Expert perspectives on application security, compliance, and emerging threats
IncidentWhat Happened AWS s Kiro IDE had a vulnerability that allowed attackers to rewrite its configuration file and execute code without triggering approval prompts. Intezer s research team found that Kiro
IncidentWhat Happened Pillar Security disclosed vulnerabilities in Cursor, Codex CLI, Gemini CLI, and Antigravity that allow AI agents to execute arbitrary code without triggering sandbox violations. Instead
IncidentWhat Happened Between January 14 and February 12, 2025, WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 had a remote code execution vulnerability in the core REST API batch endpoint ( b
IncidentWhat Happened Attackers began exploiting two WordPress vulnerabilities within three days of their public disclosure. The attack chains CVE-2026-60137 and CVE-2026-63030 together, creating a path to re
Get weekly security insights and compliance updates delivered to your inbox.
IncidentWhat Happened Three RubyGems packages, impersonating legitimate Ruby tools, were hijacked and republished with malicious code to steal credentials from developer workstations. These packages scanned f
IncidentA critical vulnerability in ServiceNow s AI Platform is being actively exploited. CVE-2026-6875 allows attackers to execute code remotely without authentication. ServiceNow issued patches for self-hos
IncidentThe Hidden Threat Your security testing finds nothing. Your WAF sees clean traffic. Your SIEM logs look normal. Meanwhile, an attacker exfiltrates data through DNS queries you never monitored. This is
IncidentWhat Happened When Anthropic disclosed the Mythos vulnerability in their Claude AI platform, security teams faced a familiar issue: they knew what was broken but couldn t fix it quickly. The vulnerabi
IncidentWhat Happened Pillar Security discovered sandbox escape vulnerabilities in multiple AI coding agents, including Cursor, OpenAI s Codex, Google s Gemini CLI, and Antigravity. These vulnerabilities didn
IncidentYour machine learning pipeline just stopped. The model checkpoints your team spent three months training? Encrypted. The curated datasets you ve been building for two years? Inaccessible. The ransom n
GeneralScope This guide focuses on post-incident forensic analysis for AI-generated code when you suspect your coding assistant has been compromised through training data poisoning. You ll learn how to evalu
GeneralYour developers are using AI coding assistants right now. They re generating pull requests, suggesting dependencies, and writing security checks. But the mental models most teams have about these tool
IncidentOn January 14, 2025, WordPress disclosed two chained vulnerabilities that allowed unauthenticated attackers to achieve remote code execution on any WordPress Core installation. Within hours, WordPress
ResearchPurpose of the Template Your Third-Party Notices (TPNs) likely sit in a compliance folder as a lengthy PDF with inconsistent formatting. While they re generated for legal reasons, they don t contribut
GuidesYour software bill of materials (SBOM) might be sitting in a PDF somewhere, listing every dependency your application uses. It s technically accurate, but it s useless when a new vulnerability emerges
IncidentIn March 2026, the TeamPCP attack compromised Trivy, Checkmarx, LiteLLM, and dozens of npm packages. Security teams knew about the vulnerabilities. They d logged tickets, assigned severity scores, and
