Breaking News: ClickFix Phishing Pages Discovered in 24 npm Packages

OX Security is recognized as a Leader in the 2026 Gartner® Magic Quadrant™

OX Security Named a Sample Vendor Across 3 Categories in the Gartner® Hype Cycle™ for Application Security

The OX Blog

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic's MCP

April 15, 2026

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic's MCP

Moshe Siman Tov Bustan, Mustafa Naamnih, Nir Zadok, Roni Bar

August 25, 2026

ClickFix Phishing Pages Discovered in 24 npm Packages

Moshe Siman Tov Bustan, Vitalii Chepurko

sbom vs pbom

August 19, 2026

PBOM vs SBOM: What’s the Difference, and Why Does It Matter in 2026?

Jake O'Donnell

August 18, 2026

Critical and High-Severity GraphQL CVEs in GitLab: Code Injection and CSRF via One Directive

Nir Zadok, Moshe Siman Tov Bustan

Critical vm2 vulnerability

August 18, 2026

Critical vm2 Vulnerability Allows Host DNS Hijacking and Information Disclosure

Nir Zadok, Moshe Siman Tov Bustan

Shai Hulud Outbreak Debrief The Worm Evolves into MCP (1)

August 9, 2026

Shai-Hulud Outbreak Debrief: The Worm Evolves into MCP

Moshe Siman Tov Bustan

Autonomous AI

August 6, 2026

Did We Just Witness Step One of the Autonomous AI Arms Race?

Neatsun Ziv

CVE 2026 44613 Apache Zeppelin

August 6, 2026

CVE-2026-44613: Turning a CSRF into Silent Unauthorized Actions

Nir Zadok, Moshe Siman Tov Bustan

Keyv and Cacheable A major new supply chain attack hits npm

August 4, 2026

A Massive Shai-Hulud Campaign Hits npm: +440 Packages Compromised, Over 2B Monthly Downloads

Moshe Siman Tov Bustan

prompt-to-runtime security

July 28, 2026

In the Mythos Age, 90% of Your Security Budget Protects the Wrong Layer

Neatsun Ziv

Subscribe to Our Newsletter

Stay updated with the latest SaaS insights, tips, and news delivered straight to your inbox.