Welcome to our blog.

Predicting MongoDB ObjectId() continuously in Rocket.Chat

Aikido's AI pentester found this file-access flaw in Rocket.Chat. A closer look at MongoDB's ObjectId() showed the weak randomness that makes it exploitable.

Authentication Bypass in the default configuration phpBB

Our AI pentest agents found a critical phpBB auth bypass (CVE-2026-48611): one unauthenticated request logs you into any account. See the exploit and the fix.

Aikido acquires Root to secure the supply chain

Aikido has acquired Root to secure the software supply chain, fixing open source vulnerabilities in the version you already run, no upgrade required. Critical fixes go back to the community, free.

And another one. GitHub ships break-glass credential revocation

GitHub ships break glass credential revocation

Break-glass credential revocation is live on GitHub Enterprise. The Trivy and Microsoft durabletask repeats show why fast, complete revocation was needed..

GitHub Enterprise can now revoke all of an account's credentials in one action. The Trivy attack and Microsoft's own durabletask compromise demonstrate why this was a long time coming.

npm now freezes high-impact accounts after risky account changes

A look at npm's new 72-hour account freeze, what triggers it, what it blocks, and how it works alongside trusted and staged publishing.

Top Koi alternatives in 2026

Top Koi Security Alternatives in 2026 | Aikido

Looking for a Koi Security alternative after the Palo Alto acquisition? Compare competitors on device protection, platform breadth, and pricing.

Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets

codfish/semantic-release-action was compromised on June 24, 2026. Attackers repointed v2–v5 tags to a Miasma credential-stealing payload targeting CI/CD secrets. Here's what happened and how to check if you're affected.

Everybody's shipping code they can't read

With AI, everyone's a developer now, and a lot of code gets shipped without a careful review from trained eyes.

Aikido x Drydock | A way for maintainers to catch malware before it ships

Aikido Partners with Drydock to Bring Pre-Publish Malware Review to npm and PyPI

Aikido partners with Drydock to bring pre-publish package review to npm and PyPI. See exactly what's inside a release before it ships, malware caught before download number one.

Aikido is partnering with Drydock so npm and PyPI maintainers can see exactly what's inside a release before it goes live. Catch malware before it ships, not after.

AI Pentesting for Compliance

A review of AI Pentesting for compliance frameworks

Learn which compliance frameworks accept AI pentesting

Learn which compliance frameworks accept AI pentesting, and which still require a human pentester.

Compliance

Packagist is now protected by Aikido Intel and other updates to the PHP registry

Aikido's malware feed now blocks bad package versions in Composer by default. A look at how Packagist is closing whole classes of supply chain attacks.

Aikido x OWASP: 200 free credits for individual members

Aikido and OWASP: 200 free credits for members

OWASP individual members get 200 free Aikido credits to run Code Audit. Here is who qualifies and how to claim yours in two steps.

OWASP individual members get 200 free Aikido credits to run Code Audit. Here is how to claim yours in two steps.

Aikido

141 Mastra npm packages were compromised in a supply chain attack that injected a malicious dependency to silently download and execute a payload at install time.

Multiple JetBrains IDE plugins caught stealing AI keys

A coordinated campaign of at least 15 JetBrains IDE plugins, published under seven vendor accounts, exfiltrates the AI provider API key you paste into their settings.

Full Fathom Five: The context of Anthropic’s Mythos-class public release

Full Fathom Five: What Anthropic’s Mythos-class public release means

You never needed Mythos to find your IDORs and business logic flaws. A look at what Anthropic shipped with Fable 5, and why infosec stays a people problem at heart.

5 Socket security alternatives and why they are better

5 Socket Security Alternatives and Why They Are Better

Socket built its name on malware detection. But detection speed alone is no longer the whole story. Here's how Aikido and four other alternatives compare on supply chain security, reachability analysis, licensing, and more.

npm v12 delivers one of the biggest security improvements in years

npm v12 makes install scripts opt-in by default, closing the install-time execution path behind a year of npm supply chain worms from Nx to Red Hat.

Aikido x Docker: less noise, more signal in your containers

Aikido Supports Docker Hardened Images with VEX

Aikido now supports Docker Hardened Images with built-in VEX integration, helping teams reduce CVE noise and focus on container vulnerabilities that actually need attention.

Scan Docker Hardened Images in Aikido with automatic VEX filtering for non-exploitable CVEs.

Code is being written everywhere, and the device is the only constant

Code Is Written Everywhere and the Device Is the Only Constant | Aikido Security

Developers are coding everywhere. AI agents, Slack bots, and MCP servers have made the developer device the biggest security blindspot.

