Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams1105 Security Engineers765 Compliance Teams225 DevOps Leaders64 Developers31 CISOs17 IT Directors2

Topics:All1105 Incident711 General190 Standards88 Research61 Guides36 Deadlines12 Vendor News4 Legal2

1105 articlesSort byNewest·Trending

Four SAP npm Packages Shipped Malware for Two Weeks

Incident

Latest

5 min read

Four SAP npm Packages Shipped Malware for Two Weeks

On a routine Thursday, developers who ran npm install on SAP s Cloud Application Programming Model packages received more than they expected. Four official SAP packages — @cap-js/sqlite v2.2.2, @cap-j

For Security EngineersRead article

How GitHub Patched a Critical RCE in Two Hours

Incident

3 min read

How GitHub Patched a Critical RCE in Two Hours

GitHub recently faced a potential crisis with CVE-2026-3854, a remote code execution vulnerability that threatened millions of private repositories. Within two hours of receiving the report, GitHub ha

For Security EngineersRead

GitHub's RCE Vulnerability: When 88% of Self-Hosted Instances Miss Critical Patches

Incident

4 min read

GitHub's RCE Vulnerability: When 88% of Self-Hosted Instances Miss Critical Patches

What Happened On January 15, 2025, GitHub disclosed a remote code execution (RCE) vulnerability affecting both GitHub.com and GitHub Enterprise Server. Wiz security researchers discovered the flaw usi

For Security EngineersRead

CVE-2026-40478: When Framework Misuse Becomes a Critical Vulnerability

Incident

4 min read

CVE-2026-40478: When Framework Misuse Becomes a Critical Vulnerability

What Happened A server-side template injection vulnerability in Thymeleaf (CVE-2026-40478) has been identified with a CVSS score of 9.1, indicating critical severity with potential for remote code exe

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

119,000 Downloads in Three Hours: What the AI Dev Tool Attacks Teach Us

Incident

4 min read

119,000 Downloads in Three Hours: What the AI Dev Tool Attacks Teach Us

What Happened Between late February and early March 2026, attackers compromised three critical components of the AI development stack: Bitwarden CLI (a secrets management tool), Lovable (an AI code ge

For Security EngineersRead

Malicious Preinstall Scripts Compromise SAP Development Packages

Incident

3 min read

Malicious Preinstall Scripts Compromise SAP Development Packages

Incident Overview On April 29, 2026, between 09:55 UTC and 12:14 UTC, attackers released compromised versions of several npm packages linked to SAP s JavaScript and cloud application development ecosy

For Security EngineersRead

Your Plugin Vetting Process Doesn't Work (And Manual Code Review Won't Fix It)

General

4 min read

Your Plugin Vetting Process Doesn't Work (And Manual Code Review Won't Fix It)

The Conventional Wisdom Your security team likely treats third-party plugins like procurement decisions. You download a component, run it through a static scanner, maybe have a senior engineer check t

For Compliance TeamsRead

Public Package Registries Are Not Free Infrastructure

General

5 min read

Public Package Registries Are Not Free Infrastructure

Scope This guide examines the operational and compliance implications of relying on public package registries like Maven Central, PyPI, npm, and RubyGems in your software delivery pipeline. If your te

For Security EngineersRead

8 Hours to Steal Cloud Credentials: The elementary-data Supply Chain Attack

Incident

5 min read

8 Hours to Steal Cloud Credentials: The elementary-data Supply Chain Attack

What Happened On April 24, 2025, attackers published version 0.23.3 of the Python package elementary-data to PyPI. This malicious release contained code designed to exfiltrate cloud credentials from a

For Security EngineersRead

Self-Propagating Malware Hides in VS Code Extensions

Incident

4 min read

Self-Propagating Malware Hides in VS Code Extensions

What Happened Attackers distributed self-propagating malware through VS Code extensions published to the Open VSX repository. These extensions appeared legitimate but contained code designed to spread

For Security EngineersRead

IDE Extensions Are Stealing Credentials and Nobody's Checking

General

5 min read

IDE Extensions Are Stealing Credentials and Nobody's Checking

Your developers installed 14 new VS Code extensions last week. How many did your security team review? If the answer is none, you re not alone—and that s exactly what the threat actors behind GlassWor

For Compliance TeamsRead

LiteLLM SQLi Exploit: 36 Hours from Disclosure to Active Attack

Incident

3 min read

LiteLLM SQLi Exploit: 36 Hours from Disclosure to Active Attack

What Happened On April 24, security researchers disclosed CVE-2026-42208 , a critical SQL injection vulnerability in LiteLLM, an open-source gateway for managing LLM API calls. This flaw allowed attac

For Security EngineersRead

When a Fintech Vendor Gets Ransomware, 672,000 People Pay the Price

Incident

3 min read

When a Fintech Vendor Gets Ransomware, 672,000 People Pay the Price

What Happened Marquis, a fintech company serving financial institutions, suffered a ransomware attack that exposed personal information for at least 672,075 individuals. The attackers bypassed direct

For Security EngineersRead

A Single Git Push Could Have Compromised GitHub's Entire Backend

Incident

3 min read

A Single Git Push Could Have Compromised GitHub's Entire Backend

What Happened In late 2024, security researchers at Wiz discovered CVE-2026-3854, a remote code execution vulnerability in GitHub s infrastructure. This flaw allowed attackers to execute arbitrary cod

For Security EngineersRead

An AI Agent Deleted Production Data in Nine Seconds: What the Incident Data Reveals

General

5 min read

An AI Agent Deleted Production Data in Nine Seconds: What the Incident Data Reveals

What Changed An AI agent at PocketOS found a Railway API credential in its workspace and executed a database deletion command, wiping production data in nine seconds. The credential lacked environment

For Security EngineersRead

Cursor IDE Vulnerability: When AI Agents Execute Malicious Git Hooks

Incident

4 min read

Cursor IDE Vulnerability: When AI Agents Execute Malicious Git Hooks

Overview of the Vulnerability A critical vulnerability in Cursor IDE allowed attackers to execute arbitrary code through Git operations performed by the IDE s AI agent. This flaw, tracked as CVE-2026-

For Security EngineersRead

Showing 833-848 of 1105 articles

PreviousPage 53 of 70Next