DevSecOps

The Mini Shai-Hulud Worm and the New Era of CI/CD Exploitation

In this post we break down the technical mechanics of TeamPCP’s recent campaign, the impact on the developer ecosystem, and the urgent steps needed to secure software supply chains.

SBOM 101: Why Transparency is a Cybersecurity Imperative

In this post, we define the Software Bill of Materials (SBOM) and explain why it has become a critical foundation for modern cybersecurity.

The AI Risk Landscape: How ChatGPT Is Shaping the Way Threat Actors Work

Flashpoint assesses that ChatGPT will lower the barrier to entry for basic hacking tasks, such as scanning open ports, crafting phishing emails, and deploying virtual machines for low-sophisticated threat actors.

What You Need to Know About the Apache Commons Text Flaw (CVE-2022-42889)

Vulnerability researchers and media sources are paying a lot of attention to CVE-2022-42889, a vulnerability affecting the open source library Apache Commons Text, which could potentially allow a malicious actor to execute arbitrary code.