Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LiteLLM Supply Chain Attack via Trivy Compromise: 2,500+ Organizations Exposed — Detection and Remediation Guide
A Poisoned Python Package in the AI Stack LiteLLM — the popular open-source Python library used to normalize API calls across dozens of larg...
CVE-2026-5917: Critical Shell Command Injection in libgit2's libssh2 Backend — Detection and Remediation Guide
Introduction NVD has published CVE-2026-5917, a CVSS 9.6 (CRITICAL) shell command injection vulnerability in libgit2 — the embeddable Git li...
CVE-2026-73032: Unauthenticated RCE in PapersGPT for Zotero — Detection and Remediation Guide
Introduction NVD has published CVE-2026-73032, a CVSS 9.6 (Critical) vulnerability affecting PapersGPT for Zotero version 0.6.1 — a popular ...
CVE-2026-55040: Unauthenticated SharePoint RCE Found by AI Agent — Detection, Hunting, and Patching Guide
CVE-2026-55040: When an AI Agent Walked Into Your SharePoint Farm as Administrator Security researchers have disclosed a critical vulnerabil...
BdThemes Supply Chain Attack: Poisoned JSON Creates Rogue WordPress Admins — Detection and Remediation Guide
BdThemes Supply Chain Attack: Poisoned JSON Creates Rogue WordPress Admins WordPress site owners running plugins from vendor BdThemes need t...
CVE-2026-72898: Metabase SQL Injection Under Active Exploitation — Detection and Remediation Guide
Introduction On August 11, 2026, CISA added CVE-2026-72898 to the Known Exploited Vulnerabilities (KEV) catalog, confirming what many SOC te...
CVE-2026-68820: Windows AFD.sys Use-After-Free Actively Exploited — CISA KEV Detection and Remediation Guide
Introduction On August 11, 2026, CISA added CVE-2026-68820 to the Known Exploited Vulnerabilities (KEV) catalog — which means this is no lon...
CVE-2026-20349: Cisco ASA & FTD Heap Inspection Vulnerability Under Active Exploitation — Detection and Remediation Guide
CVE-2026-20349: Cisco ASA & FTD Heap Inspection Vulnerability Under Active Exploitation On 2026-08-11, CISA added CVE-2026-20349 to the Know...
CVE-2026-63520: Microsoft SharePoint Unauthenticated RCE Chained with CVE-2026-55040 — Detection and Remediation Guide
SharePoint Is Under the Microscope Again — and This Time It's a Two-Bug Chain to Unauthenticated RCE If you run on-premises Microsoft ShareP...