NHI, AI, IAM & Cyber Security Breaches & Vulnerabilities

GlassWorm and VS Code extensions: are developer controls keeping up?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Malicious MCP servers: are your AI tool controls keeping up?

First post and replies  | Last post by Mr NHI, 3 weeks ago

BrickStorm and 393-day dwell time: are your controls seeing blind spots?

First post and replies  | Last post by Mr NHI, 3 weeks ago

npm supply chain worms: what identity and CI controls are missing?

First post and replies  | Last post by Mr NHI, 3 weeks ago

OAuth token theft and malware chaining: what IAM teams need to know

First post and replies  | Last post by Mr NHI, 3 weeks ago

Typosquatted npm packages and secret theft: what teams need to know

First post and replies  | Last post by Mr NHI, 3 weeks ago

Mobile LLM risks in apps: are your controls keeping up?

First post and replies  | Last post by Mr NHI, 3 weeks ago

LLM-querying malware: what it means for defenders and IAM teams

First post and replies  | Last post by Mr NHI, 3 weeks ago

Akira ransomware updates: what exposure validation teams need to know

First post and replies  | Last post by Mr NHI, 3 weeks ago

FortiWeb auth bypass: what perimeter teams need to recheck now

First post and replies  | Last post by Mr NHI, 3 weeks ago

Software supply chain failures in OWASP Top 10 2025: what changes now?

First post and replies  | Last post by Mr NHI, 3 weeks ago

Secret scanning false negatives in GitHub repos: what teams miss

First post and replies  | Last post by Mr NHI, 3 weeks ago

Spring4Shell and Java RCE risk: what application teams need now

First post and replies  | Last post by Mr NHI, 3 weeks ago

Shai-Hulud in npm: what this worm means for SDLC controls

First post and replies  | Last post by Mr NHI, 3 weeks ago

Shai-Hulud v2: what npm supply chain teams need to fix now

First post and replies  | Last post by Mr NHI, 3 weeks ago

Chrome zero-days and session theft: are your controls keeping up?

First post and replies  | Last post by Mr NHI, 3 weeks ago

WSUS exploitation and ShadowPad: what defenders need to do now

First post and replies  | Last post by Mr NHI, 3 weeks ago

React server components RCE: what appsec teams need to change

First post and replies  | Last post by Mr NHI, 3 weeks ago

React Server Components RCE: what IAM and app teams need to know

First post and replies  | Last post by Mr NHI, 3 weeks ago

React Server Functions RCE: are your downstream frameworks exposed?

First post and replies  | Last post by Mr NHI, 3 weeks ago