Welcome to our blog.

AI pentesting evaluation checklist: What to look for in an AI pentesting vendor

AI Pentesting Vendor Checklist: What to Look For

A checklist for scoring AI pentesting vendors on validation, code access, scope control, and reliability, plus the red flags that separate a real platform from a strong demo.

Aikido

Yet another RCE in Gogs, but it's fixed this time!

CVE-2026-52813 | An Aikido pentesting agent flagged a path traversal in Gogs. We escalated it to full RCE and reported two more bugs, all fixed in 0.14.3.

Top enterprise SCA tools in 2026

Top Enterprise SCA Tools 2026 | Aikido

Compare enterprise SCA tools for 2026: Aikido, Sonatype, Snyk, Endor Labs, Checkmarx, Black Duck, and Veracode on intelligence, remediation, and compliance.

Top enterprise DAST tools in 2026

Top DAST tools for enterprises in 2026 | Aikido

Compare the top enterprise DAST tools of 2026 on authenticated coverage, API discovery, exploit validation, governance, compliance, and AI pentesting

Compare the top enterprise DAST tools of 2026 on authenticated coverage, API discovery, exploit validation, governance, compliance, and AI pentesting.

Top unified security tools in 2026

Top unified security tools in 2026 | Aikido

Compare the top unified security tools of 2026: Aikido, Cortex Cloud, Wiz, Checkmarx, Snyk, and Orca, across coverage, correlation, governance, and cost.

From Hugging Face to Fable: this summer shows AI control matters more than trust

AI security: why control matters more than trust

An autonomous AI breach at Hugging Face and Anthropic's Fable suspension show the same thing: trusting a vendor isn't the same as being in control

One AI agent broke into Hugging Face on its own. One AI vendor's access vanished overnight. Here's what they have in common.

Finding vulnerabilities at every stage: what to run, and when

Which security testing tool do you actually need?

SAST, Deep PR Review, Code Security Audit and AI Pentest each catch different vulnerabilities at different stages. Here's when to use each, and why

SAST, Deep PR Review, Code Security Audit, and AI Pentest each catch vulnerabilities at different stages. Here's when to use each, and why.

What is AI harness engineering?

What is harness engineering? | AI harnesses and how they impact AI security

Harness engineering is the code around an AI model that turns it into an agent. What a harness does, why it beats picking a model, and how to build one.

Who was behind the attack? Possibly nobody

Who was behind the attack? Possibly nobody | Anthropic, OpenAI, and AISI's autonomous agent attacks

Three summer disclosures documented AI agents attacking real organizations with no human intent in the chain. Incident response has no box for this yet.

The Aikido Machine: on-prem AI pentesting that never leaves your network

Aikido Machine: on-prem AI pentesting server | Aikido Security

Continuous AI pentesting for teams that can't use the cloud. The Aikido Machine keeps models, code, and results entirely inside your network.

Continuous AI pentesting delivered inside the network of highly-regulated organizations. Belfius, the Belgian bank-insurer is the first to deploy it.

Keyv and friends compromised in active Shai-Hulud supply chain attack

Keyv and friends compromised in npm supply chain attack

Mini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub account

Top enterprise SAST tools 2026

Top enterprise SAST tools 2026 | Aikido Security

Comparing the best enterprise SAST tools on noise reduction, AI remediation, governance, compliance, and cost

Anthropic's Fever Dream: Claude's package that stole real keys

Anthropic's Fever Dream: Claude's package anthropickit that stole real keys

Anthropic disclosed an agent that pushed real malware to PyPI. We think we found the package, and every mistake in it points back to the AI.

Top Astra Security alternatives for automated pentesting in 2026

Top Astra Pentest Alternatives for Security Testing | Aikido Security

Compare Astra Security alternatives for AI pentesting in 2026 on depth, white-box testing, compliance output, and platform breadth

Four incident-response decisions from the Hugging Face breach

Four incident-response lessons from the Hugging Face breach

Recon, stolen credentials, hidden C2, and rebuild-or-patch. Four Hugging Face breach decisions that show whether you can catch an attack in progress.

Best SAST Tools 2026: Aikido, Snyk, Semgrep and More

Top SAST tools 2026

Compare the top SAST tools of 2026 across detection depth, noise, remediation, and enterprise fit

Compare the top SAST tools of 2026 across detection depth, noise, remediation, and enterprise fit.

