corpus.blog
41554 blogs · [ { "id": "01a0d897-7b93-7109-a0b8-6ee9fb156994", "title": "Top CodeQL alternatives in 2026", "url": "https://www.aikido.dev/blog/top-codeql-alternatives", "published_at": "2026-09-24T19:12:00+00:00" }, { "id": "01a0d897-7b93-7109-a0b8-6ee9fbbf9d41", "title": "Top Greptile alternatives in 2026", "url": "https://www.aikido.dev/blog/top-greptile-alternatives", "published_at": "2026-09-23T16:01:00+00:00" }, { "id": "01a0d897-7b93-7109-a0b8-6ee9fc0f9e9c", "title": "Aikido and Deel: set up once, secure every hire", "url": "https://www.aikido.dev/blog/aikido-deel-partnership", "published_at": "2026-09-23T13:00:00+00:00" }, { "id": "01a0d897-7b93-7109-a0b8-6ee9fc3b5746", "title": "Novel supplychain.local Go worm appears", "url": "https://www.aikido.dev/blog/supplychain-local-memtensor-npm-pypi", "published_at": "2026-09-23T07:41:00+00:00" }, { "id": "01a0d897-7b93-7109-a0b8-6ee9fce3a51e", "title": "Send GitLab an email, push to main", "url": "https://www.aikido.dev/blog/gitlab-email-push-to-main", "published_at": "2026-09-23T06:00:00+00:00" }, { "id": "01a0d897-7b93-7109-a0b8-6ee9fdcf03f3", "title": "Cyber Resilience Act is here! Myth busting and first impressions", "url": "https://www.aikido.dev/blog/cyber-resilience-act-myth-busting-first-impressions", "published_at": "2026-09-23T01:30:00+00:00" }, { "id": "01a0d897-7b93-7109-a0b8-6ee9fdddbad8", "title": "Graphalgo campaign spreads to Terraform providers and Go Modules", "url": "https://www.aikido.dev/blog/graphalgo-terraform-go-modules", "published_at": "2026-09-22T12:18:00+00:00" }, { "id": "01a0c510-f3d6-727d-8045-5190458f696b", "title": "Introducing Aikido Altar: the model that makes sovereign security intelligence possible", "url": "https://www.aikido.dev/blog/aikido-altar-open-weight-ai-sovereign-security", "published_at": "2026-09-21T13:30:00+00:00" }, { "id": "01a0b5c4-0232-714c-83df-403fdf86d0e5", "title": "Top on-prem AI pentesting tools in 2026", "url": "https://www.aikido.dev/blog/top-on-prem-pentesting-tools", "published_at": "2026-09-17T22:40:00+00:00" }, { "id": "01a0b5c4-0232-714c-83df-403fdf91fd6f", "title": "Aikido achieves AWS Security Competency for Application Security", "url": "https://www.aikido.dev/blog/aws-security-competency-announcement", "published_at": "2026-09-17T12:00:00+00:00" }, { "id": "01a0b5c4-0232-714c-83df-403fe075f399", "title": "Top Qodo Alternatives for AI-Powered Code Assistance", "url": "https://www.aikido.dev/blog/qodo-alternatives", "published_at": "2026-09-16T21:55:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f861a248c", "title": "Top Aqua Security alternatives for cloud-native security in 2026", "url": "https://www.aikido.dev/blog/aqua-security-alternatives", "published_at": "2026-09-16T13:53:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f86e36ddd", "title": "Dependabot vs Renovate", "url": "https://www.aikido.dev/blog/dependabot-vs-renovate", "published_at": "2026-09-14T15:56:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f87687942", "title": "The CVE spike across major software companies is a remediation problem", "url": "https://www.aikido.dev/blog/cve-spike-remediation-problem", "published_at": "2026-09-10T10:10:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f87b6c08e", "title": "Jason Haddix: Stop fearing AI pentesting", "url": "https://www.aikido.dev/blog/stop-fearing-ai-pentesting", "published_at": "2026-09-08T18:48:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f88a10f5d", "title": "Compromised Flutter package on pub.dev contains XCSSET malware", "url": "https://www.aikido.dev/blog/compromised-flutter-package-on-pub-dev-contains-xcsset-malware", "published_at": "2026-09-08T16:12:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8990cdc1", "title": "Shai-Hulud Rises From the Dead after 111 days", "url": "https://www.aikido.dev/blog/shai-hulud-npm-resurfaces", "published_at": "2026-09-07T11:55:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f89d66c66", "title": "StyleSmuggler fix: patch the Magento and Adobe Commerce RCE", "url": "https://www.aikido.dev/blog/stylesmuggler-fix", "published_at": "2026-09-07T11:46:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8a5a7400", "title": "Stop breaking SLAs: how to patch vulnerabilities before the fix even ships", "url": "https://www.aikido.dev/blog/stop-breaking-slas", "published_at": "2026-09-04T14:27:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8ab0274f", "title": "Top Trivy alternatives for container and cloud scanning in 2026", "url": "https://www.aikido.dev/blog/trivy-alternatives", "published_at": "2026-09-04T14:23:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8ab02b60", "title": "MECCHA