Aikido Security's Blog
Discover today's best security practices and the latest trends that your software company should be aware of. Stay ahead of the game and read Aikido's industry-leading blog today.
- Posts
- 519 from 19 Jan 2023 to 30 Oct 2026
- Posting
- about daily (169 in the last year)
- Kind
- company blog
- Feed
- https://www.aikido.dev/blog/rss.xml
2026 163
- AI agent security in Kubernetes: Why prompt injection isn't the right term
- Binance hack: how a compromised developer laptop can lead to a $6.3 billion breach
- What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained
- The day after tomorrow: After PHP2Shell, it gets worse, then defenders win
- Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
- Aikido launches external network pentesting
- How to patch PHP2Shell with free Aikido Images
- Adding Aikido AI pentesting to your existing security stack
- Node2Shell evolves to HTTP2Shell. Brotli flaw (CVE-2026-111497) blast radius affects many libraries & apps using HTTP.
- Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
- eMudhra CA compromise: eight private keys, and one of them is 4
- Software supply chain security best practices for 2026
- LiteLLM compromised again: infostealer and RAT found in version 1.107.0
- PHP2Shell: Critical PHP vulnerabilities, affected versions and fixes
- The 10 best email security software platforms in 2026
- The 9 best phishing simulation tools in 2026
- The 9 best KnowBe4 alternatives in 2026
- The 8 best security awareness training platforms in 2026
- The 8 best Mimecast alternatives in 2026
- Aikido launches Noon: workforce security for every employee
- Drata and Aikido: audit-ready pentesting, built into your compliance workflow
- Yearly pentests can’t keep up. Test more on the same budget
- Your CVE is reachable. But is it exploitable?
- Top Escape.tech alternatives for offensive security in 2026
- Top Horizon3 alternatives in 2026
- Aikido Security is now CREST accredited
- What is vulnerability remediation?
- Top 6 developer security tools for enterprise teams in 2026
- Top FedRAMP-compliant security tools in 2026
- tensorlake NPM package compromised with Shai Hulud worm
- How Aikido helps you meet SOC 2 Type 1 and Type 2
- Aikido Security achieves FedRAMP Moderate authorization
- Top vulnerability remediation tools in 2026
- Top threat intelligence feeds in 2026
- Top endpoint security tools for developers in 2026
- Aikido funds Node.js security
- Top CodeQL alternatives in 2026
- Top Greptile alternatives in 2026
- Aikido and Deel: set up once, secure every hire
- Novel supplychain.local Go worm appears
- Send GitLab an email, push to main
- Cyber Resilience Act is here! Myth busting and first impressions
- Graphalgo campaign spreads to Terraform providers and Go Modules
- Introducing Aikido Altar: the model that makes sovereign security intelligence possible
- Top on-prem AI pentesting tools in 2026
- Aikido achieves AWS Security Competency for Application Security
- Top Qodo Alternatives for AI-Powered Code Assistance
- Top Aqua Security alternatives for cloud-native security in 2026
- Dependabot vs Renovate
- The CVE spike across major software companies is a remediation problem
- Jason Haddix: Stop fearing AI pentesting
- Compromised Flutter package on pub.dev contains XCSSET malware
- Shai-Hulud Rises From the Dead after 111 days
- StyleSmuggler fix: patch the Magento and Adobe Commerce RCE
- Stop breaking SLAs: how to patch vulnerabilities before the fix even ships
- Top Trivy alternatives for container and cloud scanning in 2026
- MECCHA CHAMELEON can't hide from the RCE
- Top DSPM tools in 2026
- The dark figure of supply chain detection
- Popular code generator for TanStack Query hit by supply chain worm
- Securing Docker images
- Good riddance, TeamPCP. Now for the hard part.
- Top Minimus alternatives in 2026
- Software supply chain security requires decisions rather than defaults
- Aikido Security achieves ISO 42001:2023 certification for AI governance
- Aikido launches agentic pentesting for Android apps
- Could OpenClaw have actually hacked that Australian gym? We decided to test it.
- How Aikido finds more vulnerabilities than Mythos at half the cost
- Shai-Hulud was the best thing to happen to supply chain security
- Top image hardening tools in 2026
- Best enterprise AI pentesting tools for application security in 2026
- What is CVE remediation in 2026?
