Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams291 Security Engineers142 Compliance Teams99 Developers27 DevOps Leaders15 CISOs6 IT Directors2

Topics:All291 Incident142 Standards81 General33 Guides15 Research12 Vendor News4 Deadlines2 Legal2

291 articlesSort byNewest·Trending

Malicious npm Packages Stole Credentials from 8,000 Weekly Downloads

Standards

Latest

5 min read

Malicious npm Packages Stole Credentials from 8,000 Weekly Downloads

Scope - What This Guide Covers This guide provides detection, prevention, and response strategies for supply chain attacks targeting package registries. It includes steps for securing your dependency

For DevelopersRead article

Bitwarden CLI Supply Chain Attack: A 95-Minute Window That Exposed Thousands of Secrets

Incident

5 min read

Bitwarden CLI Supply Chain Attack: A 95-Minute Window That Exposed Thousands of Secrets

What Happened On April 22, 2026, attackers published a compromised version of the Bitwarden command-line interface (version @bitwarden/ [email protected] ) to npm. The malicious code, embedded in a file na

For Compliance TeamsRead

Bitwarden CLI Hijacked for 90 Minutes: A CI/CD Pipeline Breach Teardown

Incident

4 min read

Bitwarden CLI Hijacked for 90 Minutes: A CI/CD Pipeline Breach Teardown

On April 22, 2025, developers who updated the Bitwarden CLI to version 2026.4.0 installed malware designed to exfiltrate their most sensitive credentials. The window was narrow—just over 90 minutes—bu

For Compliance TeamsRead

Bitwarden CLI Package Breach: How a Compromised GitHub Action Stole Developer Credentials

Incident

4 min read

Bitwarden CLI Package Breach: How a Compromised GitHub Action Stole Developer Credentials

What Happened On April 22, 2026, the @bitwarden/cli npm package was compromised with malicious code aiming to steal developer credentials. This package was available from 5:57 PM to 7:30 PM ET. During

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Hackers Compromised a Security Tool to Steal the Secrets It Was Scanning

Incident

5 min read

Hackers Compromised a Security Tool to Steal the Secrets It Was Scanning

What Happened On April 22, 2026, attackers replaced legitimate Docker images of Checkmarx s KICS (Keeping Infrastructure as Code Secure) tool with malicious versions. KICS is an open-source scanner th

For Compliance TeamsRead

A 9.3 CVSS Vulnerability That Will Never Be Patched

Incident

5 min read

A 9.3 CVSS Vulnerability That Will Never Be Patched

What Happened CVE-2026-5752, a critical vulnerability in Cohere AI s Terrarium sandbox, allows attackers to execute arbitrary code with root privileges and escape container isolation. This flaw exploi

For Security EngineersRead

16 npm Packages Compromised in Self-Propagating Supply Chain Attack

Incident

4 min read

16 npm Packages Compromised in Self-Propagating Supply Chain Attack

What Happened On April 21, 2025, attackers published a malicious version of the pgserve package from Namastex Labs. Within days, 16 packages from the same publisher were compromised. The attack used a

For DevelopersRead

An Attacker Executed Code Through Your AI Agent and You Never Saw It

Incident

4 min read

An Attacker Executed Code Through Your AI Agent and You Never Saw It

Understanding the Vulnerability OX Security disclosed a critical vulnerability in Anthropic s Model Context Protocol (MCP) SDK that enables remote code execution across Python, TypeScript, Java, and R

For Security EngineersRead

Your Dependency Update Just Broke Authentication: A Post-Patch Validation Checklist

Standards

5 min read

Your Dependency Update Just Broke Authentication: A Post-Patch Validation Checklist

A critical vulnerability with a CVSS score of 9.1 appeared in ASP.NET Core s Data Protection Library—not from a zero-day exploit, but from a Microsoft update. CVE-2026-40372 affects authentication tok

For DevelopersRead

A Self-Propagating Worm Just Proved Your Dependency Security Model Is Broken

Standards

4 min read

A Self-Propagating Worm Just Proved Your Dependency Security Model Is Broken

Socket and StepSecurity detected a supply chain worm in npm packages that doesn t just steal credentials—it spreads itself. The attack, tracked as CanisterSprawl, uses postinstall hooks to exfiltrate

For Security EngineersRead

ASP.NET Core's CVSS 9.1 Privilege Escalation: A Cryptographic Verification Failure

Incident

4 min read

ASP.NET Core's CVSS 9.1 Privilege Escalation: A Cryptographic Verification Failure

What Happened A critical vulnerability in Microsoft.AspNetCore.DataProtection allowed attackers to escalate privileges to SYSTEM level on affected servers. The flaw, tracked as CVE-2026-40372 with a C

For DevelopersRead

12,000 Flowise Instances Compromised Through Maximum-Severity RCE Flaw

Incident

4 min read

12,000 Flowise Instances Compromised Through Maximum-Severity RCE Flaw

What Happened A critical remote code execution vulnerability in Flowise AI—an open-source platform for building AI agents—is being actively exploited. CVE-2025-59528 carries a CVSS score of 10.0, the

For Compliance TeamsRead

Grafana's AI Dashboard Flaw: When LLM Integration Bypasses URL Validation

Incident

3 min read

Grafana's AI Dashboard Flaw: When LLM Integration Bypasses URL Validation

Overview of the Vulnerability Noma Security has disclosed a vulnerability in Grafana s AI-powered dashboards, allowing attackers to exfiltrate sensitive data through indirect prompt injection. This fl

For Security EngineersRead

A Padded HTTP Request Gave Root Access: Docker CVE-2026-34040

Incident

4 min read

A Padded HTTP Request Gave Root Access: Docker CVE-2026-34040

What Happened A high-severity vulnerability in Docker Engine (CVE-2026-34040, CVSS 8.8) allowed attackers to bypass authorization plugins and gain host access through a malformed HTTP request. This fl

For DevOps LeadersRead

Maintainer Impersonation Response Script for Open-Source Projects

Standards

4 min read

Maintainer Impersonation Response Script for Open-Source Projects

Your open-source project just received an email from someone claiming to be a core maintainer, asking for elevated repository access. The writing style matches, and the email domain looks legitimate,

For Compliance TeamsRead

12,000 AI Workflow Instances Running With a Known Critical Flaw

Incident

4 min read

12,000 AI Workflow Instances Running With a Known Critical Flaw

What Happened Between late January and early February 2025, security researchers at VulnCheck detected active exploitation of CVE-2025-59528 , a JavaScript injection vulnerability in Flowise, a low-co

For Compliance TeamsRead

Showing 97-112 of 291 articles

PreviousPage 7 of 19Next