@oxsecurity – Blog | Pasteblog

Features Privacy Terms Credits

Public

Shai-Hulud Outbreak Debrief: The Worm Evolves into MCP

AI-SPM vs. ASPM (and Why AINAPP Is What Comes Next)

Agentic AI Security: Risks and Best Practices for Autonomous Agents

Did We Just Witness Step One of the Autonomous AI Arms Race?

CVE-2026-44613: Turning a CSRF into Silent Unauthorized Actions

A Massive Shai-Hulud Campaign Hits npm: +440 Packages Compromised, Over 2B Monthly Downloads

OWASP Top 10 2025: How Classic Risks Change When AI Writes the Code

Securing the Software Supply Chain: A Critical Priority for 2026

SAST vs DAST vs IAST: Which Testing Method Wins Where in 2026

Reachability Analysis: Eliminating Vulnerability Backlogs

OX Security Becomes First Prompt-to-Runtime Security Platform, Leading the Evolving AINAPP Category

In the Mythos Age, 90% of Your Security Budget Protects the Wrong Layer

OX Security Named a Sample Vendor Across Three Categories in the Gartner® Hype Cycle™ for Application Security, 2026

Shift Down, Not Just Left: Why Security Must Adapt to Agentic Era

CVE-2026-63764: SSRF in LMDeploy’s OpenAI-Compatible API Server

CVE-2026-59873: Decompression DoS Via Unlimited Input In node-tar, 90M Weekly Downloads Affected

CVE-2026-3602: SQL Injection in IBM App Connect Enterprise Leads to Code Execution

AsyncAPI npm organization compromised, 2M weekly downloads affected

Subscribe via RSS

@oxsecurity – Blog | Pasteblog