SBOMs in 2026: Everyone's generating them, no one's using them

SBOMs in 2026: Everyone's Generating Them, No One's Using Them | Aikido Security

ENISA's 2026 SBOM adoption report covers 334 organizations and surfaces a consistent gap between generating SBOMs and actually using them. Here is what stood out.

Compromised Rust crate onering performs code exfiltration

The compromised onering Rust crate v1.4.1 on crates.io shipped a malicious build.rs that exfiltrates the diff of your latest commit to a hosted Sentry endpoint every time you build.

10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forums

Critical phpBB Vulnerability: Auth Bypass + RCE Since 2014

Aikido Security discovered a critical unauthenticated authentication bypass in phpBB affecting tens of millions of users. A single HTTP request is all it takes to take over any account — a vulnerability that's been sitting in the codebase since 2014.

Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System

Deep dive into binding.gyp, the often overlooked npm build file that can execute malicious code at install time through shell expansions, sandbox escapes, and compiler hijacking.

AI SAST is emerging as a new SAST category, but the meaning is unclear. We clarify the difference between AI-native SAST and AI-assisted SAST, as well as how AI SAST sits in the stack between traditional SAST and AI pentesting.

What is AI SAST?

Top 5 Tenable Nessus alternatives in 2026

Top 5 Tenable Nessus Alternatives in 2026 | Aikido Security

Tenable Nessus is a powerful scanner, but powerful tools that nobody uses don't make software more secure. Compare five alternatives built for how engineering teams actually work.

Tenable Nessus is a powerful infrastructure scanner, but powerful tools that sit disconnected from developer workflows are tools that nobody uses. This guide compares five alternatives built around developer workflow fit, AppSec breadth, cost, and remediation experience.

Why EDR and proxy won’t save you from supply chain malware

EDR and proxies weren't built for supply chain malware. When malicious code arrives through npm install, it looks like normal behavior. Here's why that matters.

Move over, Mythos. Here comes... pretty much any other model with a good harness

Move over, Mythos. Here comes any model with a good harness.

Mythos has real edges in exploit chain construction. But for most AppSec work, the harness around the model matters more than which model you pick.

Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm

Multiple official @redhat-cloud-services npm packages were compromised with a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware, targeting cloud credentials, and developer tooling across CI/CD pipelines.

Introducing Code Audit: Find complex vulnerabilities hidden in your source code

SAST catches patterns. Code Audit reasons through your code like an attacker would, finding the logic flaws that only show up after you ship.

Agentic models can now find and chain logic flaws across your source faster than any human attacker. Code Audit sits between SAST and pentesting, reasons over your static code, and surfaces multi-step vulnerabilities before they ship.

What MDM can't protect on developer machines (and what to do about it)

What MDM Can't Protect on Developer Machines

MDM tools like Jamf and Kandji are essential but they don't see npm installs, IDE extensions, or AI coding tools. Here's what's actually unprotected on your developer machines and how to close the gap.

Most security teams have MDM deployed. The problem is that npm installs, VS Code extensions, and AI coding tools happen completely outside MDM's view. Here's what's actually unprotected and how to close the gap.

Top GitGuardian alternatives for secrets scanning in 2026

Top GitGuardian Alternatives for Secrets Scanning in 2026

Compare the Top GitGuardian Alternatives for secrets scanning in 2026. See where Aikido Security, GitHub Secret Protection, TruffleHog, Gitleaks, Semgrep, Snyk, Cycode, Checkmarx, and GitLab fit best.

Compare the top GitGuardian alternatives for secrets scanning in 2026, including Aikido Security, Betterleaks, GitHub Secret Protection, TruffleHog, Semgrep, Snyk, Checkmarx One, and GitLab Secret Detection.

Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens

A polished Codex remote UI, the npm package codexui-android, has active development and thousands of weekly users. It has been quietly exfiltrating OpenAI auth tokens for the past month.

Aikido vs XBOW: 58% more vulnerabilities found in independent benchmark

Aikido vs XBOW compared in an independent benchmark by Doyensec. Aikido found 58% more vulnerabilities at the same price. See setup time, false positive rates & full results

We commissioned Doyensec to run a blind, independent benchmark of Aikido and XBOW on the same apps, at the same price. Aikido found 58% more verified vulnerabilities, and came out ahead on setup, speed and stability.

Why developer machines are now the number one target for supply chain attacks

Why Developer Machines Are the #1 Target for Supply Chain Attacks | Aikido

Teams at Omnea, Cognism, Glasswall, Raisin and the UK public sector reveal why EDR and MDM miss what's really happening on developer machines.

