FEED
By Default, Insecure: Apache Airflow Disables SSH Host Key Verification
“Shai-Hulud: Here We Go Again” – “tensorlake” npm Package Hit With Malware
SSRF in Harbor Webhooks: Any User Can Reach the Server’s Cloud Credentials
CVE-2026-93355: Account Takeover in LiteLLM
PhantomSub: Malicious npm Campaign Secretly Adds Users to WhatsApp Spam Channels
Breaking: OX Research is tracking active threats across the AI software supply chain
Breaking: OX Research is tracking active threats across the AI software supply chain
Breaking: OX Research is tracking active threats across the AI software supply chain
Breaking: OX Research is tracking active threats across the AI software supply chain
Research News
Cybersecurity news, research, and threat intelligence from OX Security
Breaking news
By Default, Insecure: Apache Airflow Disables SSH Host Key Verification
Vulnerability Details CVE-2026-94134 – SSH hook default, both providers CVE-2026-94135 – Async SFTP path Severity: High – CVSS 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) CWE: CWE-322 (Key Exchange without Entity Authentication) Affected packages: apache-airflow-providers-ssh and apache-airflow-providers-sftp – both through version 6.0.1 Fixed in: apache-airflow-providers-ssh…
Read Full Report
ALL RESEARCH
SSRF in Harbor Webhooks: Any User Can Reach the Server’s Cloud Credentials
Read
CVE-2026-93355: Account Takeover in LiteLLM
ReadNo research matches your filters.