- We burned 11.7bn tokens to find the best cyber AI model
- Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
- AI pentesting evaluation checklist: What to look for in an AI pentesting vendor
- Yet another RCE in Gogs, but it's fixed this time!
- Top enterprise SCA tools in 2026
- Top enterprise DAST tools in 2026
- Top unified security tools in 2026
- From Hugging Face to Fable: this summer shows AI control matters more than trust
- Finding vulnerabilities at every stage: what to run, and when
- What is AI harness engineering?
- Who was behind the attack? Possibly nobody
- The Aikido Machine: on-prem AI pentesting that never leaves your network
- Keyv and friends compromised in active Shai-Hulud supply chain attack
- Top enterprise SAST tools 2026
- Anthropic's Fever Dream: Claude's package that stole real keys
- Top Astra Security alternatives for automated pentesting in 2026
- Four incident-response decisions from the Hugging Face breach
- Top SAST tools 2026
- Top LLM security tools to protect AI applications
- Top Acunetix alternatives for automated vulnerability scanning
- Better generic secrets detection starts with finding non-secrets
- Finding eight high-severity vulnerabilities in NodeBB in six hours
- SQL injection isn't dead
- The upgrade trap: when upgrading is the wrong answer to a CVE
- Tyro's CISO: Being the "Einstein of cybersecurity" isn't enough if developers don't trust you
- What developers need to know about DSPM and data exposure in code
- SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts
- Unauthenticated RCE in WordPress core (wp2shell), via SQL injection
- Top Pentera alternatives for automated penetration testing
- Benchmarking 13 AI models on rediscovering known CVEs
- The practical checklist for defending against supply chain attacks
- AsyncAPI npm packages backdoored via GitHub Actions
- How Aikido Intel detects malware and vulnerabilities first
- What is a dependency firewall?
- How to maintain code quality standards with AI code and vibe coding
- AI Pentesting Buyer's Guide | Evaluate AI Pentesting Vendors
- Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry
- Top Burp Suite Alternatives for Web App Security Testing | Aikido Security
- Authentication Bypass in the default configuration phpBB
- GitHub ships break glass credential revocation
- Aikido acquires Root to secure the supply chain
- Packagist is now protected by Aikido Intel and other updates to the PHP registry
- Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets
- Aikido Partners with Drydock to Bring Pre-Publish Malware Review to npm and PyPI
- Aikido and OWASP: 200 free credits for members
- Full Fathom Five: What Anthropic’s Mythos-class public release means
- Aikido Supports Docker Hardened Images with VEX
- Code Is Written Everywhere and the Device Is the Only Constant | Aikido Security
- Compromised Rust crate onering performs code exfiltration
- Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System
- Why EDR and proxy won’t save you from supply chain malware
- Aikido vs XBOW: 58% more vulnerabilities found in independent benchmark
- Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens
- Why Developer Machines Are the #1 Target for Supply Chain Attacks | Aikido
- 5 Gitleaks Alternatives for Better Secrets Scanning in 2026
- Google API keys keep working after you delete them long enough to be exploited
- GitHub Breached via VS Code Extension | Developer Supply Chain Attack 2026
- Microsoft's durabletask package on PyPi Compromised. Mini Shai Hulud attacks again... again!
- Security Checklist for GitHub Actions
- Why browser extensions are a major security risk and what you can do about it
- Aikido x Kiro | Catching in review doesn't scale anymore
- Four published versions of a fake "tanstack" package uploaded in 27 minutes that want to steal your .env files
- It's time to treat browser extensions like supply chain attack vectors | Lessons learned from the Vercel breach
- Top Black Hat USA 2026 Parties, Side-Events & Security Meetups
- Aikido Device Protection: Security for Developer Devices | Aikido
- Axios CVE-2026-40175: a critical bug that’s… not exploitable
- Bug bounty isn’t dead, but the old model is breaking
- Aikido Attack Finds 0-Days in Hoppscotch
- GlassWorm goes native: New Zig dropper infects every IDE on your machine
- Dirty Frag (CVE-2026-43284): the Linux kernel bug that turns read access into rootDirty Frag (CVE-2026-43284): Linux Root Escalation | AikidoDirty Frag turns low-privileged Linux access into root, and can escape containers. The affected CVEs, how to check if you're exposed, and how to fix it.Dirty F
- Anthropic Mythos Cybersecurity Risks: What 1,000 AI Pentests Actually Show
- axios compromised on npm: maintainer account hijacked, RAT deployed
- Aikido Recognized by Frost & Sullivan with the 2026 Customer Value Leadership Award in ASPM
- fast-draft Open VSX Extension Compromised by BlokTrooper (RAT & Infostealer)
- GlassWorm RAT Delivered via Malicious Chrome Extension (Keylogger, Cookie Theft)
- Glassworm Strikes Popular React Native Phone Number Packages in a New Supply Chain Attack
- Glassworm Returns: Invisible Unicode Malware Found in 150+ GitHub Repositories
- Betterleaks: The Gitleaks Successor Built for Faster Secrets Scanning
- How does AI pentesting work with compliance?