Engineering and security teams at Omnea, Cognism, Glasswall, and the UK public sector all independently flagged the same blind spot. This is what they're doing about it.

Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer

Attackers injected a credential stealer into 200+ versions of popular Laravel-Lang packages, delivering a credential stealer targeting cloud keys, SSH keys, browsers, crypto wallets and more.

5 Gitleaks alternatives and why they are better

5 Gitleaks Alternatives for Better Secrets Scanning in 2026

Looking for a Gitleaks alternative? We compare Betterleaks, TruffleHog, Aikido, GitHub Advanced Security, and Spectral so you can find the best secrets scanner for your team.

Gitleaks is no longer actively developed, and the secrets scanning landscape has moved fast. We compare the five strongest alternatives in 2026, including Betterleaks, TruffleHog, Aikido, GitHub Advanced Security, and Spectral, so you can find the right fit for your stack.

The Wild West of VS Code extensions and how a poisoned extension breached GitHub

A poisoned VS Code extension breached GitHub yesterday, one day after Nx Console (2.2M installs) was compromised for 18 minutes on the Visual Studio Marketplace and reached every user with auto-update on.

GitHub breached via a malicious VS Code extension: why developer devices are the real target

GitHub Breached via VS Code Extension | Developer Supply Chain Attack 2026

GitHub confirmed a poisoned VS Code extension compromised an employee device, exposing 3,800 internal repos. Why developer workstations are now the top supply chain target.

Microsoft's durabletask package on PyPi Compromised. Mini Shai Hulud attacks again... again!

Three progressively compromised versions of a Microsoft-adjacent Python package deliver a full-featured infostealer that spreads through AWS and Kubernetes, exfiltrates every cloud credential it can find, and wipes disks on Israeli and Iranian systems

Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages

Mini Shai-Hulud Strikes Again: npm Worm Compromises Hundreds of @antv Packages

The Mini Shai-Hulud npm worm has hit Alibaba's @antv packages, echarts-for-react, and timeago.js. The payload steals CI/CD secrets, plants backdoors in VS Code and Claude Code, and spreads by republishing compromised packages. Here is what happened and how to protect your team.

The Mini Shai-Hulud npm worm is back with its largest wave yet, compromising hundreds of packages across Alibaba's data visualization ecosystem. Our malware team is tracking over 2,700 rogue GitHub repos created with stolen tokens as the worm continues to spread.

Penetration testing vs. red teaming: what’s the difference?

Penetration Testing vs. Red Teaming: What's the Difference?

Not sure whether you need a pentest or a red team engagement? This guide breaks down the key differences, when to use each, and how AI is changing both.

Penetration testing and red teaming are both ways to stress test your security, but they're not the same thing. This post breaks down how each works, when to use one over the other, and where AI pentesting is changing the equation.

Google API keys keep working after you delete them

Google API keys keep working after you delete them long enough to be exploited

Deleting a Google API key doesn't revoke it immediately. Our testing found successful authentications up to 23 minutes after deletion, and Google has declined to fix it.

Deleting a Google API key doesn’t revoke it immediately. Our testing found successful authentications up to 23 minutes after deletion, and Google declined to fix it.

Shadow AI is a fear response, and banning it makes it worse

Why shadow AI risks start with fear (and banning makes them worse)

Employees aren't using unapproved AI tools to cause problems. They're scared of falling behind. Here's why banning shadow AI increases your security risk, and what to do instead.

Shadow AI is a fear response. Employees are hiding the tools they use because they're correctly reading a job market that demands AI skills. Here's why banning makes it worse, and what to do instead.

Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack

Mini Shai-Hulud is back, compromising 169 npm packages across TanStack, UiPath, Squawk, and more to steal developer and CI/CD secrets, then spread through trusted publishing workflows.

The complete GitHub Actions security checklist

Security Checklist for GitHub Actions

GitHub Actions misconfigurations have been behind some of the biggest supply chain attacks of 2025 and 2026. Here's what went wrong and how to prevent them from happening to your org.

GitHub Actions misconfigurations have been behind some of the biggest supply chain attacks of 2025 and 2026. Here's a practical checklist of how to protect yourself from them.

Top OWASP scanners in 2026 for web application security

Best OWASP Scanners in 2026 for Web App Security

Most scanners don't cover the full OWASP Top 10. We break down the top OWASP scanners in 2026 so you can choose one that actually keeps you covered.

Most OWASP scanners don't cover the full Top 10. This guide breaks down the top tools in 2026, what each one actually covers, and which scanner delivers complete coverage without the noise.