Top LLM security tools to protect AI applications

Top LLM Security Tools in 2026 | Aikido Security

Compare the top LLM security tools for AI applications, including Aikido, Snyk, Semgrep, Endor Labs, and Wiz, across code, supply chain, and runtime.

Top Acunetix alternatives for automated vulnerability scanning

Top Acunetix Alternatives for Vulnerability Scanning | Aikido Security

Exploring Acunetix alternatives? Its DAST covers rule-based checks but can't reason about business logic or produce audit-grade pentests. Five options that go further.

Exploring Acunetix alternatives? Its DAST covers standard checks but can't reason about business logic or produce audit-grade pentests. Five options that go further.

Better generic secrets detection starts with finding non-secrets

Some API keys are meant to be public. Betterleaks now removes them from generic secret findings, dropping thousands of false positives per scan.

SQL injections (and Little Bobby Tables) aren't dead

SQL injection isn't dead

The fix for SQL injection is decades old and still works. So why did WordPress core just need an emergency patch for one? The data, and how to defend against it.

Tyro's CISO: Being the "Einstein of cybersecurity" isn't enough if developers don't trust you

The Einstein of cybersecurity still needs developer trust

Tyro CISO Arun Singh on developer trust as a finite resource, and what happens when supply chain attacks force teams to spend it

What developers need to know about DSPM and data exposure in code

Traditional DSPM finds where sensitive data lives. Code-based DSPM finds how it gets exposed, and points to the fix in your code.

The upgrade trap: when upgrading is the wrong answer to a CVE

Why upgrading to fix a CVE often makes things worse | Aikido

Upgrading to fix a CVE sounds straightforward. But the patched version often breaks your app, hasn't shipped yet, or doesn't exist. Here's why, and what actually works.

SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts

SleeperGem: two dormant RubyGems maintainer accounts were hijacked to inject malware into trusted gems, one with over 500,000 total downloads

Unauthenticated RCE in WordPress core (wp2shell), via SQL injection

Unauthenticated RCE Vulnerability in WordPress core (wp2shell), via SQL injection. Patch the vulnerability now!

WordPress core has an unauthenticated RCE (wp2shell), confirmed as SQL injection. Update to 7.0.2 or 6.9.5 now, with mitigations if you can't patch yet. Block the attack class at runtime with Aikido Zen.

Top Pentera alternatives for automated penetration testing

Top Pentera Alternatives for Automated Pentesting | Aikido Security

Compare the top Pentera alternatives for automated pentesting in 2026. See where Aikido Security, XBOW, Horizon3, Hadrian, RunSybil, Terra, and Astra fit best.

Benchmarking 13 AI models on rediscovering known CVEs

Benchmarking 13 AI Models on Known CVE Detection

We tested 13 AI models against 26 known CVEs to see which finds the most vulnerabilities — and whether the priciest model is worth the cost.

We tested 13 AI models on finding 26 known CVEs. GPT-5.6 found the most, but the priciest model wasn't the best use of budget.

Technical

The practical checklist for defending against supply chain attacks

The practical supply chain attacks checklist | Aikido

Thirty prioritized defenses against the recent wave of software supply chain attacks. Graded critical, high, or medium.

AsyncAPI npm packages backdoored via GitHub Actions

Five package versions, including specs at roughly 2 million weekly downloads, shipped an obfuscated dropper on 2026-07-14. Here is what we have confirmed so far.

How Aikido Intel detects malware and vulnerabilities first

Aikido Intel is a real-time feed that catches malware and undisclosed vulnerabilities across open-source ecosystems, often within 8 minutes of release.

Aikido Intel is a real-time supply chain intelligence feed that catches malware and undisclosed vulnerabilities across open-source ecosystems swiftly.

Finding eight high-severity vulnerabilities in NodeBB in six hours

Eight high-severity NodeBB vulnerabilities, found by our AI Pentest in six hours. Full technical breakdown of the XSS chains, auth bypasses, and post hijacking.

What is a dependency firewall?

What is a dependency firewall? | Aikido Security

A dependency firewall blocks malicious open-source packages before they install. Learn how they work and how Aikido Safe Chain stops supply chain attacks.

