Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams912 Security Engineers1021 Compliance Teams275 DevOps Leaders88 Developers33 CISOs21 IT Directors2

Topics:All912 Incident912 General270 Standards94 Research87 Guides53 Deadlines17 Vendor News5 Legal2

912 articles in Incident · Clear filtersSort byNewest·Trending

10 Hours: The Marimo RCE Exploit Timeline

Incident

Latest

4 min read

10 Hours: The Marimo RCE Exploit Timeline

What Happened A remote code execution vulnerability in Marimo, an open-source Python notebook platform, was exploited within 10 hours of public disclosure. The flaw, tracked as CVE-2026-39987, affects

For Security EngineersRead article

Under 10 Hours: How an Unauthenticated RCE Became Full System Compromise

Incident

4 min read

Under 10 Hours: How an Unauthenticated RCE Became Full System Compromise

What Happened On a Friday in early 2025, CoreWeave disclosed CVE-2026-39987 , a critical remote code execution vulnerability in Marimo, their Python notebook platform. This flaw allowed attackers to e

For Security EngineersRead

Code-Signing Certificates Revoked After Supply Chain Compromise

Incident

3 min read

Code-Signing Certificates Revoked After Supply Chain Compromise

Incident Overview OpenAI is rotating all of its macOS code-signing certificates and will fully revoke them on May 8, 2026, following a supply chain attack involving a malicious version of the Axios pa

For DevelopersRead

When the National Vulnerability Database Stopped Enriching Most CVEs

Incident

4 min read

When the National Vulnerability Database Stopped Enriching Most CVEs

What Happened In 2025, the National Vulnerability Database (NVD) announced it would no longer provide enrichment data—such as CVSS scores, CWE classifications, and affected product configurations—for

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

91,000 Attack Sessions in Three Months: The Ollama Exposure Problem

Incident

5 min read

91,000 Attack Sessions in Three Months: The Ollama Exposure Problem

What Happened Between October 2025 and January 2026, GreyNoise captured 91,403 distinct attack sessions targeting publicly exposed LLM inference endpoints. The primary target was Ollama instances depl

For Security EngineersRead

CVE-2026-33032: When an AI Feature Became a Remote Code Execution Vector

Incident

3 min read

CVE-2026-33032: When an AI Feature Became a Remote Code Execution Vector

Overview of the Vulnerability On March 30, security researchers at Pluto Security disclosed CVE-2026-33032 , a critical vulnerability in nginx UI, a popular web-based management tool for nginx servers

For Security EngineersRead

Prompt Injection Flaws in Salesforce Agentforce and Microsoft Copilot: A Security Teardown

Incident

4 min read

Prompt Injection Flaws in Salesforce Agentforce and Microsoft Copilot: A Security Teardown

Two recently fixed prompt injection vulnerabilities in Salesforce Agentforce and Microsoft Copilot could have allowed external attackers to leak sensitive data from enterprise systems. Here s what hap

For Compliance TeamsRead

21,764 Malicious Packages: The axios Compromise and What It Reveals About Your Dependency Chain

Incident

4 min read

21,764 Malicious Packages: The axios Compromise and What It Reveals About Your Dependency Chain

What Happened In Q1 2026, Sonatype identified 21,764 open source malware packages across public repositories, with npm accounting for 75% of these. Three incidents highlighted how attackers exploit tr

For Security EngineersRead

North Korean Actors Compromised Axios npm Package: A Supply Chain Attack Teardown

Incident

3 min read

North Korean Actors Compromised Axios npm Package: A Supply Chain Attack Teardown

A recent compromise of the popular Axios npm package has highlighted critical gaps in supply chain security for software development teams. Google s Threat Intelligence Group attributed the breach of

For Security EngineersRead

Axios NPM Package Hijacked: Three Hours That Exposed Your Dependency Stack

Incident

5 min read

Axios NPM Package Hijacked: Three Hours That Exposed Your Dependency Stack

What Happened On March 30, 2026, attackers compromised the Axios NPM package by taking over a maintainer s account. Axios, a widely used HTTP client library in JavaScript, was injected with malicious

For Compliance TeamsRead

How Stolen Credentials Turned GitHub Actions Into a Malware Factory

Incident

5 min read

How Stolen Credentials Turned GitHub Actions Into a Malware Factory

What Happened TeamPCP compromised the CI/CD pipeline for Trivy, a widely-used vulnerability scanner, by stealing publishing credentials. They used these credentials to push malicious versions of both

For DevOps LeadersRead

36 Malicious npm Packages Deployed Reverse Shells Through Strapi Plugin Typosquatting

Incident

4 min read

36 Malicious npm Packages Deployed Reverse Shells Through Strapi Plugin Typosquatting

What Happened SafeDep discovered 36 malicious npm packages posing as legitimate Strapi CMS plugins. These packages exploited Redis and PostgreSQL connections to deploy reverse shells and steal credent

For Security EngineersRead

766 Hosts Compromised in 24 Hours: The React2Shell Credential Theft Campaign

Incident

4 min read

766 Hosts Compromised in 24 Hours: The React2Shell Credential Theft Campaign

What Happened Between late 2024 and early 2025, attackers exploited the React2Shell vulnerability in Next.js applications to execute an automated credential theft campaign. Using a framework called NE

For Security EngineersRead

Security Fix Exists, But Your Users Are Still Vulnerable

Incident

4 min read

Security Fix Exists, But Your Users Are Still Vulnerable

What Happened Adversa discovered a vulnerability in Claude Code that allows attackers to bypass security controls by submitting more than 50 subcommands in a single request. When the system encounters

For Compliance TeamsRead

A Security Scanner Becomes the Attack Vector: The Trivy Supply Chain Breach

Incident

4 min read

A Security Scanner Becomes the Attack Vector: The Trivy Supply Chain Breach

On March 19, 2026, TeamPCP compromised Aqua Security s Trivy vulnerability scanner—a tool millions of developers rely on to find security flaws. The attackers didn t exploit a zero-day in the scanner

For Compliance TeamsRead

56% of Vulnerable Magento Stores Hit Within 10 Days

Incident

5 min read

56% of Vulnerable Magento Stores Hit Within 10 Days

What Happened Mass exploitation of the PolyShell vulnerability in Magento Open Source and Adobe Commerce began on March 19th. Within days, attackers compromised 56.7% of all vulnerable stores. The att

For Compliance TeamsRead

Showing 849-864 of 912 articles

PreviousPage 54 of 57Next