Rolling out developer security in a 5,000+ engineer organization

Developer Security at Scale: A CISO's Rollout Guide

Most developer security rollouts fail because they're designed like software deployments, not cultural changes. A practitioner's guide for enterprise CISOs.

Most developer security rollouts fail because they're designed like software deployments, not cultural changes. Here's the phased model experienced CISOs converge on to fix that.

Security metamorphosis: a Mythos-ready architecture checklist for autonomous AI attacks

AppSec has flatlined under modern complexity. Project Glasswing and the Mythos era demand a security discipline that operates at the velocity of the threats it faces.

Why browser extensions are a major security risk and what you can do about it

Browser extensions have lots of security risks, more than we care to admit. We discuss the full extent of the threat and what both individuals and organizations can do about it.

Top CVE scanners in 2026 to identify known vulnerabilities

Top CVE Scanners in 2026: Compared by Coverage, Intelligence, and Auto-Fix

We evaluated the top CVE scanners in 2026 on coverage breadth, intelligence sources, signal-to-noise ratio, and auto-fix capability. Here's how they compare and which is right for your stack.

Not all CVE scanners are built the same. We compared the top options in 2026 on coverage breadth, intelligence sources, signal-to-noise ratio, and auto-fix capability, so you can find the right fit for your stack.

Malware found in popular PyTorch Lightning version 2.6.2 and 2.6.3, stealing credentials, crypto wallets, and VPN configs as part of the Mini Shai-Hulud campaign.

A practical CTO security checklist to be Mythos-ready

Mythos-Ready Checklist

A practical checklist for SaaS CTOs navigating a world with Mythos and agentic AI threats. Built around the defender's advantage: you have context attackers have to work to get. Covers the controls, practices, and operational habits that determine whether your team finds and fixes issues before someone else does.

Someone published four versions of a fake "tanstack" package in 27 minutes to steal your .env files

Four published versions of a fake "tanstack" package uploaded in 27 minutes that want to steal your .env files

A fake "tanstack" npm package published four malicious versions in 27 minutes today, exfiltrating .env files via a postinstall hook. Here's what happened, who was affected, and how to rotate your credentials.

Aikido integrates with AWS Kiro: Catching in review doesn't scale anymore

Aikido x Kiro | Catching in review doesn't scale anymore

AI agents writing your code. Aikido integrates directly into AWS Kiro's agentic workflow to keep security in the loop, automatically, from the first line. Aikido is AWS's first global security partner for Kiro.

Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealer

Compromised SAP npm packages use a Bun-based preinstall payload to steal GitHub, npm, cloud, and CI secrets, then spread via GitHub using OhNoWhatsGoingOnWithGitHub.

It's time to treat browser extensions like supply chain attack vectors

It's time to treat browser extensions like supply chain attack vectors | Lessons learned from the Vercel breach

The Vercel breach followed a pattern the security industry knows well, where third-party code is implicitly trusted, then compromised upstream. We have a framework for that. We just haven't applied it to browser extensions yet. (Spoiler: We do this for software dependencies)

Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm

Malware found in @bitwarden/cli v2026.4.0 steals SSH keys, cloud secrets, and AI coding tool credentials, then spreads through victims' own npm packages. Inside: a worm calling itself "Shai-Hulud: The Third Coming."

GPT-Proxy Backdoor in npm and PyPI turns Servers into Chinese LLM Relays

A newly discovered npm and PyPI malware campaign installs hidden LLM proxies on compromised servers, turning them into relay nodes for LLM traffic.

Roundcube XSS chained with cookie tossing for full inbox access

We found a stored XSS in Roundcube's draft attachment endpoint that, chained with a cookie tossing technique, gives an attacker full access to a victim's inbox. Here's how the exploit chain works and how it was patched

Introducing Device Protection: Security for Developer Devices

Aikido Device Protection: Security for Developer Devices | Aikido

Supply chain attacks target developer devices. Aikido Device Protection monitors every install across npm, PyPI, VS Code extensions, browser extensions, and AI tools.

Multiple Cross-Site Scripting (XSS) Vulnerabilities in Mailcow

Multiple XSS Vulnerabilities Found in Mailcow, Including Unauthenticated Account Takeover

Aikido's AI pentest agent found three XSS vulnerabilities in Mailcow, one of which let unauthenticated attackers take over administrator accounts. All issues have been patched as of version 2026-03b.

Aikido's AI pentesting agents found three XSS vulnerabilities in Mailcow, a widely used self-hosted email server. The most severe allowed unauthenticated attackers to inject a payload into Autodiscover logs that would execute when an admin viewed them, enabling full account takeover. All three have been fixed since version 2026-03b.

