Security.io Intelligence DeskFriday, 4 September 2026
Independent analysis
for security executives
The Security.io DailyThe Weekday Intelligence Edition
Free to readers
Supported by underwriters
Intelligence desk

Application Security

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-09-03Artifactory authentication bypass exploitation raises build-control-plane riskApplication Security
2026-09-02JFrog Artifactory admin bypass forces patch-and-compromise decisionVulnerability Management
2026-09-02Langflow exploitation shifts AI tooling into credential containmentAI Security
2026-08-26Actively exploited Gitea flaw puts the software forge in scopeVulnerability Management
2026-08-26Public SharePoint chain converts authentication bypass into RCEVulnerability Management
2026-08-24Malicious Rust crates turn routine builds into incident investigationsSupply Chain
2026-08-21Poisoned Rust crates turned ordinary builds into code executionSupply Chain
2026-08-19StubMaker Ruby gems turn package installs into credential theftSupply Chain
2026-08-18Active Ray exploitation turns developer AI environments into an incident questionAI Security
2026-08-17SAP Commerce Cloud exploitation attempts collapse the patch windowApplication Security
2026-08-12AI vulnerability artefacts need semantic verification, not a successful runAI Security
2026-08-11Poisoned BdThemes API response converts trusted WordPress sessions into persistenceSupply Chain
2026-08-10Self-evolving agent skills create a trajectory-poisoning control gapAI Security
2026-08-10The keyv/cacheable npm worm changes the order of containmentSupply Chain
2026-08-06PURPOSE shows how RAG poisoning can evade contradiction checksAI Security
2026-08-05Agent frameworks need containment after prompt injection succeedsAI Security
2026-08-05GitHub event streams belong in active detection, not audit storageSupply Chain
2026-08-05Overdue WordPress exploit response now requires compromise evidenceVulnerability Management
2026-08-03Actively exploited SharePoint flaw demands compromise evidence after emergency remediationVulnerability Management
2026-07-31Amazon links four npm compromises to one DPRK groupSupply Chain
2026-07-28Fastjson 1.x exploitation turns dependency discovery into an emergencyApplication and Software Supply Chain Security
2026-07-27GitHub and PyPI put time between a new package release and enterprise trustApplication and Supply-Chain Security
2026-07-17LegacyHive reopens the coordinated-disclosure argumentVulnerability research
2026-07-16SharePoint is no longer a patch question; it is a compromise decisionVulnerability desk
2026-07-14Dialogflow flaws show that conversational agents have control planesAI security
2026-07-14SAP patching remains a business-process dependencyEnterprise applications