Security research, product updates, and field notes
Practical guidance for security leaders and practitioners building with agentic AI.
Apache ActiveMQ code injection risk belongs in every middleware exposure review
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.
FortiClient EMS access-control failure shows endpoint management is privileged infrastructure
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.
Citrix NetScaler exploitation risk remains a perimeter problem with internal consequences
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.
Trivy malicious-code listing is a supply-chain alarm for the tools defenders trust
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.
Langflow code injection puts AI workflow builders in the security review queue
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.
Cisco firewall management RCE risk is a control-plane incident until proven otherwise
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.
n8n workflow code execution risk is the automation-platform warning shot
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.
VMware Aria command injection shows observability platforms are part of the attack surface
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.
Cisco SD-WAN emergency mitigation shows edge control planes need first-class detection
CISA listed this issue as known exploited. The useful SOC question is where the affected system sits, what it can reach, and whether logs can prove if it was touched.