A new open-source tool is reshaping how developers approach application security. The OWASP CVE Lite CLI … OWASP CVE Lite CLI Brings Developer-First Vulnerability Scanning to the TerminalRead more
DevSecOps
Warning: Ivanti EPMM Zero-Day Actively Exploited in the Wild
A critical zero-day vulnerability in Ivanti Endpoint Manager Mobile (EPMM) is now being actively exploited, putting … Warning: Ivanti EPMM Zero-Day Actively Exploited in the WildRead more
vm2 Vulnerabilities Enable Full System Takeover
A critical breakdown in one of the most trusted Node.js sandbox libraries is putting countless applications … vm2 Vulnerabilities Enable Full System TakeoverRead more
pnpm 11 Turns On Minimum Release Age by Default to Reduce npm Supply Chain Risk
The npm ecosystem has become one of the most targeted environments for supply chain attacks, where … pnpm 11 Turns On Minimum Release Age by Default to Reduce npm Supply Chain RiskRead more
AI-Powered Code Defense: Anthropic Launches “Claude Security” Public Beta
Anthropic has officially moved Claude Security into public beta for its Claude Enterprise customers, marking a … AI-Powered Code Defense: Anthropic Launches “Claude Security” Public BetaRead more
Critical Update: New Claude “Super-Analyst” Tool Triage 27 Security Sources in Seconds
Every security analyst knows the “tab fatigue” of vulnerability management. Investigating a single CVE usually requires … Critical Update: New Claude “Super-Analyst” Tool Triage 27 Security Sources in SecondsRead more
How GitHub’s Critical RCE Exposed Private Code
In modern software development, git push is as common as a heartbeat. But what happens when … How GitHub’s Critical RCE Exposed Private CodeRead more
Design as a Weapon: macOS ‘textutil’ and KeePassXC Exposed as Automation Attack Primitives
In modern DevOps and CI/CD, there is a dangerous assumption: if a tool is local, mature, … Design as a Weapon: macOS ‘textutil’ and KeePassXC Exposed as Automation Attack PrimitivesRead more
Gemini CLI Vulnerability Enables CI/CD Code Execution
As AI tools become deeply integrated into software development workflows, they are also becoming part of … Gemini CLI Vulnerability Enables CI/CD Code ExecutionRead more
GlassWorm’s Stealth Move: 73 New Open VSX Sleeper Extensions Revealed
Software developers are the high-value targets of 2026. In a sophisticated escalation of supply chain warfare, … GlassWorm’s Stealth Move: 73 New Open VSX Sleeper Extensions RevealedRead more