How to maintain code quality standards with AI code and vibe coding

Vibe coding ships features fast and leaves review debt behind. See how benchmarked, per-rule code quality checks give teams one consistent answer across PRs and repos.

Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry

A malicious release of @injectivelabs/sdk-ts hid a wallet-key stealer inside code labeled as usage telemetry, then spread it across 17 more npm packages. Here's how it worked and how to check your projects.

AI Pentesting Buyer's Guide: How to evaluate AI pentesting vendors

AI Pentesting Buyer's Guide | Evaluate AI Pentesting Vendors

Learn how to evaluate AI pentesting vendors with practical buying criteria, research from 1,000+ AI pentests, and a downloadable evaluation checklist.

Learn how to evaluate AI pentesting vendors with practical buying criteria, research from 1,000+ AI pentests, and an evaluation checklist.

Top Burp Suite alternatives for web application security testing

Top Burp Suite Alternatives for Web App Security Testing | Aikido Security

Compare the top Burp Suite alternatives for DAST and AI pentesting, including Aikido, Caido, ZAP, and Invicti.

Top Chainguard alternatives 2026

Top Chainguard Alternatives in 2026 | Aikido

Comparing the best Chainguard alternatives in 2026, from Aikido Security to Docker Hardened Images, Minimus, RapidFort, and Echo.

Chainguard alternatives compared for hardened container images and CVE remediation without forced migration.

Top Black Hat USA 2026 Parties, Side-Events & Security Meetups

A curated guide to Black Hat USA 2026 parties, happy hours, CISO dinners and security meetups in Las Vegas, including Aikido’s Omega Mart After Hours with AWS and Tailscale.

Predicting MongoDB ObjectId continuously in Rocket.Chat

Aikido's AI pentester found this file-access flaw in Rocket.Chat. A closer look at MongoDB's ObjectId showed the weak randomness that makes it exploitable.

Aikido's AI pentester found this file-access flaw in Rocket.Chat. A closer look at MongoDB's ObjectId() showed the weak randomness that makes it exploitable.

Authentication Bypass in the default configuration phpBB

Our AI pentest agents found a critical phpBB auth bypass (CVE-2026-48611): one unauthenticated request logs you into any account. See the exploit and the fix.

Aikido acquires Root to secure the supply chain

Aikido has acquired Root to secure the software supply chain, fixing open source vulnerabilities in the version you already run, no upgrade required. Critical fixes go back to the community, free.

And another one. GitHub ships break-glass credential revocation

GitHub ships break glass credential revocation

Break-glass credential revocation is live on GitHub Enterprise. The Trivy and Microsoft durabletask repeats show why fast, complete revocation was needed..

GitHub Enterprise can now revoke all of an account's credentials in one action. The Trivy attack and Microsoft's own durabletask compromise demonstrate why this was a long time coming.

npm now freezes high-impact accounts after risky account changes

A look at npm's new 72-hour account freeze, what triggers it, what it blocks, and how it works alongside trusted and staged publishing.

Top Koi alternatives in 2026

Top Koi Security Alternatives in 2026 | Aikido

Looking for a Koi Security alternative after the Palo Alto acquisition? Compare competitors on device protection, platform breadth, and pricing.

Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets

codfish/semantic-release-action was compromised on June 24, 2026. Attackers repointed v2–v5 tags to a Miasma credential-stealing payload targeting CI/CD secrets. Here's what happened and how to check if you're affected.

Everybody's shipping code they can't read

With AI, everyone's a developer now, and a lot of code gets shipped without a careful review from trained eyes.

Aikido x Drydock | A way for maintainers to catch malware before it ships

Aikido Partners with Drydock to Bring Pre-Publish Malware Review to npm and PyPI

Aikido partners with Drydock to bring pre-publish package review to npm and PyPI. See exactly what's inside a release before it ships, malware caught before download number one.

Aikido is partnering with Drydock so npm and PyPI maintainers can see exactly what's inside a release before it goes live. Catch malware before it ships, not after.

Packagist is now protected by Aikido Intel and other updates to the PHP registry

Aikido's malware feed now blocks bad package versions in Composer by default. A look at how Packagist is closing whole classes of supply chain attacks.