Reliable CVE sources in the age of NIST NVD cutbacks

NIST NVD changes 2026: what security teams need to know

NIST will no longer enrich most CVEs. Here's what changes, what breaks, and what comes next.

One year of Opengrep: What we built and what’s next

Opengrep SAST After One Year: Faster, Deterministic Static Analysis

A year after forking Semgrep, Opengrep is faster, supports deeper taint analysis, and produces consistent, reproducible results.

One year after forking Semgrep, Opengrep is faster, more capable, and fully open. Here's what we built and what's next.

Axios CVE-2026-40175: a critical bug that’s… not exploitable

Axios CVE-2026-40175 is rated critical, but in real Node.js environments it’s not practically exploitable. Here’s why.

Bug bounty isn’t dead, but the old model is breaking

Bug bounty is hitting a breaking point as AI overwhelms programs, pushing a shift toward more sustainable, quality-focused security models.

Technical

GlassWorm goes native: New Zig dropper infects every IDE on your machine

GlassWorm deploys a Zig-based native dropper hidden within a fake extension, silently compromising VS Code, Cursor, VSCodium, and other IDEs.

Aikido Attack finds multiple 0-days in Hoppscotch

Aikido Attack Finds 0-Days in Hoppscotch

Aikido’s AI pentesting agents discovered multiple high-severity vulnerabilities in Hoppscotch, including account takeover, stored XSS, and access control flaws. All issues are now patched.

Aikido Attack identified three high-severity vulnerabilities in Hoppscotch: an open redirect leading to account takeover, stored XSS, and a broken access control issue allowing cross-team request injection.

The cybersecurity doomerism around Mythos doesn't match what we see on the ground

Anthropic Mythos Cybersecurity Risks: What 1,000 AI Pentests Actually Show

Anthropic's leaked Mythos model has triggered panic about AI-powered cyberattacks. We ran 1,000 AI penetration tests. The results suggest the threat is more nuanced than the headlines claim.

axios compromised on npm: maintainer account hijacked, RAT deployed

Malicious axios versions 1.14.1 and 0.30.4 were published via a hijacked maintainer account. A hidden dependency deploys a cross-platform RAT. Check if you are affected and remediate now.

Axios was compromised. Malicious axios versions 1.14.1 and 0.30.4 were published to npm after the lead maintainer's account was hijacked. The injected dependency deploys a cross-platform RAT that self-destructs after execution.

Aikido × Lovable: Vibe, Fix, Ship

Lovable Partners with Aikido to Bring Pentesting to Vibe-Coded Apps

Lovable and Aikido bring pentesting into the platform, allowing builders to simulate real-world attacks and fix issues before shipping.

Aikido brings pentesting directly into Lovable. Test your app by simulating real attacks and fix issues before you ship.

CanisterWorm Gets Teeth: TeamPCP's Kubernetes Wiper Targets Iran

TeamPCP deploys CanisterWorm on NPM following Trivy compromise

Aikido Recognized by Frost & Sullivan with the 2026 Customer Value Leadership Award in ASPM

Frost & Sullivan recognized Aikido with the 2026 Customer Value Leadership Award in ASPM. We break down what the recognition criteria reveal about how the AppSec market is maturing

GlassWorm Hides a RAT Inside a Malicious Chrome Extension

GlassWorm RAT Delivered via Malicious Chrome Extension (Keylogger, Cookie Theft)

GlassWorm deploys a multi-stage RAT that force-installs a malicious Chrome extension to log keystrokes, steal cookies, and exfiltrate data via Solana-based C2.

Security testing is validating software that no longer exists

Why Pentesting Can’t Keep Up: The Speed Problem in Security Testing

Modern teams ship faster than pentesting can keep up. Explore the growing speed gap in security testing—and why traditional approaches are falling behind.

A CISO at a large enterprise told us the most important security capability today is speed. But what happens when testing can’t keep up with how fast systems change?

fast-draft Open VSX Extension Compromised by BlokTrooper

fast-draft Open VSX Extension Compromised by BlokTrooper (RAT & Infostealer)

The fast-draft Open VSX extension was compromised to deploy a BlokTrooper RAT and infostealer via GitHub-hosted payloads. Multiple malicious versions identified.

Glassworm Strikes Popular React Native Phone Number Packages

Glassworm Strikes Popular React Native Phone Number Packages in a New Supply Chain Attack

Aikido Security researchers recovered and decrypted the full payload chain from two malicious React Native packages. Here's what the malware does and what to look for.

