Blog
Research, perspectives, and field notes on where security is heading.
The Loop
Spring Security 7.0.0–7.0.4 silently discards the servlet-path attribute in XML authorization rules, enabling unauthenticated access to protected endpoints.
· Cantina
The Loop
Current evidence enables faster incident response by making unusual execution paths queryable rather than requiring manual reconstruction.
· Cantina
The Loop
Analysis of how the Checkmarx supply-chain incident demonstrates security tools can become vectors for attack when given privileged access to CI/CD environments and developer workflows.
· Cantina
The Loop
A vulnerability in simple-git demonstrates how helper libraries in trusted automation workflows can become serious security exposures.
· Cantina
The Loop
Cantina integrates endpoint detection and device management capabilities through partnerships with CrowdStrike and Swif.
· Cantina
The Loop
Framework for managing AI security risks in healthtech before product launch, covering PHI handling, code review, vendor management, and regulatory compliance.
· Cantina
The Loop
Fragmented security stacks grow in tools but fail to improve coverage due to manual cross-system context assembly.
· Cantina
The Loop
Annual SOC 2 audits provide historical snapshots but fail to address current security postures that regulators and buyers increasingly demand.
· Cantina
The Loop
A critical RCE vulnerability in Apache ActiveMQ's management plane exposes how security gaps persist across organizational silos.
· Cantina
The Loop
Analysis of how a malicious Bitwarden CLI package bypassed source controls through npm registry compromise.
· Cantina
The Loop
A guide to evaluating agent accountability by examining whether security platforms can trace actions back to initiating users and their delegated authority.
· Cantina
The Loop
Healthcare systems face substantial security exposure at data handoff points between EHRs, APIs, payers, and connected platforms.
· Cantina
Page 3 of 25 · 294 posts