Aikido's malware feed now blocks flagged package versions in Composer by default, for everyone installing from Packagist.org, with nothing to switch on. Over the past year Packagist and Composer have been closing whole classes of supply chain attack at the registry level. Here's what they shipped, and why every registry should be working this way.

Aikido x OWASP: 200 free credits for individual members

Aikido and OWASP: 200 free credits for members

OWASP individual members get 200 free Aikido credits to run Code Audit. Here is who qualifies and how to claim yours in two steps.

OWASP individual members get 200 free Aikido credits to run Code Audit. Here is how to claim yours in two steps.

Aikido

141 Mastra npm packages were compromised in a supply chain attack that injected a malicious dependency to silently download and execute a payload at install time.

Multiple JetBrains IDE plugins caught stealing AI keys

A coordinated campaign of at least 15 JetBrains IDE plugins, published under seven vendor accounts, exfiltrates the AI provider API key you paste into their settings.

Full Fathom Five: The context of Anthropic’s Mythos-class public release

Full Fathom Five: What Anthropic’s Mythos-class public release means

You never needed Mythos to find your IDORs and business logic flaws. A look at what Anthropic shipped with Fable 5, and why infosec stays a people problem at heart.

5 Socket security alternatives and why they are better

5 Socket Security Alternatives and Why They Are Better

Socket built its name on malware detection. But detection speed alone is no longer the whole story. Here's how Aikido and four other alternatives compare on supply chain security, reachability analysis, licensing, and more.

npm v12 delivers one of the biggest security improvements in years

npm v12 makes install scripts opt-in by default, closing the install-time execution path behind a year of npm supply chain worms from Nx to Red Hat.

Aikido x Docker: less noise, more signal in your containers

Aikido Supports Docker Hardened Images with VEX

Aikido now supports Docker Hardened Images with built-in VEX integration, helping teams reduce CVE noise and focus on container vulnerabilities that actually need attention.

Scan Docker Hardened Images in Aikido with automatic VEX filtering for non-exploitable CVEs.

Code is being written everywhere, and the device is the only constant

Code Is Written Everywhere and the Device Is the Only Constant | Aikido Security

Developers are coding everywhere. AI agents, Slack bots, and MCP servers have made the developer device the biggest security blindspot.

SBOMs in 2026: Everyone's generating them, no one's using them

SBOMs in 2026: Everyone's Generating Them, No One's Using Them | Aikido Security

ENISA's 2026 SBOM adoption report covers 334 organizations and surfaces a consistent gap between generating SBOMs and actually using them. Here is what stood out.

Compromised Rust crate onering performs code exfiltration

The compromised onering Rust crate v1.4.1 on crates.io shipped a malicious build.rs that exfiltrates the diff of your latest commit to a hosted Sentry endpoint every time you build.

10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forums

Critical phpBB Vulnerability: Auth Bypass + RCE Since 2014

Aikido Security discovered a critical unauthenticated authentication bypass in phpBB affecting tens of millions of users. A single HTTP request is all it takes to take over any account — a vulnerability that's been sitting in the codebase since 2014.

Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System

Deep dive into binding.gyp, the often overlooked npm build file that can execute malicious code at install time through shell expansions, sandbox escapes, and compiler hijacking.

AI SAST is emerging as a new SAST category, but the meaning is unclear. We clarify the difference between AI-native SAST and AI-assisted SAST, as well as how AI SAST sits in the stack between traditional SAST and AI pentesting.

What is AI SAST?

Top 5 Tenable Nessus alternatives in 2026

Top 5 Tenable Nessus Alternatives in 2026 | Aikido Security

Tenable Nessus is a powerful scanner, but powerful tools that nobody uses don't make software more secure. Compare five alternatives built for how engineering teams actually work.

Tenable Nessus is a powerful infrastructure scanner, but powerful tools that sit disconnected from developer workflows are tools that nobody uses. This guide compares five alternatives built around developer workflow fit, AppSec breadth, cost, and remediation experience.

Why EDR and proxy won’t save you from supply chain malware

EDR and proxies weren't built for supply chain malware. When malicious code arrives through npm install, it looks like normal behavior. Here's why that matters.

Move over, Mythos. Here comes... pretty much any other model with a good harness

Move over, Mythos. Here comes any model with a good harness.

