Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams142 Security Engineers142 Compliance Teams99 Developers27 DevOps Leaders15 CISOs6 IT Directors2

Topics:All142 Incident142 Standards81 General33 Guides15 Research12 Vendor News4 Deadlines2 Legal2

142 articles in Incident · Clear filtersSort byNewest·Trending

A Critical RMM Flaw Exposes the Hidden Attack Surface in Your Supply Chain

Incident

Latest

4 min read

A Critical RMM Flaw Exposes the Hidden Attack Surface in Your Supply Chain

What Happened A critical remote code execution vulnerability (CVE-2026-1731) in Bomgar s remote monitoring and management (RMM) platform has exposed organizations to significant risk. This flaw allowe

For Compliance TeamsRead article

Self-Propagating npm Malware Steals Credentials, Publishes More Malware

Incident

4 min read

Self-Propagating npm Malware Steals Credentials, Publishes More Malware

What Happened The CanisterSprawl malware campaign compromised npm packages to steal sensitive data from developer machines, such as tokens and API keys. It then used these credentials to publish more

For DevelopersRead

Incident

Stolen Publishing Tokens: How CanisterSprawl Turned npm Maintainers Into Attack Vectors

What Happened In late 2024, security researchers at StepSecurity and Socket disclosed CanisterSprawl, an npm malware campaign that exploits developer environments to steal credentials and publish mali

For Security EngineersRead

Incident

340 GB Stolen Through a Compromised Security Scanner

What Happened On March 24, the European Commission s Security Operations Center detected unauthorized access to their AWS cloud infrastructure. The attacker, ShinyHunters, had compromised a version of

For Compliance TeamsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Incident

766 Next.js Hosts Compromised Through CVE-2025-55182

What Happened Threat cluster UAT-10608 exploited CVE-2025-55182 , a critical vulnerability in Next.js applications, compromising at least 766 hosts. The attackers used an automated credential harvesti

For Compliance TeamsRead

Incident

Axios npm Breach: 100 Million Weekly Downloads Compromised in Three Hours

What Happened Between November 2024 and early 2025, threat actors linked to North Korean operations (tracked as UNC1069 and TeamPCP) compromised the Axios npm package —a JavaScript HTTP client library

For Compliance TeamsRead

Incident

Claude Found RCE Bugs in Vim and Emacs That Fire When You Open a File

What Happened An AI assistant discovered remote code execution (RCE) vulnerabilities in two widely-used text editors: Vim and GNU Emacs. These vulnerabilities do not require complex exploits or user i

For Security EngineersRead

Incident

350 GB Stolen Through a Vulnerability Scanner: The Europa.eu Supply Chain Breach

What Happened CERT-EU confirmed that 350 GB of data was stolen from Europa.eu, the European Commission s web platform. The stolen data included personal names, email addresses, and internal messages f

For Compliance TeamsRead

Incident

North Korean Hackers Compromised Axios npm Packages for Under Three Hours

What Happened For a brief period, attackers published backdoored versions of Axios to npm . Axios is an HTTP client library downloaded millions of times weekly. The malicious packages contained code t

For Compliance TeamsRead

Incident

Axios NPM Package Breach: When 9 Million Weekly Downloads Meet a Sophisticated Compromise

What Happened The NPM package for Axios was briefly compromised this week. Axios is a JavaScript HTTP client library with approximately 9 million weekly downloads, making it one of the most widely use

For DevelopersRead

Incident

Axios Attack: 300 Million Weekly Downloads, Minutes to Detect

On March 31, 2026, attackers published malicious versions of axios—one of the most widely used HTTP client libraries in the JavaScript ecosystem. The compromised packages contained hidden dependencies

For Compliance TeamsRead

Incident

Axios Supply Chain Attack: When Account Compromise Hits 100 Million Weekly Downloads

What Happened Attackers compromised the npm account of Axios lead maintainer and published malicious versions of the library containing a remote access trojan. Axios, a widely-used HTTP client library

For Compliance TeamsRead

Incident

Axios Supply Chain Attack: How 300 Million Weekly Downloads Nearly Became a Backdoor

What Happened On March 31, 2026, attackers published malicious versions of axios —a JavaScript HTTP client library with over 300 million weekly downloads—to the npm registry. The compromised packages

For Compliance TeamsRead

Google's Antigravity Tool: When Prompt Injection Becomes Remote Code Execution

Incident

4 min read

Google's Antigravity Tool: When Prompt Injection Becomes Remote Code Execution

What Happened Google patched a critical remote code execution vulnerability in Antigravity, an internal AI-based tool. The flaw arose from a prompt-injection vulnerability that allowed attackers to es

For Security EngineersRead

6,500 Unpatched ActiveMQ Instances: When AI Finds Flaws Faster Than You Can Fix Them

Incident

3 min read

6,500 Unpatched ActiveMQ Instances: When AI Finds Flaws Faster Than You Can Fix Them

Summary of the Incident A critical remote code execution vulnerability in Apache ActiveMQ was discovered using AI-assisted analysis in about 10 minutes. This vulnerability affects versions before 5.19

For Compliance TeamsRead

13 Hours: An SSRF Vulnerability Goes from Disclosure to Active Exploitation

Incident

4 min read

13 Hours: An SSRF Vulnerability Goes from Disclosure to Active Exploitation

What Happened When CVE-2026-33626 was disclosed, attackers quickly began exploiting a server-side request forgery (SSRF) vulnerability in LMDeploy, an open-source toolkit for deploying large language

For Security EngineersRead

Showing 49-64 of 142 articles

PreviousPage 4 of 9Next