Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-93325: Docker Buildx Filesystem Entitlement Bypass — Detection and Remediation Guide
Introduction The Zero Day Initiative has published ZDI-26-758, disclosing CVE-2026-93325 — a filesystem entitlements protection mechanism fa...
Package Manager Integrity Gap: Defending Against Compromised Registries and Malicious Package Injection
A new research effort from Trail of Bits has quantified something many of us in incident response have suspected for years: the package mana...
Anthropic OSS Scanner and AI-Generated Vulnerability Reports: What Defenders Must Do to Protect Their Open Source Supply Chain
AI Is Now Filing Your Bug Reports — Whether You're Ready or Not Anthropic has launched OSS Scanner, a capability that sends unreviewed, mode...
llm-mistral 0.16 and Mistral Large 4 Reasoning Support: A Defender's Guide to Governing LLM Tooling in the Enterprise
Introduction On October 6, 2026, Simon Willison released llm-mistral 0.16, an update to his widely used llm CLI plugin ecosystem that adds s...
Google Halts OSS Bug Bounty Rewards for Go, Angular, and Protobuf After Automated Report Flood — What Defenders Must Do Now
Introduction Effective October 1, 2026, Google stopped accepting product vulnerability reports — and paying rewards — for its open-source so...
WizOS Helm Charts: Hardened, Signed Charts Close the Kubernetes Supply Chain Gap — A Defender's Guide
Wiz has launched WizOS Helm Charts — a catalog of hardened, cryptographically signed, and continuously CVE-scanned Helm charts designed to e...
Placeholder Domains Weaponized Across 1,700 Repos: Supply-Chain Defense, Service Account Hardening, and Citrix Patch Guidance
Introduction This week's threat landscape is a case study in forgotten assumptions becoming live attack surface. The standout story: a domai...
TigerByte Cyber Emerges From Stealth: What $7M in Space Force, Navy, and DARPA Contracts Mean for Defense-in-Depth
When a cybersecurity startup emerges from stealth already holding more than $7 million in contracts with the US Space Force, the US Navy, an...
CVE-2026-85706: GitLab Path Traversal (CVSS 10.0) — Detection, Hunting, and Emergency Remediation Guide
Introduction GitLab has disclosed CVE-2026-85706, a path traversal vulnerability rated CVSS 10.0 — the maximum possible severity score — aff...