Breaking News: SSRF in Harbor Webhooks - Any User Can Reach the Server’s Cloud Credentials

Rethink cloud security in an AI-driven era. Watch our webinar with James Berthoty and Chris Lindsey

Research

A Harbor Webhook Can Steal Your Cloud Credentials

SSRF in Harbor Webhooks: Any User Can Reach the Server’s Cloud Credentials

Oct 6, 2026 5 min read

LiteLLM Account takeover (2)

CVE-2026-93355: Account Takeover in LiteLLM

Sep 29, 2026 8 min read

PhantomSub Malicious campaign secretly adds users to WhatsApp spam channels (3)

PhantomSub: Malicious npm Campaign Secretly Adds Users to WhatsApp Spam Channels

Sep 28, 2026 15 min read

15,465 MCP Servers. 0 Governance.

How MCP Is Bypassing a Decade of Cloud Security Best Practices

Sep 24, 2026 3 min read

Trust issues CVEs CVE 2026 78676 GHSA 2xp9 vwfh vxw4 CVE 2026 75595 CVE 2026 75604

Four Critical CVEs, the Same Trust Issue

Sep 14, 2026 5 min read

Technical Breakdown CVE 2026 78676 GHSA 2xp9 vwfh vxw4 CVE 2026 75595 CVE 2026 75604

Technical Analysis: Netty CVE-2026-75595, Next.js CVE-2026-75604, GHSA-2xp9-vwfh-vxw4 & GitPython CVE-2026-78676

Sep 14, 2026 12 min read

CVE-2026-82533: DeepSeek Harness Vulnerability Lets AI Agents Escape Their Own Sandbox

Sep 8, 2026 6 min read

Shai Hulud Trinitite

Shai-Hulud – Trinitite: Sponsored by Preview 2 Effects

Aug 29, 2026 5 min read

ClickFix Phishing Pages Discovered in 24 npm Packages

Aug 25, 2026 5 min read

Critical and High-Severity GraphQL CVEs in GitLab: Code Injection and CSRF via One Directive

Aug 18, 2026 7 min read

Critical vm2 vulnerability

Critical vm2 Vulnerability Allows Host DNS Hijacking and Information Disclosure

Aug 18, 2026 10 min read

Shai Hulud Outbreak Debrief The Worm Evolves into MCP (1)

Shai-Hulud Outbreak Debrief: The Worm Evolves into MCP

Aug 9, 2026 5 min read