Expert perspectives on application security, compliance, and emerging threats
IncidentOn May 5, 2025, Disc Soft Limited confirmed that their DAEMON Tools Lite software had been compromised at the source. Security researchers at Kaspersky had already detected this breach. Version 12.5.1
IncidentWhat Happened The vm2 library, a widely-used Node.js sandbox for executing untrusted JavaScript code, suffered multiple critical vulnerabilities that allowed attackers to break out of the sandbox and
IncidentWhat Happened Security researchers have disclosed CVE-2026-26956, a critical vulnerability in vm2 , a Node.js library used to execute untrusted JavaScript code in isolated environments. This flaw allo
IncidentWhat Happened An SQL injection vulnerability (CVE-2026-2413) in the Elementor Ally WordPress plugin exposed over 250,000 sites to unauthorized database access. The flaw stemmed from improper handling
Get weekly security insights and compliance updates delivered to your inbox.
IncidentOn April 30, a malicious version of PyTorch Lightning appeared on the Python Package Index (PyPI). This compromised package included a credential-stealing payload targeting .env files, API keys, secre
IncidentBetween January 31 and March 9, 2026, attackers deployed 72 malicious extensions on the Open VSX marketplace, affecting 151 GitHub repositories. The campaign, known as GlassWorm, used a two-stage atta
IncidentWhat Happened In early 2025, CISA and four international cybersecurity agencies issued a joint advisory warning about a specific failure mode: agentic AI systems operating with excessive permissions a
IncidentIncident Overview On March 8, 2026, attackers exploited stolen GitHub personal access tokens to force-push malicious code into legitimate Python repositories. This campaign, known as GlassWorm/ForceMe
IncidentBetween August 2025 and now, PhantomRaven published 126 malicious packages to the npm registry. These packages used slopsquatting—intentional misspellings of popular libraries—to trick JavaScript deve
IncidentWhat Happened On March 5, 2025, CISA added CVE-2025-68613 to its Known Exploited Vulnerabilities catalog. This vulnerability affects n8n, a workflow automation platform used to connect APIs and automa
IncidentYour AI infrastructure just became an exfiltration pipeline. Recent disclosures reveal how Amazon Bedrock, LangSmith, and SGLang each failed fundamental security controls—and how those failures map di
IncidentWhat Happened Between late 2024 and early 2025, attackers compromised 433 code repositories and packages across GitHub, npm, and OpenVSX marketplaces. The malware, known as GlassWorm, infiltrated thes
IncidentWhat Happened On April 29, TeamPCP executed a supply chain attack that compromised over 1,800 developer repositories across PyPI, NPM, and PHP ecosystems. The attackers published malicious versions of
IncidentOn a recent weekend, attackers rewrote nearly every version tag in the aquasecurity/trivy-action repository. Within hours, CI/CD pipelines across hundreds of organizations were executing malicious cod
IncidentWhat Happened On January 8, 2025, researchers disclosed CVE-2026-33017 , a critical unauthenticated remote code execution vulnerability in Langflow, an open-source platform for building AI application
IncidentWhat Happened On January 17, 2025, attackers compromised Aqua Security s Trivy vulnerability scanner through its GitHub Actions repository. The breach affected trivy-action, a GitHub Action wrapper us