Glassworm Is Back: A New Wave of Invisible Unicode Attacks Hits Hundreds of Repositories

Glassworm Returns: Invisible Unicode Malware Found in 150+ GitHub Repositories

The Glassworm supply chain attack is back. Researchers uncovered malware hidden in invisible Unicode characters across 150+ GitHub repositories, plus npm packages and VS Code extensions.

Glassworm is back with a new wave of invisible Unicode attacks. We’re tracking a fresh campaign quietly compromising repositories across GitHub, npm, and VS Code.

Top RSAC 2026 Parties, Side-Events & Security Meetups

RSAC 2026 Parties & Security Events Guide | Aikido

How Security Teams Fight Back Against AI-Powered Hackers

AI has lowered the bar for hackers dramatically. Here's what that means for defenders and how continuous AI pentesting changes the equation.

A single hacker and a Claude subscription just took down nine Mexican government agencies. AI has handed attackers a serious power upgrade. Security teams need a new playbook.

Introducing Betterleaks, an open source secrets scanner by the author of Gitleaks

Betterleaks: The Gitleaks Successor Built for Faster Secrets Scanning

Betterleaks is a new open source secrets scanner from the creator of Gitleaks. A drop-in replacement with faster scans, token efficiency detection, configurable validation, and more.

The creator of Gitleaks is launching its successor. Betterleaks is a faster open source secrets scanner built to catch more leaks and fit modern developer workflows.

How does AI pentesting work with compliance?

AI pentesting is being accepted for SOC 2, ISO 27001, and HIPAA (with more likely to come). Here's what auditors actually look for, and where the real limitations are.

AI pentesting is being accepted for SOC 2, ISO 27001, HIPAA, and PCI DSS. Here's what auditors actually look for, and where the real limitations are.

Compliance

Trump’s 2026 cybersecurity strategy: From compliance to consequence

Trump’s 2026 Cybersecurity Strategy: From Compliance to Consequence

The Trump administration’s 2026 cybersecurity strategy shifts the focus from compliance checklists to real consequences for cybercriminals. Here’s what CISOs need to know.

What continuous pentesting actually requires

Continuous pentesting: how it works and what it requires

Continuous pentesting promises real-time security validation, but most implementations fall short. Here’s what continuous pentesting actually requires—from change-aware testing to exploit validation and remediation loops.

Continuous pentesting is widely discussed, but rarely defined clearly. This piece breaks down what it is, what it isn’t, and what it actually requires.

Rare Not Random: Using Token Efficiency for Secrets Scanning

Entropy often struggles with generic secrets and short strings. We look at how token efficiency can better identify strings that don’t look like normal text.

Entropy is great at spotting randomness. But secrets aren’t always random. They’re just strings that don’t show up in normal code or text. We explore using BPE tokenization to measure that difference.

Why Determinism Is Still a Necessity in Security

AI scanning finds what rules miss. Deterministic scanning finds it every time. Here's why the best security pipelines don't choose between them.

AI-powered security tools are getting better at finding vulnerabilities. But deterministic tools give you the consistency that pipelines, compliance, and audit trails depend on. We look at what deterministic scanning does well, where AI takes over, and how the two work together for effective security.

Engineering

WAF vs. RASP vs. ADR

WAF vs. RASP vs. ADR: How Runtime Application Security Works

WAF, RASP, and ADR protect your app in completely different ways. Here's what each layer actually does, where it falls short, and which ones you need.

WAF, RASP, ADR, eBPF — We're clearing up the terminology around runtime application security. Here's what each layer actually does, how they overlap, and how they fit together

Guides

Introducing Aikido Infinite: A new model of self-securing software

Aikido Infinite: Continuous AI Pentesting for Every Release

Aikido Infinite runs AI penetration testing on every code change, validates exploitability, generates patches, and retests fixes before code hits production, making self-securing software a reality.

Persistent XSS/RCE using WebSockets in Storybook’s dev server

Persistent XSS/RCE using WebSockets in Storybook (CVE-2026-27148)

CVE-2026-27148 exposes a WebSocket hijacking flaw in Storybook that can escalate into supply chain compromise. Learn the attack path, impact, and how to remediate.

Aikido Attack found a WebSocket hijacking vulnerability in Storybook's dev server that can lead to persistent XSS, remote code execution, and, in the worst case, supply chain compromise. We walk through how an attacker can exploit this without any user interaction at all, and a developer just has to visit the wrong website while to run into this attack.

