Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams142 Security Engineers142 Compliance Teams99 Developers27 DevOps Leaders15 CISOs6 IT Directors2

Topics:All142 Incident142 Standards81 General33 Guides15 Research12 Vendor News4 Deadlines2 Legal2

142 articles in Incident · Clear filtersSort byNewest·Trending

When Identity Verification Failed Against AI Agents: A Post-Mortem

Incident

Latest

4 min read

When Identity Verification Failed Against AI Agents: A Post-Mortem

What Happened In the past 18 months, organizations using AI systems have faced security failures that traditional identity-based controls couldn t stop. While no single breach stands out, the overall

For Security EngineersRead article

Ruby Gems and Go Modules Turned Weapons: BufferZoneCorp Attack Breakdown

Incident

4 min read

Ruby Gems and Go Modules Turned Weapons: BufferZoneCorp Attack Breakdown

A coordinated supply chain attack using poisoned Ruby gems and Go modules has exposed how attackers now target the seams between your package managers and CI/CD pipelines. The campaign, attributed to

For Security EngineersRead

36 Hours: A SQL Injection Flaw Goes From Disclosure to Active Exploitation

Incident

4 min read

36 Hours: A SQL Injection Flaw Goes From Disclosure to Active Exploitation

What Happened In early 2026, security researchers disclosed CVE-2026-42208 , a critical SQL injection vulnerability in LiteLLM, a widely-used open-source AI Gateway. This flaw has a CVSS score of 9.3,

For Security EngineersRead

SQL Injection in LiteLLM: How a 9.3 CVSS Vulnerability Was Exploited in 36 Hours

Incident

4 min read

SQL Injection in LiteLLM: How a 9.3 CVSS Vulnerability Was Exploited in 36 Hours

What Happened LiteLLM, an API gateway for accessing multiple AI model providers, had a critical SQL injection vulnerability (CVE-2026-42208) in its API key validation logic. This flaw allowed attacker

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Mythos: When Vulnerability Discovery Moved to Machine Speed

Incident

3 min read

Mythos: When Vulnerability Discovery Moved to Machine Speed

The Shift in Vulnerability Discovery Mythos marks a pivotal change: AI-driven vulnerability discovery now outpaces human-led security responses. This advancement means vulnerabilities, which once took

For Security EngineersRead

Four Malicious Packages, One Missing Approval Gate

Incident

5 min read

Four Malicious Packages, One Missing Approval Gate

What Happened On April 29, 2026, attackers published malicious versions of four npm packages in the SAP development ecosystem. They exploited a CI pipeline vulnerability that allowed unauthorized npm

For Security EngineersRead

AI Agent Leaked OAuth Token Through Screenshot Manipulation

Incident

5 min read

AI Agent Leaked OAuth Token Through Screenshot Manipulation

An AI agent captured sensitive credentials and leaked them through an external messaging service. This incident occurred during research by Okta Threat Intelligence using OpenClaw, an AI agent framewo

For Security EngineersRead

Two Malicious Versions: How a Stored API Token Compromised PyPI's Lightning Package

Incident

3 min read

Two Malicious Versions: How a Stored API Token Compromised PyPI's Lightning Package

Incident Overview Versions 2.6.2 and 2.6.3 of the lightning package on PyPI were compromised with malicious code. An attacker exploited a stored API token to publish these versions without authorizati

For Compliance TeamsRead

CVE-2026-41940: When Authentication Bypass Meets Mass Hosting Infrastructure

Incident

3 min read

CVE-2026-41940: When Authentication Bypass Meets Mass Hosting Infrastructure

Summary of the Incident A critical authentication bypass vulnerability in cPanel WHM, identified as CVE-2026-41940, allowed attackers to access administrative functions without credentials. With a CVS

For Security EngineersRead

Two Malicious PyPI Packages Stole Credentials for 48 Hours

Incident

5 min read

Two Malicious PyPI Packages Stole Credentials for 48 Hours

What Happened On April 30, 2026, attackers published two malicious versions of PyTorch Lightning—versions 2.6.2 and 2.6.3—to the Python Package Index (PyPI) after compromising a publisher account. The

For Security EngineersRead

Google Gemini CLI's 10.0 CVSS Flaw: What Broke and How to Fix It

Incident

3 min read

Google Gemini CLI's 10.0 CVSS Flaw: What Broke and How to Fix It

What Happened Security researchers at Novee Security discovered a critical remote code execution vulnerability in Google s Gemini CLI tool, rated with a CVSS score of 10.0. This flaw affected versions

For DevOps LeadersRead

A 10.0 Severity Flaw in Google's Gemini CLI: What Failed and How to Fix It

Incident

5 min read

A 10.0 Severity Flaw in Google's Gemini CLI: What Failed and How to Fix It

What Happened Google patched a critical vulnerability in the Gemini CLI package and its GitHub Actions workflow, which received a CVSS score of 10.0—the highest severity rating. This flaw allowed atta

For DevOps LeadersRead

Two Malicious PyTorch Lightning Versions Slipped Through PyPI's Gates

Incident

4 min read

Two Malicious PyTorch Lightning Versions Slipped Through PyPI's Gates

Incident Overview On April 30, 2026, attackers released two compromised versions of PyTorch Lightning —2.6.2 and 2.6.3—on the Python Package Index (PyPI) after gaining control of a publisher account.

For Security EngineersRead

PyTorch Lightning Supply Chain Attack: Two Versions, Thousands of Exposed Environments

Incident

4 min read

PyTorch Lightning Supply Chain Attack: Two Versions, Thousands of Exposed Environments

What Happened On April 30, 2026, threat actors released two malicious versions of PyTorch Lightning—2.6.2 and 2.6.3—on the Python Package Index (PyPI). These packages included a hidden _runtime direct

For Security EngineersRead

Four SAP npm Packages Shipped Malware for Two Weeks

Incident

5 min read

Four SAP npm Packages Shipped Malware for Two Weeks

On a routine Thursday, developers who ran npm install on SAP s Cloud Application Programming Model packages received more than they expected. Four official SAP packages — @cap-js/sqlite v2.2.2, @cap-j

For Security EngineersRead

How GitHub Patched a Critical RCE in Two Hours

Incident

3 min read

How GitHub Patched a Critical RCE in Two Hours

GitHub recently faced a potential crisis with CVE-2026-3854, a remote code execution vulnerability that threatened millions of private repositories. Within two hours of receiving the report, GitHub ha

For Security EngineersRead

Showing 1-16 of 142 articles

PreviousPage 1 of 9Next