CHAMELEON can't hide from the RCE", "url": "https://www.aikido.dev/blog/meccha-chameleon-rce", "published_at": "2026-09-03T18:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8b6b5df6", "title": "Top DSPM tools in 2026", "url": "https://www.aikido.dev/blog/top-dspm-tools", "published_at": "2026-09-01T16:49:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8bced20b", "title": "The dark figure of supply chain detection", "url": "https://www.aikido.dev/blog/dark-figure-supply-chain-detection", "published_at": "2026-09-01T14:39:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8caacc4b", "title": "Popular code generator for TanStack Query hit by supply chain worm", "url": "https://www.aikido.dev/blog/popular-code-generator-for-tanstack-query-hit-by-supply-chain-worm", "published_at": "2026-08-28T21:25:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8cb1dd14", "title": "Securing Docker images", "url": "https://www.aikido.dev/blog/securing-docker-images", "published_at": "2026-08-28T20:29:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8d8cc595", "title": "Good riddance, TeamPCP. Now for the hard part.", "url": "https://www.aikido.dev/blog/teampcp-arrested-supply-chain", "published_at": "2026-08-27T11:40:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8e6062a6", "title": "Top Minimus alternatives in 2026", "url": "https://www.aikido.dev/blog/top-minimus-alternatives", "published_at": "2026-08-26T15:42:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8e8e65ff", "title": "Software supply chain security requires decisions rather than defaults", "url": "https://www.aikido.dev/blog/software-supply-chain-security-decisions-not-defaults", "published_at": "2026-08-26T10:15:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8f5fae2b", "title": "Aikido Security achieves ISO 42001:2023 certification for AI governance", "url": "https://www.aikido.dev/blog/aikido-iso-42001-certification", "published_at": "2026-08-26T10:10:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f8fa74304", "title": "Aikido launches agentic pentesting for Android apps", "url": "https://www.aikido.dev/blog/aikido-launches-agentic-pentesting-for-android-apps", "published_at": "2026-08-26T10:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f905d3946", "title": "Could OpenClaw have actually hacked that Australian gym? We decided to test it.", "url": "https://www.aikido.dev/blog/australian-gym-hack-openclaw-test", "published_at": "2026-08-25T12:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f90ab6c86", "title": "How Aikido finds more vulnerabilities than Mythos at half the cost", "url": "https://www.aikido.dev/blog/aikido-finds-more-vulnerabilities-claude-security-mythos", "published_at": "2026-08-24T11:38:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f90ec5428", "title": "Shai-Hulud was the best thing to happen to supply chain security", "url": "https://www.aikido.dev/blog/shai-hulud-trusted-publishing", "published_at": "2026-08-24T08:14:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9165b316", "title": "Top image hardening tools in 2026", "url": "https://www.aikido.dev/blog/top-image-hardening-tools", "published_at": "2026-08-21T20:42:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f924bfb08", "title": "Best enterprise AI pentesting tools for application security in 2026", "url": "https://www.aikido.dev/blog/top-enterprise-ai-pentesting-tools", "published_at": "2026-08-21T19:05:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f92ec54af", "title": "What is CVE remediation in 2026?", "url": "https://www.aikido.dev/blog/cve-remediation", "published_at": "2026-08-21T13:43:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f92fc98c2", "title": "We burned 11.7bn tokens to find the best cyber AI model", "url": "https://www.aikido.dev/blog/ai-model-benchmarks-aug-21-2026", "published_at": "2026-08-21T09:06:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f93af5b5b", "title": "Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack", "url": "https://www.aikido.dev/blog/two-popular-rust-crates-arrayref-and-append-only-vec-compromised-in-supply-chain-attack", "published_at": "2026-08-20T11:30:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f93dcd5cf", "title": "AI pentesting evaluation checklist: What to look for in an AI pentesting vendor", "url": "https://www.aikido.dev/blog/ai-pentesting-vendor-checklist", "published_at": "2026-08-20T01:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f93f2f432", "title": "Yet another RCE in Gogs, but it's fixed this time!", "url": "https://www.aikido.dev/blog/fixed-rce-gogs-cve-2026-52813", "published_at": "2026-08-19T12:08:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f94cd810c", "title": "Top