🧰 Aikido Security

The items that name it 47

• Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
  articleas classification.technologies2026-10-29
• How to patch PHP2Shell with free Aikido Images
  articleas classification.technologies2026-10-26
• Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
  advisoryas classification.technologies2026-10-22
• eMudhra CA compromise: eight private keys, and one of them is 4
  articleas classification.key entities2026-10-22
• Billy Lee (@billyozno) on X
  threadas classification.technologies2026-10-21
• Software supply chain security best practices for 2026
  articleas classification.technologies2026-10-21
• Your CVE is reachable. But is it exploitable?
  articleas classification.technologies2026-10-17
• Tensorlake npm Package Compromised to Spread Shai-Hulud Worm
  articleas classification.technologies2026-10-08
• tl;dr sec #349 - Vulns & Exploits in the AI Era, Package Manager Sandboxing, Testing AI Sandboxes
  articleas classification.key entities2026-10-08
• ZeroShield - Securing AI Infrastructure (@zeroshieldai) on X
  threadas classification.technologies2026-10-01
• Novel supplychain.local Go worm appears
  writeupas classification.technologies2026-09-23
• Cyber Resilience Act is here! Myth busting and first impressions
  articleas classification.technologies2026-09-23
• Dependabot vs Renovate
  articleas classification.technologies2026-09-14
• The CVE spike across major software companies is a remediation problem
  articleas classification.technologies2026-09-10
• MECCHA CHAMELEON can't hide from the RCE
  writeupas classification.technologies2026-09-03
• The dark figure of supply chain detection
  articleas classification.technologies2026-09-01
• Securing Docker images
  articleas tools2026-08-28

  Provides new patched builds of the same base image versions teams already run, hardening and patching Docker images.

• Software supply chain security requires decisions rather than defaults
  articleas classification.technologies2026-08-26
• Could OpenClaw have actually hacked that Australian gym? We decided to test it.
  writeupas classification.technologies2026-08-25
• What is CVE remediation in 2026?
  articleas tools2026-08-21

  Security platform that backports fixes for actively exploited open source CVEs on CISA's Known Exploited Vulnerabilities list and releases them to the community for free; runs Libraries alongside SCA.

• We burned 11.7bn tokens to find the best cyber AI model
  articleas classification.technologies2026-08-21
• Finding vulnerabilities at every stage: what to run, and when
  articleas classification.technologies2026-08-12
• Better generic secrets detection starts with finding non-secrets
  writeupas classification.technologies2026-07-23
• SQL injection isn't dead
  articleas classification.technologies2026-07-22
• SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor
  writeupas classification.key entities2026-07-19
• How Aikido Intel detects malware and vulnerabilities first
  articleas classification.technologies2026-07-13
• What is a dependency firewall?
  articleas classification.technologies2026-07-13
• Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry
  writeupas classification.technologies2026-07-09
• Predicting MongoDB ObjectId continuously in Rocket.Chat
  writeupas classification.technologies2026-07-06
• Authentication Bypass in the default configuration phpBB
  writeupas classification.technologies2026-07-03
• And another one. GitHub ships break-glass credential revocation
  articleas tools2026-07-01

  Monitors applications for compromised packages in real time, alerting before a credential harvester runs, powered by Aikido Intel which analyzes new package versions as soon as they go live.

• Packagist is now protected by Aikido Intel and other updates to the PHP registry
  articleas classification.technologies2026-06-26
• Over 140 popular Mastra npm Packages Hit by Supply Chain Attack
  writeupas classification.technologies2026-06-17
• Malicious JetBrains Marketplace plugins steal AI API keys from developers
  articleas tools2026-06-16

  Security research firm that discovered and reported the coordinated malicious plugin campaign on JetBrains Marketplace

• Full Fathom Five: The context of Anthropic’s Mythos-class public release
  articleas classification.technologies2026-06-13
• SBOMs in 2026: Everyone's generating them, no one's using them
  articleas tools2026-06-10

  Supply chain security platform: generates SBOMs, enriches them with license/copyright data, imports supplier SBOMs, and ties them into vulnerability and licensing workflows

• What is AI SAST?
  articleas classification.technologies2026-06-06
• Aikido vs XBOW: AI Pentest Platforms Compared
  writeupas classification.technologies2026-06-04
• What MDM can't protect on developer machines (and what to do about it)
  articleas classification.technologies2026-05-28
• GitHub breached via a malicious VS Code extension: why developer devices are the real target
  articleas classification.technologies2026-05-20
• Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages
  articleas classification.technologies2026-05-19
• The complete GitHub Actions security checklist
  articleas classification.technologies2026-05-11
• Tradecraft Tuesday Recap: axios npm Supply Chain Compromise
  articleas classification.technologies2026-04-21
• AikidoSec/safe-chain
  repoas classification.technologies
• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  articleas tools

  Security firm that published a report on the campaign

• Betterleaks — secrets scanner from the Gitleaks creator
  repoas classification.technologies
• Betterleaks: Gitleaks creator's open-source secrets scanner successor
  articleas classification.technologies