How Aikido secures AI pentesting agents by design

How Aikido Secures AI Pentesting Agents and Prevents Scope Drift

Learn how Aikido secures AI pentesting agents with architectural isolation, runtime scope enforcement, and network-level controls to prevent production drift and data leakage.

AI agents are built to explore. In cybersecurity, that exploration needs strict boundaries. This article explains how Aikido secures AI pentesting agents through architectural isolation, runtime scope enforcement, and layered controls that contain risk by design.

Astro Full-Read SSRF via Host Header Injection

Astro SSRF Vulnerability: Host Header Injection in SSR Error Pages (CVE-2026-25545)

Aikido Security's AI pentesting agent discovered a Server-Side Request Forgery vulnerability in Astro's SSR implementation. Learn how Host header injection in prerendered error pages allowed full internal network access.

Aikido's AI pentesting agent discovered an SSRF vulnerability in Astro's Node.js adapter. We'll look at how by injecting a malicious Host: header, attackers could redirect an internal request to any URL on the local network.

How to Get Your Board to Care About Security (Before a Breach Forces the Issue)

How to Get Your Board to Care About Security Before a Breach

Boards don’t fund security because it’s important. They fund defensible decisions. Here’s how to frame risk, reduce ambiguity, and win real support before a breach forces the issue.

Guides

What is Slopsquatting? The AI Package Hallucination Attack Already Happening

Slopsquatting: The AI Package Hallucination Attack Already Happening

AI models hallucinate npm package names. Attackers register them first. Here's what slopsquatting is, how it's spreading through agent skills, and how to protect yourself.

AI models hallucinate package names — and attackers are registering them before anyone notices. Slopsquatting is the AI-era evolution of typosquatting, and unlike its predecessor, npm's existing protections don't work. We look at the real-world research showing it's already happening, from confirmed malicious packages still pulling hundreds of weekly downloads to a hallucinated package name that spread to 237 repositories through AI agent skill files.

Top 6 Wiz Code Alternatives

Wiz Code Alternatives (2026): 6 Tools Compared and Best Developer-First Option

Looking for Wiz Code alternatives? Compare 6 tools across SAST, DAST, SCA, pricing, and developer experience to find the best AppSec platform for 2026.

This guide compares Wiz Code against six alternatives: Aikido Security, Snyk, Checkmarx, GitHub Advanced Security, Mend, and Veracode, evaluated on coverage, developer experience, AI-powered triage, pricing transparency, and deployment speed. Aikido Security comes out on top for teams wanting a developer-first platform with broad coverage, 85% false positive reduction, AI AutoFix across SAST, IaC and containers, native DAST, and transparent pricing at roughly one-tenth the cost of Wiz.

Aikido recognized as Platform Leader in Latio Tech's 2026 Application Security Report

Aikido Named AppSec Platform Leader in Latio 2026 Report

Aikido Security recognized as Platform Leader, AI Pentesting Innovator, and Supply Chain Innovator in Latio Tech’s 2026 AppSec Report.

Latio Tech’s 2026 AppSec Report names Aikido a Platform Leader and AI Innovator. Here’s what the report reveals about the future of application security.

From detection to prevention: How Zen stops IDOR vulnerabilities at runtime

From Detection to Prevention: Zen Stops IDOR at Runtime | Aikido

IDOR vulnerabilities are one of the most common causes of cross-tenant data leaks in multi-tenant SaaS. Learn how Zen enforces tenant isolation at runtime by analyzing SQL queries and preventing unsafe access before it ships.

IDOR vulnerabilities are a leading cause of cross-tenant data leaks in multi-tenant applications. In this post, we explain how Zen moves beyond detection and enforces tenant isolation at runtime, making cross-tenant access impossible to ship by accident.

npm backdoor lets hackers hijack gambling outcomes

npm supply chain attack hijacks game backend to rig gambling outcomes

A targeted npm supply chain attack installs an Express backdoor, enables remote SQL/file access, and rewrites gambling balances while keeping logs consistent.

We uncovered malicious npm packages that can modify gambling transactions in production, and keep the database internally consistent afterward.

Why Trying to Secure OpenClaw is Ridiculous

OpenClaw's security issues explained: malware in ClawHub, exposed instances, and why hardening guides miss the point. Can you use the AI agent safely??

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

June 11, 2026

•

Product & Company Updates

Aikido x Docker: less noise, more signal in your containers

Scan Docker Hardened Images in Aikido with automatic VEX filtering for non-exploitable CVEs.

Tags/

No items found.

June 10, 2026

•

News

Code is being written everywhere, and the device is the only constant

Developers are coding everywhere. AI agents, Slack bots, and MCP servers have made the developer device the biggest security blindspot.