Mythos has real edges in exploit chain construction. But for most AppSec work, the harness around the model matters more than which model you pick.

Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm

Multiple official @redhat-cloud-services npm packages were compromised with a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware, targeting cloud credentials, and developer tooling across CI/CD pipelines.

Introducing AI Code Analysis: Find complex vulnerabilities hidden in your source code

SAST catches patterns. AI Code Analysis reasons through your code like an attacker would, finding the logic flaws that only show up after you ship.

Agentic models can now find and chain logic flaws across your source faster than any human attacker. Code Audit sits between SAST and pentesting, reasons over your static code, and surfaces multi-step vulnerabilities before they ship.

What MDM can't protect on developer machines (and what to do about it)

What MDM Can't Protect on Developer Machines

MDM tools like Jamf and Kandji are essential but they don't see npm installs, IDE extensions, or AI coding tools. Here's what's actually unprotected on your developer machines and how to close the gap.

Most security teams have MDM deployed. The problem is that npm installs, VS Code extensions, and AI coding tools happen completely outside MDM's view. Here's what's actually unprotected and how to close the gap.

Top GitGuardian alternatives for secrets scanning in 2026

Top GitGuardian Alternatives for Secrets Scanning in 2026

Compare the Top GitGuardian Alternatives for secrets scanning in 2026. See where Aikido Security, GitHub Secret Protection, TruffleHog, Gitleaks, Semgrep, Snyk, Cycode, Checkmarx, and GitLab fit best.

Compare the top GitGuardian alternatives for secrets scanning in 2026, including Aikido Security, Betterleaks, GitHub Secret Protection, TruffleHog, Semgrep, Snyk, Checkmarx One, and GitLab Secret Detection.

Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens

A polished Codex remote UI, the npm package codexui-android, has active development and thousands of weekly users. It has been quietly exfiltrating OpenAI auth tokens for the past month.

Aikido vs XBOW: 58% more vulnerabilities found in independent benchmark

Aikido vs XBOW compared in an independent benchmark by Doyensec. Aikido found 58% more vulnerabilities at the same price. See setup time, false positive rates & full results

We commissioned Doyensec to run a blind, independent benchmark of Aikido and XBOW on the same apps, at the same price. Aikido found 58% more verified vulnerabilities, and came out ahead on setup, speed and stability.

Why developer machines are now the number one target for supply chain attacks

Why Developer Machines Are the #1 Target for Supply Chain Attacks | Aikido

Teams at Omnea, Cognism, Glasswall, Raisin and the UK public sector reveal why EDR and MDM miss what's really happening on developer machines.

Engineering and security teams at Omnea, Cognism, Glasswall, and the UK public sector all independently flagged the same blind spot. This is what they're doing about it.

Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer

Attackers injected a credential stealer into 200+ versions of popular Laravel-Lang packages, delivering a credential stealer targeting cloud keys, SSH keys, browsers, crypto wallets and more.

5 Gitleaks alternatives and why they are better

5 Gitleaks Alternatives for Better Secrets Scanning in 2026

Looking for a Gitleaks alternative? We compare Betterleaks, TruffleHog, Aikido, GitHub Advanced Security, and Spectral so you can find the best secrets scanner for your team.

Gitleaks is no longer actively developed, and the secrets scanning landscape has moved fast. We compare the five strongest alternatives in 2026, including Betterleaks, TruffleHog, Aikido, GitHub Advanced Security, and Spectral, so you can find the right fit for your stack.

The Wild West of VS Code extensions and how a poisoned extension breached GitHub

A poisoned VS Code extension breached GitHub yesterday, one day after Nx Console (2.2M installs) was compromised for 18 minutes on the Visual Studio Marketplace and reached every user with auto-update on.

GitHub breached via a malicious VS Code extension: why developer devices are the real target

GitHub Breached via VS Code Extension | Developer Supply Chain Attack 2026

GitHub confirmed a poisoned VS Code extension compromised an employee device, exposing 3,800 internal repos. Why developer workstations are now the top supply chain target.

Microsoft's durabletask package on PyPi Compromised. Mini Shai Hulud attacks again... again!

