Application Security

May 14, 2026

node-ipc npm Package Breached, Spreading Infostealer Malware

• 

Moshe Siman Tov Bustan

May 12, 2026

Shai-Hulud Goes Open Source: Malware Creators Leak Their Own Code to GitHub

• 

Moshe Siman Tov Bustan

May 7, 2026

AI Application Security in 2026: Real Risks and Controls

• 

OX Security

April 30, 2026

8.3M Downloads Compromised: Lightning & Intercom-Client Infected in Latest Shai-Hulud Attack

• 
• 

Moshe Siman Tov Bustan, Nir Zadok

April 29, 2026

Shai-Hulud Hits SAP: Stolen Credentials Found in 1,200 GitHub Repos

• 
• 

Moshe Siman Tov Bustan, Nir Zadok

April 25, 2026

AI Security for AppSec: Securing AI-Generated Code at Scale

• 

OX Security

April 24, 2026

Securing the AI Supply Chain: How OX VibeSec Defends Against Anthropic MCP Vulnerability

• 
• 
• 

Mustafa Naamnih, Bar Azouri, Matan Feller

April 23, 2026

Shai-Hulud: The Third Coming — Bitwarden CLI Backdoored in Latest Supply Chain Campaign

• 
• 

Moshe Siman Tov Bustan, Nir Zadok

April 20, 2026

Supply Chain Attack Hits Vercel: User Data is Being Sold on BreachForums For $2M

• 
• 

Moshe Siman Tov Bustan, Nir Zadok

April 15, 2026

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic’s MCP

• 
• 
• 
• 

Moshe Siman Tov Bustan, Mustafa Naamnih, Nir Zadok, Roni Bar

March 30, 2026

TeamPCP’s Telnyx Windows Malware: Technical Analysis

• 
• 

Moshe Siman Tov Bustan, Nir Zadok

March 24, 2026

LiteLLM PyPI Malware Steals Cloud, Crypto, Slack, and Discord Keys

• 
• 

Moshe Siman Tov Bustan, Aviad Levy