.avif)
Sooraj Shah
Blog posts by Sooraj Shah
AI Pentesting: Minimum Safety Requirements for Security Testing
AI pentesting systems act autonomously against live environments. Learn when AI pentesting is safe to use, the minimum technical safeguards required, and how to evaluate AI security testing tools responsibly.
The CISO Vibe Coding Checklist for Security
A practical security checklist for CISOs managing AI and vibe-coded applications. Covers technical guardrails, AI controls, and organizational policies.
Critical n8n Vulnerability Allows Unauthenticated Remote Code Execution (CVE-2026-21858)
A critical vulnerability in n8n (CVE-2026-21858) allows unauthenticated remote code execution on self-hosted instances. Learn who is affected and how to remediate.
How Engineering and Security Teams Can Meet DORA’s Technical Requirements
Understand DORA’s technical requirements for engineering and security teams, including resilience testing, risk management, and audit-ready evidence.
IDOR Vulnerabilities Explained: Why They Persist in Modern Applications
Learn what an IDOR vulnerability is, why insecure direct object references persist in modern APIs, and why traditional testing tools struggle to detect real authorization failures.
MongoBleed: MongoDB Zlib Vulnerability (CVE-2025-14847) and How to Fix It
MongoBleed, tracked as CVE-2025-14847, allows unauthenticated memory disclosure in MongoDB via zlib compression. See impact and remediation.
OWASP Top 10 for Agentic Applications (2026): What Developers and Security Teams Need to Know
Learn the OWASP Top 10 for Agentic Applications. Understand the top AI agent security risks, real-world examples, and how to harden your environment.
Critical React & Next.js RCE Vulnerability (CVE-2025-55182): What You Need to Fix Now
Learn how CVE-2025-55182 and the related Next.js RCE affect React Server Components. See impact, affected versions, and how to fix. Aikido now detects both issues.
OWASP Top 10 2025: Official List, Changes, and What Developers Need to Know
Discover what’s new in the OWASP Top 10 2025, including software supply chain failures and error handling risks, and how to strengthen your AppSec program.
How Aikido Makes Threat Modeling Practical for Developers
Aikido transforms threat modeling into a developer-first, holistic, automated process with continuous monitoring across code and cloud environments
Get secure now
Secure your code, cloud, and runtime in one central system.
Find and fix vulnerabilities fast automatically.
