Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams912 Security Engineers1021 Compliance Teams275 DevOps Leaders88 Developers33 CISOs21 IT Directors2

Topics:All912 Incident912 General270 Standards94 Research87 Guides53 Deadlines17 Vendor News5 Legal2

912 articles in Incident · Clear filtersSort byNewest·Trending

Incident

Latest

4 min read

AI Found an 18-Year-Old RCE in Nginx

Discovery of a Long-Standing Vulnerability In early 2025, DepthFirst AI discovered CVE-2026-42945, a heap buffer overflow vulnerability in Nginx s ngx_http_rewrite_module . This flaw had existed undet

For Security EngineersRead article

Credential Theft Through npm: The node-ipc Compromise

Incident

4 min read

Credential Theft Through npm: The node-ipc Compromise

What Happened On March 7, 2025, security researchers at Socket detected malicious code in three versions of node-ipc , an npm package with more than 690,000 weekly downloads. The compromised versions—

For Security EngineersRead

Incident

4 min read

AI Recommended Deleting Production Logs

Your SIEM flagged an anomaly in authentication patterns. You asked your AI security assistant to investigate. It analyzed the logs, identified what it called malicious bot traffic, and recommended imm

For Security EngineersRead

NGINX Flaw Hid for 18 Years: What Failed

Incident

5 min read

NGINX Flaw Hid for 18 Years: What Failed

What Happened In early 2025, security researchers at DepthFirst AI discovered CVE-2026-42945 , a vulnerability that had existed in NGINX for 18 years. The flaw affects NGINX versions 0.6.27 through 1.

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Scrapers in RubyGems Targeted UK Government Servers

Incident

4 min read

Scrapers in RubyGems Targeted UK Government Servers

What Happened Threat actors published malicious packages to RubyGems containing scrapers designed to target public-facing UK government servers. These packages appeared legitimate but included code th

For Security EngineersRead

3 Hours, 44 Minutes: PraisonAI Auth Bypass

Incident

4 min read

3 Hours, 44 Minutes: PraisonAI Auth Bypass

What Happened CVE-2026-44338 , an authentication bypass vulnerability in PraisonAI s legacy API server, was exploited three hours and 44 minutes after public disclosure. The vulnerability affects all

For Security EngineersRead

18-Year RCE Flaw Hid in NGINX's Rewrite Module

Incident

4 min read

18-Year RCE Flaw Hid in NGINX's Rewrite Module

Overview of the Vulnerability On April 21, 2026, security researchers at depthfirst disclosed CVE-2026-42945 , a critical vulnerability in NGINX s rewrite module that allows unauthenticated remote cod

For Security EngineersRead

Supply Chain Attack Hit OpenAI's Dependencies

Incident

5 min read

Supply Chain Attack Hit OpenAI's Dependencies

On January 12, 2025, OpenAI confirmed a security breach due to a supply chain attack on the TanStack ecosystem. The attack, named Mini Shai-Hulud by the extortion group TeamPCP, compromised numerous n

For Security EngineersRead

API Scanned in Under 4 Hours: PraisonAI Flaw

Incident

3 min read

API Scanned in Under 4 Hours: PraisonAI Flaw

Rapid Vulnerability Exploitation Security researchers disclosed an authentication bypass vulnerability in PraisonAI, and automated scanners probed vulnerable instances within three hours and 44 minute

For Security EngineersRead

84 Malicious Packages With Valid Provenance

Incident

4 min read

84 Malicious Packages With Valid Provenance

On May 11, 2026, 84 malicious npm package artifacts appeared in the @tanstack namespace, each with valid SLSA provenance signatures. These packages were released through TanStack s own pipeline. For s

For Security EngineersRead

Incident

4 min read

300,000 Ollama Servers Leaking Memory

Three API calls. No authentication required. Full process memory exposed — including API keys, conversation history, and model weights. CVE-2026-7482, now known as Bleeding Llama, turned approximately

For Security EngineersRead

Checkmarx Jenkins Plugin Hacked Twice in Three Weeks

Incident

4 min read

Checkmarx Jenkins Plugin Hacked Twice in Three Weeks

What Happened TeamPCP compromised the Checkmarx Jenkins AST plugin in a second supply chain attack, using credentials obtained from an earlier breach. The attackers gained write access to the plugin s

For Compliance TeamsRead

Jenkins Plugin Hijack Exposes CI/CD Credential Chain

Incident

5 min read

Jenkins Plugin Hijack Exposes CI/CD Credential Chain

What Happened On May 9, 2026, TeamPCP published a compromised version of the Checkmarx Jenkins AST plugin to the official Jenkins Marketplace. This malicious plugin contained info-stealing malware, ex

For Security EngineersRead

Two Critical SAP Flaws Expose Authentication and Input Validation Gaps

Incident

5 min read

Two Critical SAP Flaws Expose Authentication and Input Validation Gaps

What Happened SAP s May 2026 security updates addressed 15 vulnerabilities across its enterprise software portfolio. Two critical flaws stand out for their exploitability and potential impact: CVE-202

For Compliance TeamsRead

RubyGems Used to Exfiltrate U.K. Government Data

Incident

4 min read

RubyGems Used to Exfiltrate U.K. Government Data

Incident Overview Between late 2024 and early 2025, attackers published over 150 malicious gems to the RubyGems repository. These gems were not meant to compromise developers who downloaded them. Inst

For Security EngineersRead

cPanel Backdoors Hit 40,000 Servers: Supply-Chain Blind Spot

Incident

5 min read

cPanel Backdoors Hit 40,000 Servers: Supply-Chain Blind Spot

What Happened Between late 2024 and early 2025, attackers exploited CVE-2026-41940 , a vulnerability in cPanel s web hosting management interface, compromising hosting infrastructure on a large scale.

For Security EngineersRead

Showing 689-704 of 912 articles

PreviousPage 44 of 57Next