Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

appsentinels

Next.js Vulnerability Exposes Credentials and Protected Data - Why Runtime API Security Matters

May 20, 2026 By AppSentinels In AppSentinels
A newly disclosed security issue, tracked as CVE-2026-44578, affecting Next.js applications is raising concerns across the developer and security communities after researchers identified multiple authorization bypass and middleware evasion paths that could expose protected application data and credentials. The vulnerabilities impact several versions of Next.js and allow attackers to bypass middleware-based authorization controls using crafted requests and route manipulation techniques.
Read Post
cycognito

Emerging Threat: (CVE-2026-20182) Cisco Catalyst SD-WAN Authentication Bypass

May 20, 2026 By Igal Zeifman In CyCognito
CVE-2026-20182 is an authentication bypass vulnerability in Cisco Catalyst SD-WAN Controller (formerly vSmart) and Cisco Catalyst SD-WAN Manager (formerly vManage). The flaw sits in the peering authentication path of the vdaemon service running over DTLS on UDP port 12346, the same control-plane service involved in CVE-2026-20127 earlier in 2026. It is not a patch bypass of that earlier issue, but a separate weakness in the device-type handling of the control connection handshake.
Read Post
cycognito

Emerging Threat: (CVE-2026-42945) NGINX Rift Heap Overflow in Rewrite Module

May 20, 2026 By Igal Zeifman In CyCognito
CVE-2026-42945, nicknamed "NGINX Rift", is a heap buffer overflow in the ngx_http_rewrite_module component of NGINX. It has sat in the project's source code since 2008. F5 disclosed the flaw on May 13, 2026, after responsible disclosure by researchers at depthfirst, who reported finding it through an autonomous code scanning system.
Read Post
Snyk

The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised

May 19, 2026 By Liran Tal In Snyk
The ink was barely dry on our coverage of the AntV Shai Hulud supply chain attack when a new compromise surfaced in the Python ecosystem. The target this time is durabletask, an open source Python package associated with Microsoft, used for building durable, fault-tolerant workflow orchestration on top of the Durable Task Framework. The latest safe version of durabletask is 1.4.0, and three known versions have been yanked from the PyPI registry.
Read Post
detectify

Understanding the OWASP Top 10 2025 for Modern Application Security

May 19, 2026 By Detectify In Detectify
In the world of application security, vulnerabilities are always a moving target. As modern applications keep becoming increasingly API-driven, cloud-native, and dependent on third-party services, the attack surface has expanded dramatically. For years, the OWASP Top 10 has served as the North Star for security professionals, providing a consensus-based ranking of the most critical web application security risks.
Read Post

FreeType Vulnerability Exposed: How Hackers Exploit Outdated Libraries (And How to Fix It)

May 19, 2026 By VISTA InfoSec In VISTA InfoSec
Most developers have never heard of FreeType — but attackers are actively exploiting it right now. If your system is running an outdated version of this widely used font rendering library, you could be sitting on a critical vulnerability without even knowing it. In this video, we break it all down: What you'll learn.
View Video
Snyk

Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account

May 18, 2026 By Liran Tal In Snyk
A supply chain attack affecting the @antv data visualization ecosystem and related npm packages is actively spreading through the npm registry. The attack, attributed to a threat group called TeamPCP and branded as another wave of the Mini Shai-Hulud campaign, published more than 300 malicious package versions across 323 packages in a 22-minute automated burst on May 19, 2026. The packages collectively represent approximately 16 million weekly downloads.
Read Post

Mini Shai-Hulud: The Most Sophisticated NPM Supply Chain Attack of 2026

May 18, 2026 By Snyk In Snyk
On May 11, 2026, the TanStack namespace was hit by a "Mini Shai-Hulud" supply chain attack. Unlike typical attacks, this did not involve stolen credentials; instead, the threat group TeamPCP hijacked the legitimate GitHub Actions release pipeline. This video covers the technical details of the OIDC token extraction, the "Dead Man's Switch" that triggers a rm -rf / upon credential revocation, and the mandatory remediation order you must follow to save your data. We also discuss how to harden your workflow using release-age cooldowns and OIDC pinning.
View Video

Attackers Don't Care About Your CVSS Score

May 18, 2026 By CrowdStrike In CrowdStrike
No blind spots. No waiting. Just visibility that works. Customers using Falcon Exposure Management say it has changed how they view and prioritize risk. They’re getting instant clarity across cloud, endpoint, and identity — knowing exactly which exposures to address first. They’re cutting through noise, saving time, and acting faster with AI-powered context from ExPRT.AI. In this video, they share how Falcon Exposure Management delivers the full picture — and why they’ll never go back to legacy VM tools.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.