Three progressively compromised versions of a Microsoft-adjacent Python package deliver a full-featured infostealer that spreads through AWS and Kubernetes, exfiltrates every cloud credential it can find, and wipes disks on Israeli and Iranian systems

Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages

Mini Shai-Hulud Strikes Again: npm Worm Compromises Hundreds of @antv Packages

The Mini Shai-Hulud npm worm has hit Alibaba's @antv packages, echarts-for-react, and timeago.js. The payload steals CI/CD secrets, plants backdoors in VS Code and Claude Code, and spreads by republishing compromised packages. Here is what happened and how to protect your team.

The Mini Shai-Hulud npm worm is back with its largest wave yet, compromising hundreds of packages across Alibaba's data visualization ecosystem. Our malware team is tracking over 2,700 rogue GitHub repos created with stolen tokens as the worm continues to spread.

Penetration testing vs. red teaming: what’s the difference?

Penetration Testing vs. Red Teaming: What's the Difference?

Not sure whether you need a pentest or a red team engagement? This guide breaks down the key differences, when to use each, and how AI is changing both.

Penetration testing and red teaming are both ways to stress test your security, but they're not the same thing. This post breaks down how each works, when to use one over the other, and where AI pentesting is changing the equation.

Google API keys keep working after you delete them

Google API keys keep working after you delete them long enough to be exploited

Deleting a Google API key doesn't revoke it immediately. Our testing found successful authentications up to 23 minutes after deletion, and Google has declined to fix it.

Deleting a Google API key doesn’t revoke it immediately. Our testing found successful authentications up to 23 minutes after deletion, and Google declined to fix it.

Shadow AI is a fear response, and banning it makes it worse

Why shadow AI risks start with fear (and banning makes them worse)

Employees aren't using unapproved AI tools to cause problems. They're scared of falling behind. Here's why banning shadow AI increases your security risk, and what to do instead.

Shadow AI is a fear response. Employees are hiding the tools they use because they're correctly reading a job market that demands AI skills. Here's why banning makes it worse, and what to do instead.

Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack

Mini Shai-Hulud is back, compromising 169 npm packages across TanStack, UiPath, Squawk, and more to steal developer and CI/CD secrets, then spread through trusted publishing workflows.

The complete GitHub Actions security checklist

Security Checklist for GitHub Actions

GitHub Actions misconfigurations have been behind some of the biggest supply chain attacks of 2025 and 2026. Here's what went wrong and how to prevent them from happening to your org.

GitHub Actions misconfigurations have been behind some of the biggest supply chain attacks of 2025 and 2026. Here's a practical checklist of how to protect yourself from them.

Top OWASP scanners in 2026 for web application security

Best OWASP Scanners in 2026 for Web App Security

Most scanners don't cover the full OWASP Top 10. We break down the top OWASP scanners in 2026 so you can choose one that actually keeps you covered.

Most OWASP scanners don't cover the full Top 10. This guide breaks down the top tools in 2026, what each one actually covers, and which scanner delivers complete coverage without the noise.

Rolling out developer security in a 5,000+ engineer organization

Developer Security at Scale: A CISO's Rollout Guide

Most developer security rollouts fail because they're designed like software deployments, not cultural changes. A practitioner's guide for enterprise CISOs.

Most developer security rollouts fail because they're designed like software deployments, not cultural changes. Here's the phased model experienced CISOs converge on to fix that.

Security metamorphosis: a Mythos-ready architecture checklist for autonomous AI attacks

AppSec has flatlined under modern complexity. Project Glasswing and the Mythos era demand a security discipline that operates at the velocity of the threats it faces.

Why browser extensions are a major security risk and what you can do about it

Browser extensions have lots of security risks, more than we care to admit. We discuss the full extent of the threat and what both individuals and organizations can do about it.

Top CVE scanners in 2026 to identify known vulnerabilities

Top CVE Scanners in 2026: Compared by Coverage, Intelligence, and Auto-Fix

We evaluated the top CVE scanners in 2026 on coverage breadth, intelligence sources, signal-to-noise ratio, and auto-fix capability. Here's how they compare and which is right for your stack.

Not all CVE scanners are built the same. We compared the top options in 2026 on coverage breadth, intelligence sources, signal-to-noise ratio, and auto-fix capability, so you can find the right fit for your stack.

Malware found in popular PyTorch Lightning version 2.6.2 and 2.6.3, stealing credentials, crypto wallets, and VPN configs as part of the Mini Shai-Hulud campaign.

