Security Insights

Latest threat analysis, industry news, and security best practices from our expert team.

Has:
Topics:composereditorialexploitcvezero-daypatch-tuesdayvulnerability-disclosuredarkwebransomwarecriticalmdrthreat-huntingotx-pulsemanaged-socsecurity-monitoring
Subscribe via RSS
composer3 articles
Sep 6, 2026

CVE-2026-59944: Composer 2.10.3 Patches Symlink Path Traversal and Perforce Command Injection — Defend Your PHP Supply Chain

Introduction On August 27, 2026, the Composer project released version 2.10.3, and Fedora has now pushed that build to Fedora 44 users as up...

cvezero-daypatch-tuesday
Vulnerability ManagementRead Now
May 26, 2026

Git Tag Poisoning Attack: Laravel-Lang Composer Packages Compromise

Introduction A sophisticated supply-chain attack has targeted the PHP ecosystem, specifically impacting applications utilizing the popular L...

incident-responseransomwarebreach-response
Incident ResponseRead Now
May 23, 2026

Laravel Lang Supply Chain Attack: Detecting Malicious Composer Packages and Credential Theft

Introduction A critical supply chain attack has unfolded within the Laravel ecosystem, specifically targeting the widely used laravel-lang l...

managed-socmdrsecurity-monitoring
SOC & MDRRead Now