Expert perspectives on application security, compliance, and emerging threats
StandardsScope This guide focuses on detecting, preventing, and remediating malicious packages in PHP Composer dependency chains, specifically targeting threats from Packagist . It covers reconnaissance method
IncidentWhat Happened A recent campaign by the North Korean threat actor group Famous Chollima involved the publication of 26 malicious packages to the npm registry. These packages deployed a cross-platform r
IncidentThe Surge in API Attacks In the first half of 2025, small and medium-sized businesses (SMBs) faced over 1.45 billion attacks, with API-targeted exploits increasing 74 times compared to previous period
IncidentUnderstanding the Gap in AI Pentesting CyberMaddy, a security researcher, evaluated Burp AI s vulnerability detection capabilities using test web applications. The tool identified common vulnerabiliti
Get weekly security insights and compliance updates delivered to your inbox.
IncidentWhat Happened OX Security discovered CVE-2026-28289 , a zero-click remote code execution vulnerability in FreeScout, an open-source helpdesk platform. This flaw allowed attackers to execute arbitrary
StandardsStarting September 2026, Chrome will move to a two-week release cycle with version 153. If you re managing web applications in production, you need a clear decision framework for how your team respond
StandardsThe Challenge Your platform engineering team might be managing multiple Kubernetes clusters across various environments. A common issue is policy chaos. One team adopted Kyverno as their policy engine
GeneralYour security team is debating whether to block AI-enabled browsers like Arc, Brave with Leo, or Edge with Copilot. Someone proposes an outright ban. The compliance team wants to add it to the accepta
IncidentWhat Happened Threat actors exploited CVE-2026-21385 , a high-severity memory corruption vulnerability in Qualcomm chipsets, in targeted attacks against Android devices. Security researchers identifie
GeneralScope This guide addresses the cybersecurity risks inherent in Tire Pressure Monitoring Systems (TPMS) and similar automotive IoT components. You ll find guidance for security teams evaluating connect
GuidesYour compliance manager asks about your disaster recovery plan. You point to Clonezilla running on a schedule, creating system images of your production Linux servers. You ve checked the backup strate
StandardsThese questions arise from recent experiences with contractors navigating the implications of the Cybersecurity Maturity Model Certification (CMMC) for their supplier relationships. With the Departmen
IncidentWhat Happened Between February and late 2025, threat actors deployed Coruna—an iOS exploit kit containing five complete exploit chains and 23 individual exploits—against targets ranging from iPhone mo
IncidentOverview of the Vulnerability Security researchers at OX Security disclosed CVE-2026-28289 , a critical vulnerability in FreeScout, an open-source, self-hosted help desk platform. This flaw allows una
Vendor NewsYour procurement team just forwarded another AI model announcement. The vendor promises breakthrough speed, unbeatable pricing, and enterprise-grade everything. Your security architect wants to pilot
GeneralScope This guide addresses the challenge of configuring AI model behavior in production systems to balance safety controls with usable responses. You ll find practical frameworks for evaluating conver