Tags/

#Aikido Device Protection

June 10, 2026

•

News

SBOMs in 2026: Everyone's generating them, no one's using them

ENISA's 2026 SBOM adoption report covers 334 organizations and surfaces a consistent gap between generating SBOMs and actually using them. Here is what stood out.

Tags/

#SBOM

June 2, 2026

•

News

Why EDR and proxy won’t save you from supply chain malware

EDR and proxies weren't built for supply chain malware. When malicious code arrives through npm install, it looks like normal behavior. Here's why that matters.

Tags/

#Vulnerabilities

#Aikido Device Protection

May 28, 2026

•

Guides & Best Practices

What MDM can't protect on developer machines (and what to do about it)

Tags/

#Aikido Device Protection

#IDE Security

#AI Safety

#Software Supply Chain Security

May 27, 2026

•

Vulnerabilities & Threats

Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens

A polished Codex remote UI, the npm package codexui-android, has active development and thousands of weekly users. It has been quietly exfiltrating OpenAI auth tokens for the past month.

Tags/

#Vulnerabilities

#NPM

May 23, 2026

•

Vulnerabilities & Threats

Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer

Attackers injected a credential stealer into 200+ versions of popular Laravel-Lang packages, delivering a credential stealer targeting cloud keys, SSH keys, browsers, crypto wallets and more.

Tags/

#Malware

May 12, 2026

•

News

Shadow AI is a fear response, and banning it makes it worse

Shadow AI is a fear response. Employees are hiding the tools they use because they're correctly reading a job market that demands AI skills. Here's why banning makes it worse, and what to do instead.

Tags/

#AI

#AI Safety

#Legaltech

May 12, 2026

•

Vulnerabilities & Threats

Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack

Tags/

#Malware

May 6, 2026

•

Guides & Best Practices

Rolling out developer security in a 5,000+ engineer organization

Most developer security rollouts fail because they're designed like software deployments, not cultural changes. Here's the phased model experienced CISOs converge on to fix that.

Tags/

#Vulnerabilities

#AppSec

#Threat Modeling

#SCA

#SAST

May 5, 2026

•

Guides & Best Practices

Security metamorphosis: a Mythos-ready architecture checklist for autonomous AI attacks

AppSec has flatlined under modern complexity. Project Glasswing and the Mythos era demand a security discipline that operates at the velocity of the threats it faces.

Tags/

#AI Safety

#Software Supply Chain Security

April 29, 2026

•

Vulnerabilities & Threats

Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealer

Tags/

#Malware

#NPM

June 30, 2026

•

Product & Company Updates

Aikido acquires Root to secure the supply chain

Aikido has acquired Root to secure the software supply chain, fixing open source vulnerabilities in the version you already run, no upgrade required. Critical fixes go back to the community, free.

Container Scanning

May 12, 2026

•

Product & Company Updates

One year of Opengrep: What we built and what’s next

A year after forking Semgrep, Opengrep is faster, supports deeper taint analysis, and produces consistent, reproducible results.

SAST

open-source

April 30, 2026

•

Product & Company Updates

Aikido integrates with AWS Kiro: Catching in review doesn't scale anymore

Announcements

June 16, 2026

•

Vulnerabilities & Threats

Multiple JetBrains IDE plugins caught stealing AI keys

A coordinated campaign of at least 15 JetBrains IDE plugins, published under seven vendor accounts, exfiltrates the AI provider API key you paste into their settings.

Malware

June 10, 2026

•

Vulnerabilities & Threats

10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forums

AI Penetration Testing

June 9, 2026

•

Vulnerabilities & Threats

Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System

Deep dive into binding.gyp, the often overlooked npm build file that can execute malicious code at install time through shell expansions, sandbox escapes, and compiler hijacking.

Malware

June 12, 2026

•

DevSec Tools & Comparisons

5 Socket security alternatives and why they are better

Aikido Zen

Malware

open-source

August 19, 2025

•

DevSec Tools & Comparisons

Top 13 Dynamic Application Security Testing (DAST) Tools in 2026

Discover the 13 top best Dynamic Application Security Testing (DAST) tools in 2026. Compare features, pros, cons, and integrations to choose the right DAST solution for your DevSecOps pipeline.

Tools

DAST

July 18, 2025

•

DevSec Tools & Comparisons

Top 14 Container Scanning Tools in 2026

Discover the best 14 Container Scanning tools in 2026. Compare features, pros, cons, and integrations to choose the right solution for your DevSecOps pipeline.

Tools

Container Scanning