A practical CTO security checklist to be Mythos-ready

Mythos-Ready Checklist

A practical checklist for SaaS CTOs navigating a world with Mythos and agentic AI threats. Built around the defender's advantage: you have context attackers have to work to get. Covers the controls, practices, and operational habits that determine whether your team finds and fixes issues before someone else does.

Someone published four versions of a fake "tanstack" package in 27 minutes to steal your .env files

Four published versions of a fake "tanstack" package uploaded in 27 minutes that want to steal your .env files

A fake "tanstack" npm package published four malicious versions in 27 minutes today, exfiltrating .env files via a postinstall hook. Here's what happened, who was affected, and how to rotate your credentials.

Aikido integrates with AWS Kiro: Catching in review doesn't scale anymore

Aikido x Kiro | Catching in review doesn't scale anymore

AI agents writing your code. Aikido integrates directly into AWS Kiro's agentic workflow to keep security in the loop, automatically, from the first line. Aikido is AWS's first global security partner for Kiro.

Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealer

Compromised SAP npm packages use a Bun-based preinstall payload to steal GitHub, npm, cloud, and CI secrets, then spread via GitHub using OhNoWhatsGoingOnWithGitHub.

It's time to treat browser extensions like supply chain attack vectors

It's time to treat browser extensions like supply chain attack vectors | Lessons learned from the Vercel breach

The Vercel breach followed a pattern the security industry knows well, where third-party code is implicitly trusted, then compromised upstream. We have a framework for that. We just haven't applied it to browser extensions yet. (Spoiler: We do this for software dependencies)

Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm

Malware found in @bitwarden/cli v2026.4.0 steals SSH keys, cloud secrets, and AI coding tool credentials, then spreads through victims' own npm packages. Inside: a worm calling itself "Shai-Hulud: The Third Coming."

GPT-Proxy Backdoor in npm and PyPI turns Servers into Chinese LLM Relays

A newly discovered npm and PyPI malware campaign installs hidden LLM proxies on compromised servers, turning them into relay nodes for LLM traffic.

Roundcube XSS chained with cookie tossing for full inbox access

We found a stored XSS in Roundcube's draft attachment endpoint that, chained with a cookie tossing technique, gives an attacker full access to a victim's inbox. Here's how the exploit chain works and how it was patched

Introducing Device Protection: Security for Developer Devices

Aikido Device Protection: Security for Developer Devices | Aikido

Supply chain attacks target developer devices. Aikido Device Protection monitors every install across npm, PyPI, VS Code extensions, browser extensions, and AI tools.

Multiple Cross-Site Scripting (XSS) Vulnerabilities in Mailcow

Multiple XSS Vulnerabilities Found in Mailcow, Including Unauthenticated Account Takeover

Aikido's AI pentest agent found three XSS vulnerabilities in Mailcow, one of which let unauthenticated attackers take over administrator accounts. All issues have been patched as of version 2026-03b.

Aikido's AI pentesting agents found three XSS vulnerabilities in Mailcow, a widely used self-hosted email server. The most severe allowed unauthenticated attackers to inject a payload into Autodiscover logs that would execute when an admin viewed them, enabling full account takeover. All three have been fixed since version 2026-03b.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

June 13, 2026

•

News

Full Fathom Five: The context of Anthropic’s Mythos-class public release

You never needed Mythos to find your IDORs and business logic flaws. A look at what Anthropic shipped with Fable 5, and why infosec stays a people problem at heart.

Tags/

#AI

#Mythos

#AppSec

#Article

June 11, 2026

•

News

npm v12 delivers one of the biggest security improvements in years

npm v12 makes install scripts opt-in by default, closing the install-time execution path behind a year of npm supply chain worms from Nx to Red Hat.

Tags/

#NPM

#open-source

June 11, 2026

•

Product & Company Updates

Aikido x Docker: less noise, more signal in your containers

Scan Docker Hardened Images in Aikido with automatic VEX filtering for non-exploitable CVEs.

Tags/

No items found.

June 10, 2026

•

News

Code is being written everywhere, and the device is the only constant

Developers are coding everywhere. AI agents, Slack bots, and MCP servers have made the developer device the biggest security blindspot.