- Continuous pentesting: how it works and what it requires
- How Aikido Secures AI Pentesting Agents and Prevents Scope Drift
- Astro SSRF Vulnerability: Host Header Injection in SSR Error Pages (CVE-2026-25545)
- Upgrade Impact Analysis: When Breaking Changes Actually Matter | Aikido
- Claude Opus 4.6 Found 500 Vulnerabilities: What It Means for Software Security
- When Is AI Pentesting Safe? Minimum Safety Requirements for Security Testing
- Fake Clawdbot VS Code Extension Installs ScreenConnect RAT
- Agent Skills Are Spreading Hallucinated npx Commands
- CISO Vibe Coding Checklist: Securing AI-Built Apps
- Aikido Security Raises $60M at a $1B valuation
- Seven CVEs in Coolify Identified Through AI Pentesting | Aikido
- DORA Technical Requirements for Engineering & Security Teams
2025 69
- Aikido AI Pentesting: Live Demo Recap & FAQ
- DAST vs Pentesting vs AI Pentesting: Key Differences Explained
- Top 7 Cloud Security Vulnerabilities and How to Prevent Them
- Shai Hulud Attacks Continue Through GitHub Actions Security Gaps
- CORS Security: Beyond Basic Configuration
- AI as a Power Tool: Secure Coding with Windsurf and Devin
- Top 7 Black Duck Alternatives in 2026
- AutoTriage and the Swiss Cheese Model of Security Noise Reduction | Aikido Security
- Aikido + Secureframe Integration: Keep Compliance Fresh
- Top 8 Checkmarx Alternatives for SAST and Application Security
- Allseek and Haicker are joining Aikido: Building Autonomous AI Pentesting
- Best 6 Veracode Alternatives for App & Code Security
- Aikido Threat Modeling for DevSecOps | Unified AppSec & Cloud Security
- Bugs in Shai-Hulud: Debugging the Desert
- Why European Companies Choose Aikido Security | Trusted EU Cybersecurity Partner
- Cyber Resilience Act Compliance (CRA) with Aikido Security
- Top 5 GitHub Advanced Security Alternatives for DevSecOps Teams in 2026
- Code Security Vulnerabilities | Common Risks
- duckdb npm packages compromised
- How Aikido's AutoTriage is integrated in your IDE
- The 6 Best Code Quality Tools for 2026
- Aikido for Students and Educators
- Free hands-on security labs for your students
- Preventing Software Supply Chain Malware (Guide)
- The Best 6 Code Analysis Tools of 2026
- AI Penetration Testing Tools | Autonomous, Agentic and Continuous Security Testing
- ASPM Tools: Features & Evaluation Guide
- The Top 6 Best AI Tools for Coding in 2025
- Cloud Security Tools: Features & How to Choose
- Aikido x Root.io: Harden Your Containers Without the Headaches
- Best Pentesting Tools for Modern Teams (2026)
- Most common security problems (Top 10) and how to protect yourself
- DAST Tools: Key Features & Buyer’s Guide
- Checkmarx Vs Black duck Comparison | Aikido Security
- Free IDE Security Scanning with Aikido for VSCode, Cursor & Windsruf
- Top 8 CodeRabbit Alternatives for AI Code Review in 2026
- The Best Code Review Tools of 2026
- Top DevSecOps Tools to Replace GitLab Ultimate’s Security Features
- Looking for an Endor Labs Alternative? These Tools Do It Better
- Best AI Pentesting Tools in 2026: Compared & Reviewed | Aikido
- RATatouille: A Malicious Recipe Hidden in rand-user-agent (Supply Chain Compromise)
- Container Privilege Escalation Vulnerabilities Explained
- Learn how to run a cloud security assessment to evaluate risks, detect misconfigurations, and improve your security posture.
