Breaking News: OpenSSH Password Authentication Bypass on Alpine Linux (*sshole) – CVE-2026-123158

Learn How MCP Is Bypassing a Decade of Cloud Security Best Practices

Watch James Berthoty and Chris Lindsey discuss on how to adapt your security tools and take action.

The OX Blog

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic's MCP

April 15, 2026

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic's MCP

Moshe Siman Tov Bustan, Mustafa Naamnih, Nir Zadok, Roni Bar

November 5, 2026

OpenSSH Password Authentication Bypass on Alpine Linux (*sshole) – CVE-2026-123158

Moshe Siman Tov Bustan

PolinRider Returns

November 4, 2026

PolinRider Returns: Hijacked npm Packages Use Ethereum Blockchain to Conceal Malware Infrastructure

Moshe Siman Tov Bustan

October 30, 2026

Compromised Claude Code extensions (versions 2.1.312 & 2.1.313) in Cursor try to install a backdoor

Nir Zadok

Introducing Agent Activity See What Your AI Agents Are Actually Doing

October 28, 2026

Introducing Agent Activity: See What Your AI Agents Are Actually Doing

Sagiv Peer, Ran Mor

Security Tool Sprawl How to Consolidate SAST, SCA, and CNAPP

October 26, 2026

Security Tool Sprawl: How to Consolidate SAST, SCA, and CNAPP

OX Security

PHP2Shell, Day 5 93.6% of Measurable Instances Still Unpatched (1)

October 26, 2026

PHP2Shell, Day 5: The Panic Hasn’t Turned Into Patching

Moshe Siman Tov Bustan

24HinPHP

October 22, 2026

PHP2Shell: 24 hours in, 99.3% of Measurable PHP Instances Are Still Unpatched

Moshe Siman Tov Bustan

Nodejs Brotli Flaw

October 22, 2026

Node.js Brotli Decoder Out-of-Bounds Write (RCE) – CVE-2026-111497

Nir Zadok

Three Critical Pillow CVEs

October 22, 2026

Three Critical Pillow CVEs: RCE and Heap Overflows in Python’s Imaging Library – CVE-2026-112900 CVE-2026-112393 CVE-2026-112403

Nir Zadok

Subscribe to Our Newsletter

Stay updated with the latest SaaS insights, tips, and news delivered straight to your inbox.