Expert perspectives on application security, compliance, and emerging threats
IncidentWhat Happened On September 4, attackers began exploiting CVE-2026-75650 , a CVSS 10.0 vulnerability in Adobe Commerce and Magento Open Source. The flaw, dubbed StyleSmuggler by Sansec, allows unauthen
IncidentA critical vulnerability in Adobe Commerce and Magento Open Source reached a perfect CVSS score of 10.0 before most teams even knew they were exposed. CVE-2026-75650, dubbed StyleSmuggler, was exploit
IncidentOn September 4, attackers exploited a zero-day vulnerability in Magento and Adobe Commerce, deploying a Linux backdoor on a system running the latest security updates. The exploit, named StyleSmuggler
IncidentThe Problem with AI-Driven Vulnerability Detection Anthropic s Claude Mythos Preview scanned 281 open-source projects and identified 23,019 potential vulnerabilities. External security firms reviewed
Get weekly security insights and compliance updates delivered to your inbox.
IncidentOn January 15, 2026, researchers disclosed CVE-2026-0768 , a critical remote code execution vulnerability in Langflow s component editor. By late August, exploitation attempts had spiked sharply. Atta
IncidentBetween July 14 and August 18, 2026, Wordfence blocked over 440,000 attempts to exploit two critical WordPress plugin vulnerabilities. More than 250,000 targeted CVE-2026-14894 in Super Forms, while a
ResearchYour development team adopted AI coding assistants six months ago. Velocity increased, developers are happy, and you ve seen no obvious security incidents. But here s what you probably don t know: tho
IncidentWhat Happened Security researchers at SpecterOps have identified 39 methods attackers use to compromise passkey authentication systems. These methods don t break FIDO2 cryptographic protocols. Instead
DeadlinesThe EU Cyber Resilience Act came into force in December 2024. By September 11, 2026, your team must report actively exploited vulnerabilities within 24 hours of awareness. That s right, just 24 hours.
IncidentWhat Happened On August 19, attackers began exploiting CVE-2026-32475 , a file upload validation vulnerability in Elementor Pro, a popular WordPress page builder plugin. This flaw allows remote code e
IncidentWhat Happened The Shai-Hulud infostealer worm has expanded its credential harvesting from 189 to 469 locations in developer environments, as reported by GitGuardian. This isn t a new threat actor or t
IncidentAI Uncovers Hidden Vulnerabilities OpenAI s Codex Security, an AI-powered code scanning tool, recently scanned over 1.2 million commits and identified 792 critical vulnerabilities, along with 10,561 h
GeneralYou ve probably heard the warnings about AI assistants. They re going to expose your secrets, they re basically malware, and they need enterprise-grade isolation from day one. Some of these concerns h
GeneralThe Shift to Production-Ready AI Agentic AI systems are transitioning from proof-of-concept to production, yet many organizations lack the infrastructure to test these systems before they impact real
GeneralScope This guide addresses the workflow friction between automated Dynamic Application Security Testing (DAST) tools and manual penetration testing. If you re running DAST scans but your pentesters st
GuidesAI is already writing code in your environment. The real question is: who verifies it when your junior developer uses Copilot, your contractor deploys Claude-generated infrastructure scripts, or your