- Top Cycode Alternatives for Software Supply Chain Security
- Docker & Kubernetes Container Security Explained
- Cloud Container Security: Protecting Kubernetes & Beyond
- 9 Common Docker Container Security Vulnerabilities & Fixes
- Continuous Pentesting in CI/CD: Automating Security Testing
- Cloud-Native Security Platforms: What They Are & Why They Matter
- Cloud Application Security: Securing SaaS & Cloud Apps
- The Future of API Security: Trends, AI & Automation in 2025
- Container Scanning & Vulnerability Management Explained
- Get the TL;DR: tj-actions/changed-files Supply Chain Attack
- Cloud Security Architecture: Principles & Best Practices
- Code Review Best Practices: Make Good CRs Better
- Docker Security
- Best API Security Tools in 2025
- Using AI for Code Review: What It Can (and Can’t) Do
- The Future of Cloud Security: AI, Automation & Beyond
- Container Security Best Practices & Checklist
- API Security Best Practices & Standards Every Team Should Follow
- API Security: The Complete 2025 Guide
- Cloud Security for DevOps: CI/CD & IaC Security
- Best Apiiro Alternatives for ASPM and AppSec Visibility
- Compliance in the Cloud: Key Frameworks You Can’t Ignore
- Common Code Review Mistakes and How to Avoid Them
- Container Security: The Complete Guide
- API Security Testing: Tools, Checklists & Assessments
- Generative AI for Pentesting: What It Can (and Can’t) Do
2024 16
- 3 Key Steps to Strengthen Compliance and Risk Management
- Top 9 Best AI Code Review Tools in 2026
- Cloud Security Best Practices Every Organization Should Follow
- Cloud Security: The Complete 2025 Guide
- Aikido joins the AWS Partner Network
- Command injection in 2024 report: How vulnerable we are
- Balancing Security: When to Leverage Open-Source Tools vs. Commercial Tools
- AI Code Review & Automated Code Review: Complete Guide
- Continuous Code Quality in CI/CD Pipelines
- Best SBOM Tools for Developers: Our 2026 Picks
- 5 Snyk Alternatives and Why They Are Better
- 110,000 sites affected by the Polyfill supply chain attack
- Cybersecurity Essentials for LegalTech Companies
- Automate vulnerability management for compliance
- Top 10 app security problems and how to protect yourself
- Best RASP Tools for Devs
2023 9
- Aikido to strengthen Cronos Group security posture
- Aikido Security Raises €5m for SaaS Security Solution
- Aikido Security achieves ISO 27001:2022 compliance
- Startup security: StoryChief uses Aikido to sleep better
- Best Tools for End-of-Life Detection
- 15 Top Cloud and Code Security Challenges Revealed by CTOs
- How to build a secure admin panel for your SaaS app
- Automate Technical Vulnerability Management [SOC 2]
- Aikido Security Raises €2M Pre-Seed for Security Platform
Undated 262
- Gpt proxy backdoor npm pypi chinese llm relay
- Graphite alternatives
- Hacker superpower ai
- Hide and fail obfuscated malware and npm shenanigan
- How a startups cloud got taken over by a simple form that sends an email
- How aikido and deloitte are bringing developer first security to enterprise
- How does a saas startup cto balance development speed and security
- How to generate an sbom for an audit
- How to get your board to care about security
- Iac security scanning terraform kubernetes misconfigurations
- Idor vulnerability explained
- Improve code quality
- International ai safety report aikido security analysis
- Introducing aikido ai cloud search
- Introducing aikido expansion packs
- Introducing aikido infinite
- Introducing aikido package health
- Introducing code audit find complex vulnerabilities hidden in your codebase
- Introducing safe chain
- Invisible unicode malware strikes openvsx again
- Iso 27001 certification top tips
- Iso 270012022 preparation
- Javascript security vulnerabilities
- Jit io alternatives
- Kubernetes security vulnerabilities
- Latio 2026 appsec report aikido platform leader
- Launching aikido for cursor ai
- Launching aikido malware open source threat feed
- Launching opengrep why we forked semgrep
- Loctax eliminates false positives
- Lovable aikido pentesting
- Malicious package web3
- Malicious pypi packages spellcheckpy and spellcheckerpy deliver python rat
- Malware hiding in plain sight spying on north korean hackers
