Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Zero-Click Prompt Injection Hijacks Claude and ChatGPT Atlas: Detection and Containment Guide for AI Browsers
Introduction Security researchers at Zenity have demonstrated zero-click hijacking of Anthropic's Claude and OpenAI's ChatGPT Atlas agentic ...
CVE-2026-8037: Progress LoadMaster Command Injection Under Active Exploitation — Detection and Remediation Guide
CISA Confirms Active Exploitation of Progress LoadMaster Command Injection Flaw On August 7, 2026, CISA added CVE-2026-8037 — a command inje...
Metabase SQL Injection Exploited in the Wild: Framework and Tally Breaches — Detection and Remediation Guide
A Business Intelligence Tool Just Became an Attacker's Data Exfiltration Pipeline Two technology companies — laptop manufacturer Framework a...
800 Malicious npm Packages Delivering Cross-Platform RAT and Infostealer: Supply Chain Detection and Remediation Guide
A Supply Chain Shotgun Blast: 800 Malicious npm Packages in One Campaign OpenSourceMalware researcher Paul has disclosed a cluster of nearly...
CVE-2026-54489: Dell VSI for VMware vSphere Session Hijacking — Detection and Remediation Guide
CVE-2026-54489: Dell VSI for VMware vSphere Session Hijacking — Detection and Remediation Guide NVD has published CVE-2026-54489, a CVSS 9.1...
CVE-2026-8037: Progress LoadMaster Unauthenticated Command Injection — KEV-Listed, Detection and Remediation Guide
Introduction On August 7, 2026, CISA added CVE-2026-8037 to the Known Exploited Vulnerabilities (KEV) catalog — the definitive signal that t...
Agentic AI for Cyber Defense: What Practitioners Built at Black Hat USA 2026 and How to Operationalize It Safely
Agentic AI for Cyber Defense: What Practitioners Built at Black Hat USA 2026 For the past two years, the agentic AI conversation in security...
AI Browser Prompt Injection: Why OpenAI Atlas, Perplexity Comet, and Copilot Still Leak — And How to Defend Your Enterprise
Introduction The security community has been warning about prompt injection since the first LLM-powered assistants shipped, but new research...
AI-Discovered HTTP Desync Techniques and Unpatched Apache Traffic Server Flaw: Detection and Hardening Guide
The Threat Landscape Just Shifted: AI Is Now Finding Zero-Day-Class Web Flaws at Machine Scale James Kettle — PortSwigger's Director of Rese...