enterprise SCA tools in 2026", "url": "https://www.aikido.dev/blog/top-enterprise-sca-tools", "published_at": "2026-08-14T20:38:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9526932d", "title": "Top enterprise DAST tools in 2026", "url": "https://www.aikido.dev/blog/top-enterprise-dast-tools", "published_at": "2026-08-14T17:01:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f95733f95", "title": "Top unified security tools in 2026", "url": "https://www.aikido.dev/blog/top-unified-security-tools", "published_at": "2026-08-14T15:53:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f962e72a2", "title": "From Hugging Face to Fable: this summer shows AI control matters more than trust", "url": "https://www.aikido.dev/blog/why-you-need-your-own-ai-security-infrastructure", "published_at": "2026-08-13T13:05:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f966ccc6a", "title": "Finding vulnerabilities at every stage: what to run, and when", "url": "https://www.aikido.dev/blog/which-security-tool-do-you-need", "published_at": "2026-08-12T13:30:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f96f57b35", "title": "What is AI harness engineering?", "url": "https://www.aikido.dev/blog/what-is-ai-harness-engineering", "published_at": "2026-08-06T19:26:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9728dbb5", "title": "Who was behind the attack? Possibly nobody", "url": "https://www.aikido.dev/blog/autonomous-agents-attacking-no-responsibility", "published_at": "2026-08-05T17:59:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f975f75ac", "title": "The Aikido Machine: on-prem AI pentesting that never leaves your network", "url": "https://www.aikido.dev/blog/the-aikido-machine-on-prem-ai-pentesting-that-never-leaves-your-network", "published_at": "2026-08-05T07:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f98372c7a", "title": "Keyv and friends compromised in active Shai-Hulud supply chain attack", "url": "https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack", "published_at": "2026-08-04T10:37:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9853148b", "title": "Top enterprise SAST tools 2026", "url": "https://www.aikido.dev/blog/top-enterprise-sast-tools", "published_at": "2026-07-31T20:05:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9892e380", "title": "Anthropic's Fever Dream: Claude's package that stole real keys", "url": "https://www.aikido.dev/blog/anthropic-rogue-agents-package-stole-keys", "published_at": "2026-07-31T16:10:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f98e708fe", "title": "Top Astra Security alternatives for automated pentesting in 2026", "url": "https://www.aikido.dev/blog/astra-alternatives", "published_at": "2026-07-31T14:25:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f99a723bb", "title": "Four incident-response decisions from the Hugging Face breach", "url": "https://www.aikido.dev/blog/hugging-face-open-ai-breach-takeaways", "published_at": "2026-07-29T21:37:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9a78facd", "title": "Top SAST tools 2026", "url": "https://www.aikido.dev/blog/top-sast-tools", "published_at": "2026-07-29T13:28:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9b401eb2", "title": "Top LLM security tools to protect AI applications", "url": "https://www.aikido.dev/blog/llm-security-tools", "published_at": "2026-07-24T18:41:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9c1701a5", "title": "Top Acunetix alternatives for automated vulnerability scanning", "url": "https://www.aikido.dev/blog/acunetix-alternatives", "published_at": "2026-07-24T13:51:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9cfa8824", "title": "Better generic secrets detection starts with finding non-secrets", "url": "https://www.aikido.dev/blog/better-generic-secrets-detection-non-secrets", "published_at": "2026-07-23T16:11:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9d6809bb", "title": "Finding eight high-severity vulnerabilities in NodeBB in six hours", "url": "https://www.aikido.dev/blog/eight-high-severity-vulnerabilities-nodebb", "published_at": "2026-07-22T21:44:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9e480af8", "title": "SQL injection isn't dead", "url": "https://www.aikido.dev/blog/sql-injection-isnt-dead", "published_at": "2026-07-22T15:03:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9f132c36", "title": "The upgrade trap: when upgrading is the wrong answer to a CVE", "url": "https://www.aikido.dev/blog/cve-upgrade-breaking-changes-open-source", "published_at": "2026-07-22T09:23:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725f9f73f8a2", "title": "Tyro's