Topic
Every article tagged Vulnerability Operations, newest first.
Time-to-exploit has collapsed to 20 hours. Read the definitive guide to the CSA, SANS, and OWASP 'AI Vulnerability Storm' report. Learn the 11 Priority Actions and 10 CISO questions.
Keep reading
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.