Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams142 Security Engineers142 Compliance Teams99 Developers27 DevOps Leaders15 CISOs6 IT Directors2

Topics:All142 Incident142 Standards81 General33 Guides15 Research12 Vendor News4 Deadlines2 Legal2

142 articles in Incident · Clear filtersSort byNewest·Trending

Bitwarden CLI Supply Chain Attack: A 95-Minute Window That Exposed Thousands of Secrets

Incident

Latest

5 min read

Bitwarden CLI Supply Chain Attack: A 95-Minute Window That Exposed Thousands of Secrets

What Happened On April 22, 2026, attackers published a compromised version of the Bitwarden command-line interface (version @bitwarden/ [email protected] ) to npm. The malicious code, embedded in a file na

For Compliance TeamsRead article

Bitwarden CLI Hijacked for 90 Minutes: A CI/CD Pipeline Breach Teardown

Incident

4 min read

Bitwarden CLI Hijacked for 90 Minutes: A CI/CD Pipeline Breach Teardown

On April 22, 2025, developers who updated the Bitwarden CLI to version 2026.4.0 installed malware designed to exfiltrate their most sensitive credentials. The window was narrow—just over 90 minutes—bu

For Compliance TeamsRead

Bitwarden CLI Package Breach: How a Compromised GitHub Action Stole Developer Credentials

Incident

4 min read

Bitwarden CLI Package Breach: How a Compromised GitHub Action Stole Developer Credentials

What Happened On April 22, 2026, the @bitwarden/cli npm package was compromised with malicious code aiming to steal developer credentials. This package was available from 5:57 PM to 7:30 PM ET. During

For Security EngineersRead

Hackers Compromised a Security Tool to Steal the Secrets It Was Scanning

Incident

5 min read

Hackers Compromised a Security Tool to Steal the Secrets It Was Scanning

What Happened On April 22, 2026, attackers replaced legitimate Docker images of Checkmarx s KICS (Keeping Infrastructure as Code Secure) tool with malicious versions. KICS is an open-source scanner th

For Compliance TeamsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

A 9.3 CVSS Vulnerability That Will Never Be Patched

Incident

5 min read

A 9.3 CVSS Vulnerability That Will Never Be Patched

What Happened CVE-2026-5752, a critical vulnerability in Cohere AI s Terrarium sandbox, allows attackers to execute arbitrary code with root privileges and escape container isolation. This flaw exploi

For Security EngineersRead

16 npm Packages Compromised in Self-Propagating Supply Chain Attack

Incident

4 min read

16 npm Packages Compromised in Self-Propagating Supply Chain Attack

What Happened On April 21, 2025, attackers published a malicious version of the pgserve package from Namastex Labs. Within days, 16 packages from the same publisher were compromised. The attack used a

For DevelopersRead

An Attacker Executed Code Through Your AI Agent and You Never Saw It

Incident

4 min read

An Attacker Executed Code Through Your AI Agent and You Never Saw It

Understanding the Vulnerability OX Security disclosed a critical vulnerability in Anthropic s Model Context Protocol (MCP) SDK that enables remote code execution across Python, TypeScript, Java, and R

For Security EngineersRead

ASP.NET Core's CVSS 9.1 Privilege Escalation: A Cryptographic Verification Failure

Incident

4 min read

ASP.NET Core's CVSS 9.1 Privilege Escalation: A Cryptographic Verification Failure

What Happened A critical vulnerability in Microsoft.AspNetCore.DataProtection allowed attackers to escalate privileges to SYSTEM level on affected servers. The flaw, tracked as CVE-2026-40372 with a C

For DevelopersRead

12,000 Flowise Instances Compromised Through Maximum-Severity RCE Flaw

Incident

4 min read

12,000 Flowise Instances Compromised Through Maximum-Severity RCE Flaw

What Happened A critical remote code execution vulnerability in Flowise AI—an open-source platform for building AI agents—is being actively exploited. CVE-2025-59528 carries a CVSS score of 10.0, the

For Compliance TeamsRead

Grafana's AI Dashboard Flaw: When LLM Integration Bypasses URL Validation

Incident

3 min read

Grafana's AI Dashboard Flaw: When LLM Integration Bypasses URL Validation

Overview of the Vulnerability Noma Security has disclosed a vulnerability in Grafana s AI-powered dashboards, allowing attackers to exfiltrate sensitive data through indirect prompt injection. This fl

For Security EngineersRead

A Padded HTTP Request Gave Root Access: Docker CVE-2026-34040

Incident

4 min read

A Padded HTTP Request Gave Root Access: Docker CVE-2026-34040

What Happened A high-severity vulnerability in Docker Engine (CVE-2026-34040, CVSS 8.8) allowed attackers to bypass authorization plugins and gain host access through a malformed HTTP request. This fl

For DevOps LeadersRead

12,000 AI Workflow Instances Running With a Known Critical Flaw

Incident

4 min read

12,000 AI Workflow Instances Running With a Known Critical Flaw

What Happened Between late January and early February 2025, security researchers at VulnCheck detected active exploitation of CVE-2025-59528 , a JavaScript injection vulnerability in Flowise, a low-co

For Compliance TeamsRead

CVE-2025-59528: When a CVSS-10 Vulnerability Meets 15,000 Exposed Instances

Incident

4 min read

CVE-2025-59528: When a CVSS-10 Vulnerability Meets 15,000 Exposed Instances

What Happened Flowise, an open-source low-code platform for building AI chatbots and workflows, was found to have CVE-2025-59528—a critical arbitrary JavaScript code injection vulnerability. This flaw

For Security EngineersRead

500,000 Vulnerabilities Narrowed to 14 Critical Paths

Incident

3 min read

500,000 Vulnerabilities Narrowed to 14 Critical Paths

The Problem Your security team, using CrowdStrike , encountered a daunting challenge: 500,000 vulnerability findings flagged by the scanner. Each finding had a CVSS score demanding attention. Patching

For Compliance TeamsRead

10 Hours: The Marimo RCE Exploit Timeline

Incident

4 min read

10 Hours: The Marimo RCE Exploit Timeline

What Happened A remote code execution vulnerability in Marimo, an open-source Python notebook platform, was exploited within 10 hours of public disclosure. The flaw, tracked as CVE-2026-39987, affects

For Security EngineersRead

Under 10 Hours: How an Unauthenticated RCE Became Full System Compromise

Incident

4 min read

Under 10 Hours: How an Unauthenticated RCE Became Full System Compromise

What Happened On a Friday in early 2025, CoreWeave disclosed CVE-2026-39987 , a critical remote code execution vulnerability in Marimo, their Python notebook platform. This flaw allowed attackers to e

For Security EngineersRead

Showing 65-80 of 142 articles

PreviousPage 5 of 9Next