- Manual vs automated code review
- Manual vs automated pentesting
- Maven central jackson typosquatting malware
- Meet intel aikidos open source threat feed powered by llms
- Mendio alternatives
- Metamorphosis mythos era
- Mini shai hulud antv npm supply chain attack
- Mini shai hulud has appeared
- Mini shai hulud is back tanstack compromised
- Mongobleed mongodb zlib vulnerability cve 2025 14847
- Multi cloud vs hybrid cloud security
- Multiple jetbrains ide plugins caught stealing ai keys
- Mythos ready checklist
- Mythos vs harness
- N8n rce vulnerability cve 2026 21858
- Neoshadow npm supply chain attack javascript msbuild blockchain
- New aikido security features august 2023
- Nis2 who is affected
- Nist nvd changes 2026
- Npm audit guide
- Npm backdoor lets hackers hijack gambling outcomes
- Npm cooldown account changes announcement
- Npm debug and chalk packages compromised
- Npm malware g wagon python stealer crypto wallets
- Npm supply chain phishing campaigns
- Npm v12 block postinstall
- Npx confusion unclaimed package names
- Open source license risk
- Opengrep sast one year
- Orca security alternatives
- Over 140 popular mastra npm packages hit by supply chain attack
- Owasp top 10 2025 changes for developers
- Owasp top 10 agentic applications
- Ox security alternatives
- Path traversal in 2024 the year unpacked
- Penetration testing vs red teaming whats the difference
- Pentest gpt
- Pentesting speed gap security testing
- Phpbb authentication bypass rce
- Popular nx packages compromised on npm
- Predicting mongodb objectid rocket chat
- Prevent fallout when cicd platform hacked
- Prevent prototype pollution
- Prisma and postgresql vulnerable to nosql injection
- Promptpwnd github actions ai agents
- Pull request best practices
- Python security vulnerabilities
- Pytorch lightning pypi compromise mini shai hulud
- Quantum incident response
- React native aria attack
- React next js dos vulnerability cve 2025 55184
- React nextjs cve 2025 55182 rce
- Reasoning models autotriage
- Red hat npm packages compromised credential stealing worm
- Reducing cybersecurity debt with ai autotriage
- Revolut selects aikido security
- Rolling out developer security in a 5 000 engineer organization
- Roundcube xss cookie tossing
- Rsa 2026 parties
- S1ngularity nx attackers strike again
- Saas cto security checklist
- Saas cto security checklist old
- Safechain minimum package age
- Sast features and capabilities
- Sast in the ide is now free
- Sast vs dast what you need to now
- Sast vs sca
- Sboms everyones generating them no ones using them
- Sca in ide scan and fix dependencies
- Seamless api security with postman x aikido
- Secret detection application security
- Secrets detection what to look for when choosing a tool
- Secure bazel builds
- Secure sdlc
- Securing open source dependencies with aikido and tuxcare
- Security acronyms
- Security ai development windsurf aikido
- Security assessment report closes deals faster
- Security in fintech
- Security masterclass supabase and lovable
- Semgrep alternatives
- Sensing and blocking javascript sql injection attacks aikido firewall
- Shadow ai is a fear response and banning it makes it worse
- Shai hulud 2 0 unknown wonderer supply chain attack
- Shai hulud npm bitwarden cli compromise
- Shai hulud strikes again the golden path
- Shai hulud strikes again hitting zapier ensdomains
- Shipping code they cant read
- Slopsquatting ai package hallucination attacks
- Snyk vs aikido security g2 reviews snyk alternative
- Snyk vs black duck
- Snyk vs checkmarx
- Snyk vs github advanced security
- Snyk vs mend
- Snyk vs semgrep
- Snyk vs sonarqube
- Snyk vs trivy
- Snyk vs veracode
- Snyk vs wiz
- Soc 2 certification tips
- Socket security alternatives
- Software supply chain security vulnerabilities
- Sonarqube alternatives
- Sonarqube vs checkmarx
- Sonarqube vs codacy
- Sonarqube vs coverity
- Sonarqube vs fortify
- Sonarqube vs github advanced security
- Sonarqube vs semgrep
- Sonarqube vs sonarcloud
- Sonarqube vs veracode
- Sprinto partnership
- Static code analysis tools
- Storybooks websockets attack
- Supabase approach to secure by default development
- Supply chain attack on react native aria ecosystem
