Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams1105 Security Engineers765 Compliance Teams225 DevOps Leaders64 Developers31 CISOs17 IT Directors2

Topics:All1105 Incident711 General190 Standards88 Research61 Guides36 Deadlines12 Vendor News4 Legal2

1105 articlesSort byNewest·Trending

AI Scans 100,000 Repositories in 72 Hours: The PRT-scan Attack

Incident

Latest

3 min read

AI Scans 100,000 Repositories in 72 Hours: The PRT-scan Attack

Overview of the Attack An attacker used an AI tool named PRT-scan to systematically scan GitHub repositories for misconfigurations that expose secrets. This attack automated the process of reconnaissa

For Security EngineersRead article

When AI Finds Your CVE Before You Patch It

Incident

4 min read

When AI Finds Your CVE Before You Patch It

The Emerging Threat Vulnerabilities are being exploited faster than your team can deploy patches. The traditional workflow—discover, prioritize, test, deploy—now lags behind the speed of exploitation.

For CISOsRead

Risk-Based Vulnerability Triage After NIST's Pivot to Selective Enrichment

Standards

5 min read

Risk-Based Vulnerability Triage After NIST's Pivot to Selective Enrichment

NIST enriched nearly 42,000 CVEs in 2025, a 45% increase over previous years. Yet they just announced they re scaling back. Why? CVE submissions jumped 263% between 2020 and 2025, and the old model of

For Compliance TeamsRead

SBOMs Won't Save You From Supply Chain Risk

Guides

4 min read

SBOMs Won't Save You From Supply Chain Risk

The Conventional Wisdom Your compliance team might believe that supply chain security is addressed by generating Software Bills of Materials (SBOMs). Create an SBOM for every release, submit it to the

For Compliance TeamsRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Anthropic's MCP Vulnerability: When "Expected Behavior" Means Remote Code Execution

Incident

5 min read

Anthropic's MCP Vulnerability: When "Expected Behavior" Means Remote Code Execution

What Happened In early 2025, security researchers at OX Security disclosed a critical vulnerability in Anthropic s Model Context Protocol (MCP) that allows remote code execution. This flaw affects ove

For Compliance TeamsRead

"Wait, Our Template Engine Can Execute Code?"

Standards

4 min read

"Wait, Our Template Engine Can Execute Code?"

I ve been fielding urgent questions about CVE-2026-40478 in Thymeleaf. Many teams using Java Spring apps with Thymeleaf are now facing a 9.1 CVSS vulnerability that allows unauthenticated attackers to

For Compliance TeamsRead

How a Compromised AI Tool Gave Attackers Full Access to Vercel's Infrastructure

Incident

5 min read

How a Compromised AI Tool Gave Attackers Full Access to Vercel's Infrastructure

What Happened On December 20, 2024, Vercel discovered unauthorized access to their internal systems through a compromised OAuth token belonging to Context.ai, a third-party AI coding assistant integra

For Compliance TeamsRead

Bitwarden CLI Trojan: How a GitHub Action Became a Supply Chain Weapon

Incident

4 min read

Bitwarden CLI Trojan: How a GitHub Action Became a Supply Chain Weapon

What Happened On April 22, 2025, attackers published a malicious version of the Bitwarden CLI password manager (version 2026.4.0) to the npm registry. The compromised package was available for about 1

For Security EngineersRead

A Critical RMM Flaw Exposes the Hidden Attack Surface in Your Supply Chain

Incident

4 min read

A Critical RMM Flaw Exposes the Hidden Attack Surface in Your Supply Chain

What Happened A critical remote code execution vulnerability (CVE-2026-1731) in Bomgar s remote monitoring and management (RMM) platform has exposed organizations to significant risk. This flaw allowe

For Compliance TeamsRead

Should You Pin, Verify, or Isolate Your Developer Tools?

Standards

5 min read

Should You Pin, Verify, or Isolate Your Developer Tools?

When Socket alerted on malicious Docker images in the official checkmarx/kics repository—including a new tag v2.1.21—and compromised VS Code extensions (checkmarx/ [email protected] and 1.19.0), se

For Compliance TeamsRead

Self-Propagating npm Malware Steals Credentials, Publishes More Malware

Incident

4 min read

Self-Propagating npm Malware Steals Credentials, Publishes More Malware

What Happened The CanisterSprawl malware campaign compromised npm packages to steal sensitive data from developer machines, such as tokens and API keys. It then used these credentials to publish more

For DevelopersRead

AI Found 10,000 Vulnerabilities in Your Code. Now What?

Standards

4 min read

AI Found 10,000 Vulnerabilities in Your Code. Now What?

Scope - What This Guide Covers This guide addresses the operational gap between discovering vulnerabilities and fixing them in environments where AI-assisted scanning is common. You ll find frameworks

For CISOsRead

Standards

Malicious npm Package Impersonates Bitwarden CLI: Three Attack Vectors in One

On April 23, 2026, Mend.io discovered a compromised package on npm masquerading as @bitwarden/cli version 2026.4.0. This package combined three attack mechanisms: a self-propagating npm worm, a GitHub

For Security EngineersRead

Incident

Stolen Publishing Tokens: How CanisterSprawl Turned npm Maintainers Into Attack Vectors

What Happened In late 2024, security researchers at StepSecurity and Socket disclosed CanisterSprawl, an npm malware campaign that exploits developer environments to steal credentials and publish mali

For Security EngineersRead

Standards

How Should You Authorize Your AI Agents?

Your team just deployed an AI agent to automate incident response. It needs to query your SIEM, update tickets, and potentially disable compromised accounts. The question you re facing: how do you gra

For Compliance TeamsRead

Incident

340 GB Stolen Through a Compromised Security Scanner

What Happened On March 24, the European Commission s Security Operations Center detected unauthorized access to their AWS cloud infrastructure. The attacker, ShinyHunters, had compromised a version of

For Compliance TeamsRead

Showing 881-896 of 1105 articles

PreviousPage 56 of 70Next