Curated security research, vulnerabilities, advisories and tools for practitioners.

Top security intelligence

High-signal security research, vulnerabilities, advisories and tools ranked by relevance. (Page 36)

1051.

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

vulnerability | Critical | 2026-04-10 07:36 | CVE-2026-2628 | yeswehack.com | original ↗ | #cloud | #authentication-bypass | #wordpress

1052.

Smaller Bites, Bigger Meals: What We Learned Running Opus 4.7 in Offensive Workflows

blog | 2026-04-16 14:00 | xbow.com | original ↗ | #ai-security | #benchmark | #offensive-security

1053.

Taking Maestro in Stride: AI Threat Modeling Frameworks

blog | 2026-04-16 00:00 | bishopfox.com | original ↗ | #ai-security | #llm-security | #ai-agents

1054.

BSIM explained once and for all!

research | 2026-04-13 22:00 | blog.quarkslab.com | original ↗ | #reverse-engineering | #ghidra | #tooling

1055.

AI Made Code Cheap. Trust Did Not.

research | 2026-04-13 15:56 | theori.io | original ↗ | #ai-security | #appsec | #software-security

1056.

IaC Inventory: A Unified View Across Code, Deployments, and Cloud

blog | 2026-04-17 15:00 | wiz.io | original ↗ | #ai-security | #cloud | #cloud-security

1057.

‘When we ask for help, it’s instant’: Banco Galicia on expanding vulnerability discovery and speeding up remediation

blog | 2026-04-16 13:18 | yeswehack.com | original ↗ | #bug-bounty | #red-team | #case-study

1058.

Claude Opus 4.7 is now available in GitLab Duo Agent Platform

blog | 2026-04-16 00:00 | about.gitlab.com | original ↗ | #ai-security | #gitlab | #devsecops

1059.

LibreNMS < 26.3.0 Authenticated RCE & XSS

research | 2026-04-13 10:24 | projectblack.io | original ↗ | #rce | #web-security | #xss

1060.

The Vulnerability Apocalypse Is a Remediation Crisis

blog | 2026-04-15 20:23 | hackerone.com | original ↗ | #ai-security | #vulnerability-management | #remediation

1061.

Send the Wallet, Not just the Coins like an envelope

blog | 2026-04-16 09:13 | hackenproof.com | original ↗ | #web3 | #key-derivation | #crypto-wallet

1062.

Automate NIST SSDF Compliance: A Technical Guide to Policy as Code in JFrog AppTrust

blog | 2026-04-16 13:15 | jfrog.com | original ↗ | #devsecops | #compliance | #jfrog

1063.

Securing AI Applications From Inception to Deployment

blog | 2026-04-16 13:00 | wiz.io | original ↗ | #ai-security | #remediation | #sast

1064.

Telegram Bot API Abuse

blog | 2026-04-16 00:00 | netlas.io | original ↗ | #malware | #threat-hunting | #phishing

1065.

From Report to Remediation: A Real-World XSS Validation Workflow

blog | 2026-04-14 20:07 | hackerone.com | original ↗ | #remediation | #continuous-testing | #automation

1066.

Anthropic’s Claude Mythos Preview: The AI Cybersecurity Inflection Point

blog | 2026-04-14 00:00 | bishopfox.com | original ↗ | #ai-security | #vulnerability-discovery | #ciso

1067.

How to Harden GitHub Actions: An Updated Guide

blog | 2026-04-15 13:19 | wiz.io | original ↗ | #supply-chain | #devsecops | #github-actions

1068.

You Can’t Trust What You Can’t Trace

blog | 2026-04-15 13:14 | jfrog.com | original ↗ | #ai-security | #ai-governance | #jfrog

1069.

The ultimate Bug Bounty guide to OS command injection vulnerabilities

blog | 2026-04-14 12:28 | yeswehack.com | original ↗ | #bug-bounty | #rce | #web-security

1070.

5 tips to succeed with offensive security in the financial services industry

blog | 2026-04-14 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #pentesting | #compliance

1071.

Exposing Russian Malicious Infrastructure: 1,250+ C2 Servers Mapped Across 165 Providers

blog | 2026-04-15 00:00 | hunt.io | original ↗ | #threat-intelligence | #malware | #threat-hunting

1072.

Citrix Breakout When Restricted Means Nothing

blog | 2026-04-14 14:10 | labs.cognisys.group | original ↗ | #windows | #red-team | #citrix

1073.

Securing the AI Edge: Wiz and Cloudflare Integrate for End-to-End AI Protection

blog | 2026-04-14 13:00 | wiz.io | original ↗ | #ai-security | #cloud | #cloudflare

1074.

Introducing Shadow Data Detection: Reduce Cost and Risk Across Your Cloud

blog | 2026-04-14 12:00 | wiz.io | original ↗ | #cloud | #cloud-security | #data-security

1075.

Primer on GitHub Actions Security - Threat Model, Attacks and Defenses (Part 1/2)

blog | 2026-04-14 11:33 | wiz.io | original ↗ | #ai-security | #supply-chain | #github-actions

1076.

The State of Digital Exposure to Cybercrime for European Telecoms

blog | 2026-04-14 00:00 | ethiack.com | original ↗ | #threat-intelligence | #attack-surface | #exposure-management

1077.

How Xint’s Predictable Pricing Solves the Token Burn Problem for AI in AppSec

research | 2026-04-09 21:32 | theori.io | original ↗ | #ai-security | #pricing | #code-analysis

1078.

Bug bounty isn’t dead, but the old model is breaking

blog | 2026-04-13 00:00 | aikido.dev | original ↗ | #ai-security | #bug-bounty | #open-source

1079.

Mythos didn't change the rules, it showed us they already changed

blog | 2026-04-13 00:00 | ethiack.com | original ↗ | #ai-security | #attack-surface | #offensive-security

1080.

Delivered by Trust: What the Axios Supply Chain Attack Means for Security Leaders

incident | 2026-04-06 00:00 | bishopfox.com | original ↗ | #supply-chain | #incident-response | #npm

← Previous More →