Welcome to our blog.
Surviving cybersecurity until the end of 2026
After Binance, LiteLLM, PHP2Shell and eMudhra, here are six practices and a checklist to limit what the next compromise can reach before 2027.
Critical Linux kernel TCP vulnerability can allow remote code execution (CVE-2026-98432)
Under specific conditions, a remote attacker with no credentials can run code on an unpatched Linux server, and a proof of concept has been reported for servers with a multipath TCP listener. See who is affected, how to patch, and what to do if your vendor has no fix yet.
2026 State of AI in Pentesting
Our latest report captures the perspectives of 400 CISOs, CTOs, and senior engineering leaders across Europe and the US. It explores how AI is changing penetration testing, why traditional approaches are struggling to keep pace with modern software delivery, and what security leaders want from the next generation of penetration testing.
Even gem list can run someone else's code
Ruby gems can run code on install and on every gem command, even gem list. Check for four data-exfiltrating gems and turn off install-time execution.
Deleting a leaked key from your repo doesn't protect you
A leaked admin key on GitHub, deleted within hours, still led to a breach months later at LiteLLM. Learn why Git history keeps secrets and why you have to rotate.
AI agent security in Kubernetes: Why prompt injection isn't the right term
Abdel Sghiouar, Google engineer and senior cloud developer advocate, thinks prompt injection should be called prompt poisoning.
Adding Aikido AI pentesting to your existing security stack
Aikido Security's AI pentesting fits into the stack you already run. Even if you're committed to your current code and cloud security tools, you can add AI pentesting on top to catch the complex logic flaws deterministic tools miss.
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
Node.js CVE-2026-111497 (Node2Shell) is a Brotli flaw that can allow remote code execution. See who is affected, patched versions and the fix.
LiteLLM compromised again: infostealer and RAT found in version 1.107.0
LiteLLM 1.107.0 was compromised. All seven compiled wheels on PyPI contain a credential-stealing infostealer and a persistent remote access trojan.
Drata and Aikido: audit-ready pentesting, built into your compliance workflow
Drata and Aikido bring AI pentesting into your compliance workflow, with verified findings, auditor-ready reports, and up to $4,000 in free pentest credits for new Drata customers.
Yearly pentests can’t keep up. Test more on the same budget
AI pentesting lets security teams test more often without raising the budget. Learn how upfront pricing and forecasts keep costs predictable.
Your CVE is reachable. But is it exploitable?
Reachable CVEs can still be safe in your app. See how reachability vs exploitability analysis helps you decide which dependency vulnerabilities to fix first.
Aikido launches Noon: workforce security for every employee
Aikido launches Noon, a workforce security business. AI governance, device and email protection, and training against AI-powered phishing and deepfakes.
wfx-loot campaign pushes CI secret stealer to tens of thousands of repositories
A wave of compromised accounts are pushing a CI secret stealer. See if you’re affected, what it steals, and what to rotate.
Top 10 Software Composition Analysis (SCA) tools in 2026
SCA tools are our best line of defense for open-source security, this article explores the top 10 open-source dependency scanners for 2026
AI Pentesting Buyer's Guide: How to evaluate AI pentesting vendors
Learn how to evaluate AI pentesting vendors with practical buying criteria, research from 1,000+ AI pentests, and a downloadable evaluation checklist.
A practical CTO security checklist to be Mythos-ready
A practical checklist for SaaS CTOs navigating a world with Mythos and agentic AI threats. Built around the defender's advantage: you have context attackers have to work to get. Covers the controls, practices, and operational habits that determine whether your team finds and fixes issues before someone else does.
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system.
Connect a repo to discover what the reasoning agents find in your codebase.
