Curated security research, vulnerabilities, advisories and tools for practitioners.

Top security intelligence

High-signal security research, vulnerabilities, advisories and tools ranked by relevance. (Page 19)

541.

When “We Already Passed the Pentest” Isn’t Enough

blog | 2026-06-25 00:00 | tenzai.com | original ↗ | #ai-security | #pentesting | #attack-surface

542.

Test In Prod Or Live A Lie

blog | 2026-06-25 00:00 | tenzai.com | original ↗ | #ai-security | #cloud | #appsec

543.

Mythos Preview: What Every CISO Should Do Now

blog | 2026-06-25 00:00 | tenzai.com | original ↗ | #ai-security | #incident-response | #offensive-security

544.

One Endpoint. Zero Credentials. Eight Confirmed Vulnerabilities.

blog | 2026-06-25 00:00 | tenzai.com | original ↗ | #ai-security | #bug-bounty | #information-disclosure

545.

The Phantom Deposit: How Unvested Rewards and Empty Vaults Lead to Yield Theft in ERC4626

research | 2026-06-22 11:52 | hackenproof.com | original ↗ | #bug-bounty | #web3 | #vulnerability-research

546.

How to Chain Vulnerabilities for RCE: From Image Metadata to Complete System Compromise

research | 2026-06-22 11:46 | hackenproof.com | original ↗ | #rce | #pentesting | #cve

547.

Native Xet Protocol Support in JFrog Artifactory: How Enterprise Model Management Actually Works

blog | 2026-06-24 17:38 | jfrog.com | original ↗ | #ai-security | #ai-infrastructure | #deduplication

548.

Why Uniform Governance Fails with Enterprise AI Agents (And How to Fix It)

blog | 2026-06-24 15:58 | jfrog.com | original ↗ | #ai-security | #supply-chain | #devsecops

549.

When the Lights Go Out: What the Foxconn Breach Tells Us About Identity-First Ransomware

incident | 2026-06-19 14:59 | semperis.com | original ↗ | #incident-response | #active-directory | #ransomware

550.

PixelSmash – Critical FFmpeg Vulnerability Turns Media Files into Weapons

research | 2026-06-22 13:15 | CVE-2026-8461 | jfrog.com | original ↗ | #rce | #vulnerabilities | #ffmpeg

551.

How JFrog and NanoClaw are Bringing Software Supply Chain Security to the Age of Autonomous AI

blog | 2026-06-24 13:15 | jfrog.com | original ↗ | #ai-security | #supply-chain | #mcp

552.

How AI Is Rewriting the SecOps Playbook

blog | 2026-06-24 12:18 | wiz.io | original ↗ | #ai-security | #cloud | #cloud-security

553.

Introducing Patch the Planet

blog | 2026-06-22 16:50 | blog.trailofbits.com | original ↗ | #ai-security | #supply-chain | #vulnerability-management

554.

API Vulnerability Scanner: What to Automate and What to Validate Manually

blog | 2026-06-24 07:00 | bugbunny.ai | original ↗ | #appsec | #vulnerability-management | #api-security

555.

Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets

blog | 2026-06-24 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #secrets

556.

Inside Eastern Europe's C2 Sprawl: 3,900+ Servers and 302 Providers Mapped (Updated)

blog | 2026-06-24 00:00 | hunt.io | original ↗ | #threat-intelligence | #malware | #threat-hunting

557.

CVE-2026-45502 — Microsoft Exchange Server EWS InstallApp Server-Side Request Forgery

research | 2026-06-22 00:00 | CVE-2026-45502 | aretiq.ai | original ↗ | #cloud | #ssrf | #exchange-server

558.

When EPA isn't EPA'ing: What Tools Like Certify, Certipy and checkMSSQLStatus.py miss

blog | 2026-06-24 00:00 | abdulmhsblog.com | original ↗ | #ai-security | #active-directory | #penetration-testing

559.

Tenzai Launches AI Application Testing, Chaining Vulnerabilities Across Web, API, and AI Surfaces

blog | 2026-06-24 00:00 | tenzai.com | original ↗ | #ai-security | #web-security | #api-security

560.

Patch the Planet: HackerOne Joins OpenAI's Daybreak Initiative to Secure Critical Open-Source Software

blog | 2026-06-22 13:38 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #open-source

561.

Stop Treating Coding Agent Plugins Like Settings: Introducing Agent Plugins Repositories

blog | 2026-06-23 12:37 | jfrog.com | original ↗ | #ai-security | #supply-chain | #devsecops

562.

AI Threat Readiness Pillar 4: Detect and contain threats in real-time

blog | 2026-06-23 12:33 | wiz.io | original ↗ | #ai-security | #cloud-security | #incident-response

563.

Bringing Identity Context Into the Microsoft Security Workflow: Semperis’ Integration with Sentinel and Copilot

blog | 2026-06-23 12:19 | semperis.com | original ↗ | #cloud | #incident-response | #threat-detection

564.

Experience vs methodology: How hackers make decisions

blog | 2026-06-22 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #pentesting | #red-team

565.

Software Supply Chain Security: Protecting the Path From Commit to Production

blog | 2026-06-23 07:00 | bugbunny.ai | original ↗ | #supply-chain | #devsecops | #ci-cd

566.

Aikido x Drydock | A way for maintainers to catch malware before it ships

blog | 2026-06-23 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #open-source

567.

Cloud-native Security for your Windows environment: Announcing the Wiz Runtime Sensor for Windows

blog | 2026-06-22 13:21 | wiz.io | original ↗ | #cloud | #memory-safety | #threat-detection

568.

Auto reverse-engineering the Hyperliquid risk engine, with some agentic help

blog | 2026-06-22 12:00 | osec.io | original ↗ | #web3 | #agentic-ai | #defi

569.

Cloud Security Posture Management: From Misconfigurations to Attack Paths

blog | 2026-06-22 07:00 | bugbunny.ai | original ↗ | #cloud | #cloud-security | #misconfiguration

570.

Over 140 popular Mastra npm Packages Hit by Supply Chain Attack

incident | 2026-06-17 00:00 | aikido.dev | original ↗ | #ai-security | #supply-chain | #open-source

← Previous More →