- Supply chain attack targets laravel lang packages with credential stealer
- Supply chain security sca tools guide
- Sveltespill cache deception sveltekit vercel
- Teampcp deploys worm npm trivy compromise
- Teampcp stage payload canisterworm iran
- Telnyx pypi compromised teampcp canisterworm
- Tenable alternatives
- The cure for security alert fatigue syndrome
- The fork awakens why githubs invisible networks break package security
- The future of pentesting is autonomous
- The malware dating guide understanding the types of malware on npm
- The return of the invisible threat hidden pua unicode hits github repositorties
- The start ups open source guide to application security
- The state of sql injections
- The top 7 threat intelligence tools
- Token efficiency secrets scan
- Top 6 continuous pentesting tools
- Top 7 aspm tools
- Top ai code generators
- Top ai coding assistants
- Top ai coding tools
- Top ai powered sast tools
- Top ai security tools
- Top api scanners
- Top appsec tools
- Top automated penetration testing tools
- Top aws security tools
- Top azure security tools
- Top chainguard alternatives
- Top ci cd security tools
- Top cloud application security tools
- Top cloud native application protection platforms cnapp
- Top cloud security posture management cspm tools
- Top cloud security vulnerabilities
- Top code security tools
- Top code vulnerability scanners
- Top container scanning tools
- Top continuous security monitoring tools
- Top cve scanners
- Top cyber security tools
- Top devsecops tools
- Top docker security tools
- Top dynamic application security testing dast tools
- Top enterprise security tools
- Top gcp security tools
- Top gitguardian alternatives
- Top github security tools
- Top iast tools
- Top infrastructure as a code iac scanners
- Top javascript security tools
- Top koi alternatives
- Top kubernetes security tools
- Top multi cloud security tools
- Top open source dependency scanners
- Top open source license scanners
- Top owasp scanner tools
- Top python security tools
- Top runtime security tools
- Top secret scanning tools
- Top security automation tools
- Top security monitoring tools
- Top soc 2 compliance tools
- Top software composition analysis sca tools
- Top software security testing tools
- Top software supply chain security tools
- Top surface monitoring tools
- Top tools to detect malware in dependencies
- Top vibe coding tools
- Top virtual machine security tools
- Top vs code extensions
- Top vulnerability management tools
- Top web application security tools
- Top web application security vulnerabilities
- Top wiz io alternatives for cloud application security
- Trag is now part of aikido secure code at ai speed
- Trump cybersecurity strategy 2026
- Uk cybersecurity resilience bill compliance
- Ultimate sast guide static application security testing
- Understanding sbom standards a look at cyclonedx spdx and swid
- Veracode vs checkmarx vs fortify
- Vibe check the vibe coders security checklist
- Vibe coding security
- Vismas security boost with aikido a conversation with nikolai brogaard
- Vs code extension github breach
- Waf rasp adr
- We got lucky the supply chain disaster that almost happened
- We just raised our 17 million series a
- Web application security vulnerabilities
- Web rest api security
- Webhook security checklist
- What is a cve
- What is ai sast
- What is code quality
- What is continuous pentesting
- What is cspm cnapp cloud security posture management
- What is owasp top 10
- What is self securing software
- What mdm cant protect
- Why determinism is necessary
- Why trying to secure openclaw is ridiculous
- Why updating container base images is so hard and how to make it easier
- Why we need lockfiles to secure our supply chain
- Why were stoked to partner with laravel
- Without dependency graph blind to vulnerabilities
- Wiz code alternatives
- Xbow alternatives
- Xrp supplychain attack official npm package infected with crypto stealing backdoor
- Xss vulnerabilities in mailcow
- Your client requires nis2 vulnerability patching now what
- Youre invited delivering malware via google calendar invites and puas
- Zen stops idor vulnerabilities
- Zero day nodejs