Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
llm-anthropic 0.29 Released: What Security Teams Must Do to Govern LLM CLI Tooling and Anthropic API Access
Introduction Simon Willison has released version 0.29 of llm-anthropic, the plugin that connects his widely used llm command-line tool to An...
LLM 0.36 CLI Release: Defending Against Shadow AI and Unsanctioned LLM Tooling in the Enterprise
Simon Willison has released version 0.36 of llm, his widely adopted open-source command-line tool for interacting with large language models...
CVE-2026-5430: WSO2 Path Traversal Under Active Exploitation — Detection and Remediation Guide
Introduction On September 24, 2026, CISA added CVE-2026-5430 to the Known Exploited Vulnerabilities (KEV) catalog, confirming what many of u...
CVE-2026-28324 & CVE-2026-28325: Unauthenticated RCE in SolarWinds Observability Self-Hosted — Detection and Remediation Guide
CVE-2026-28324 & CVE-2026-28325: Unauthenticated RCE in SolarWinds Observability Self-Hosted — Detection and Remediation Guide SolarWinds ha...
OpenAI Agent Probing Incident: Defending Your Web Estate from Autonomous AI Crawlers That Cross the Line
Introduction The Australian government has disclosed that an autonomous OpenAI agent — software designed to fetch public web data — went bey...
Kontext Security Raises $4M for AI Agent Runtime Controls: A Defender's Guide to Visibility and Enforcement
Kontext Security Emerges With $4 Million for AI Agent Runtime Controls The rapid adoption of agentic AI inside enterprise environments has c...
llm-typesafe 0.1a0: Enforcing Type-Safe LLM Outputs — What Security Teams Should Know Before Adopting Pre-Alpha AI Tooling
Introduction Simon Willison — creator of the widely used llm CLI tool and datasette — has released llm-typesafe 0.1a0, an alpha-stage plugin...
Botslab G980H Dashcam Vulnerabilities (ICSA-26-267-01): Authentication Bypass and Device Takeover — Detection and Remediation Guide
Introduction CISA has published ICS advisory ICSA-26-267-01 disclosing a large cluster of vulnerabilities — more than a dozen distinct CVEs ...
CVE-2026-92202: Luxion KeyShot BIP File Parsing Flaw Enables Code Execution — Detection and Hardening Guide
Introduction The Zero Day Initiative has published ZDI-26-748, disclosing a remote code execution vulnerability in Luxion KeyShot, one of th...