidentWhat Happened The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-9082, a critical SQL injection vulnerability in Drupal, to its Known Exploited Vulnerabilities (KEV) catalo
GeneralYour team just adopted an AI coding assistant. Within days, pull requests are flooding in. Developers report 30% faster feature delivery. Management is thrilled. Then your security team starts reviewi
IncidentWhat Happened Between late 2024 and early 2025, a worm named SHA1-Hulud infiltrated the npm ecosystem through trojanized packages with hidden preinstall scripts. Snyk identified over 600 compromised n