Tags/

#Aikido Device Protection

June 10, 2026

•

News

SBOMs in 2026: Everyone's generating them, no one's using them

ENISA's 2026 SBOM adoption report covers 334 organizations and surfaces a consistent gap between generating SBOMs and actually using them. Here is what stood out.

Tags/

#SBOM

June 2, 2026

•

News

Why EDR and proxy won’t save you from supply chain malware

EDR and proxies weren't built for supply chain malware. When malicious code arrives through npm install, it looks like normal behavior. Here's why that matters.

Tags/

#Vulnerabilities

#Aikido Device Protection

May 28, 2026

•

Guides & Best Practices

What MDM can't protect on developer machines (and what to do about it)

Tags/

#Aikido Device Protection

#IDE Security

#AI Safety

#Software Supply Chain Security

May 27, 2026

•

Vulnerabilities & Threats

Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens

A polished Codex remote UI, the npm package codexui-android, has active development and thousands of weekly users. It has been quietly exfiltrating OpenAI auth tokens for the past month.

Tags/

#Vulnerabilities

#NPM

May 23, 2026

•

Vulnerabilities & Threats

Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer

Attackers injected a credential stealer into 200+ versions of popular Laravel-Lang packages, delivering a credential stealer targeting cloud keys, SSH keys, browsers, crypto wallets and more.

Tags/

#Malware

May 12, 2026

•

News

Shadow AI is a fear response, and banning it makes it worse

Shadow AI is a fear response. Employees are hiding the tools they use because they're correctly reading a job market that demands AI skills. Here's why banning makes it worse, and what to do instead.

Tags/

#AI

#AI Safety

#Legaltech

May 12, 2026

•

Vulnerabilities & Threats

Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack

Tags/

#Malware

May 6, 2026

•

Guides & Best Practices

Rolling out developer security in a 5,000+ engineer organization

Most developer security rollouts fail because they're designed like software deployments, not cultural changes. Here's the phased model experienced CISOs converge on to fix that.

Tags/

#Vulnerabilities

#AppSec

#Threat Modeling

#SCA

#SAST

August 12, 2026

•

Product & Company Updates

Finding vulnerabilities at every stage: what to run, and when

SAST, Deep PR Review, Code Security Audit and AI Pentest each catch different vulnerabilities at different stages. Here's when to use each, and why

AI Penetration Testing

August 5, 2026

•

Product & Company Updates

The Aikido Machine: on-prem AI pentesting that never leaves your network

Continuous AI pentesting for teams that can't use the cloud. The Aikido Machine keeps models, code, and results entirely inside your network.

AI Penetration Testing

Announcements

Continuous Pentesting

European Cyber Security

July 14, 2026

•

Product & Company Updates

How Aikido Intel detects malware and vulnerabilities first

Aikido Intel is a real-time feed that catches malware and undisclosed vulnerabilities across open-source ecosystems, often within 8 minutes of release.

intel

Aikido Device Protection

SCA

August 4, 2026

•

Vulnerabilities & Threats

Keyv and friends compromised in active Shai-Hulud supply chain attack

Mini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub account

Malware

July 31, 2026

•

Vulnerabilities & Threats

Anthropic's Fever Dream: Claude's package that stole real keys

Anthropic disclosed an agent that pushed real malware to PyPI. We think we found the package, and every mistake in it points back to the AI.

AI Safety

Malware

July 19, 2026

•

Vulnerabilities & Threats

SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts

SleeperGem: two dormant RubyGems maintainer accounts were hijacked to inject malware into trusted gems, one with over 500,000 total downloads

Malware

June 12, 2026

•

DevSec Tools & Comparisons

5 Socket security alternatives and why they are better

Aikido Zen

Malware

open-source

August 19, 2025

•

DevSec Tools & Comparisons

Top 13 Dynamic Application Security Testing (DAST) Tools in 2026

Discover the 13 top best Dynamic Application Security Testing (DAST) tools in 2026. Compare features, pros, cons, and integrations to choose the right DAST solution.

Tools

DAST

July 18, 2025

•

DevSec Tools & Comparisons

Top 14 Container Scanning Tools in 2026

Discover the best 14 Container Scanning tools in 2026. Compare features, pros, cons, and integrations to choose the right solution for your DevSecOps pipeline.

Tools

Container Scanning