Breaking News: Megalodon - CI/CD Malware Spreading Across GitHub Repositories

The OX Blog

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic's MCP

April 15, 2026

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic's MCP

Moshe Siman Tov Bustan, Mustafa Naamnih, Nir Zadok, Roni Bar

OX + cursor 1

March 3, 2026

OX Security is Now Available in the Cursor MCP Directory

Chris Lindsey

FreeScout

February 25, 2026

FreeScout RCE Enables Full System Takeover

Moshe Siman Tov Bustan, Nir Zadok

Claude Code Security

February 23, 2026

The Claude Code Security Promise: Why This Can’t Be Our Safety Net

OX Security

NPM

February 20, 2026

Newly discovered NPM worm is hijacking CI workflows and targeting AI-based packages

Moshe Siman Tov Bustan

Massive Security Blind Spot in IDE Extensions

February 17, 2026

Four Vulnerabilities Expose a Massive Security Blind Spot in IDE Extensions

Moshe Siman Tov Bustan, Nir Zadok

Code Runner

February 17, 2026

Code Runner VS Code Extension Enables Remote Code Execution via Settings Manipulation

Moshe Siman Tov Bustan, Nir Zadok

Live Server

February 17, 2026

Live Server VS Code Extension Allows Remote Exfiltration of Local Files

Moshe Siman Tov Bustan, Nir Zadok

Markdown Preview Enhanced

February 17, 2026

Markdown Preview Enhanced Executes JavaScript When Opening Malicious Files

Moshe Siman Tov Bustan, Nir Zadok

OX + Torq BLOG 1

February 12, 2026

Bridging Application Security and Security Operations with Torq and OX Security

Enosh Alter, Jasmin Siloni

Subscribe to Our Newsletter

Stay updated with the latest SaaS insights, tips, and news delivered straight to your inbox.