CISO: Being the \"Einstein of cybersecurity\" isn't enough if developers don't trust you", "url": "https://www.aikido.dev/blog/security-controls-developer-trust", "published_at": "2026-07-21T19:50:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa02dc558", "title": "What developers need to know about DSPM and data exposure in code", "url": "https://www.aikido.dev/blog/what-is-dspm", "published_at": "2026-07-20T16:15:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa089b98e", "title": "SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts", "url": "https://www.aikido.dev/blog/sleepergem-rubygems-supply-chain-attack", "published_at": "2026-07-19T08:45:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa0eca3b4", "title": "Unauthenticated RCE in WordPress core (wp2shell), via SQL injection", "url": "https://www.aikido.dev/blog/unauthenticated-rce-in-wordpress-wp2shell", "published_at": "2026-07-17T21:19:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa12f2ef5", "title": "Top Pentera alternatives for automated penetration testing", "url": "https://www.aikido.dev/blog/pentera-alternatives", "published_at": "2026-07-17T16:17:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa208b9e6", "title": "Benchmarking 13 AI models on rediscovering known CVEs", "url": "https://www.aikido.dev/blog/benchmarking-ai-models-known-cves", "published_at": "2026-07-16T11:24:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa2302279", "title": "The practical checklist for defending against supply chain attacks", "url": "https://www.aikido.dev/blog/supply-chain-attacks-checklist", "published_at": "2026-07-14T14:10:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa2b0759f", "title": "AsyncAPI npm packages backdoored via GitHub Actions", "url": "https://www.aikido.dev/blog/asyncapi-npm-packages-backdoored-via-github-actions", "published_at": "2026-07-14T10:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa319de87", "title": "How Aikido Intel detects malware and vulnerabilities first", "url": "https://www.aikido.dev/blog/aikido-intel-detects-malware-vulnerabilities-first", "published_at": "2026-07-13T22:12:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa33ee781", "title": "What is a dependency firewall?", "url": "https://www.aikido.dev/blog/what-is-a-dependency-firewall", "published_at": "2026-07-13T15:23:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa350dc7a", "title": "How to maintain code quality standards with AI code and vibe coding", "url": "https://www.aikido.dev/blog/code-quality-when-vibe-coding", "published_at": "2026-07-13T01:36:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa4338211", "title": "Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry", "url": "https://www.aikido.dev/blog/compromised-injectivelabs-exfiltrates-keys", "published_at": "2026-07-09T15:26:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa51898ec", "title": "AI Pentesting Buyer's Guide: How to evaluate AI pentesting vendors", "url": "https://www.aikido.dev/blog/ai-pentesting-buyers-guide", "published_at": "2026-07-09T09:55:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa5e27eef", "title": "Top Burp Suite alternatives for web application security testing", "url": "https://www.aikido.dev/blog/burp-suite-alternatives", "published_at": "2026-07-07T18:44:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa6bf8988", "title": "Top Chainguard alternatives 2026", "url": "https://www.aikido.dev/blog/top-chainguard-alternatives", "published_at": "2026-07-07T12:16:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa7247b8a", "title": "Predicting MongoDB ObjectId continuously in Rocket.Chat", "url": "https://www.aikido.dev/blog/predicting-mongodb-objectid-rocket-chat", "published_at": "2026-07-06T17:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa7f52096", "title": "Authentication Bypass in the default configuration phpBB", "url": "https://www.aikido.dev/blog/authentication-bypass-phpbb-technical-writeup", "published_at": "2026-07-03T23:45:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa8c49386", "title": "And another one. GitHub ships break-glass credential revocation", "url": "https://www.aikido.dev/blog/github-break-glass-credential-revocation", "published_at": "2026-07-01T04:06:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa9035b88", "title": "Aikido acquires Root to secure the supply chain", "url": "https://www.aikido.dev/blog/aikido-acquires-root", "published_at": "2026-06-30T14:23:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa991a162", "title": "npm now freezes high-impact accounts after risky account changes", "url": "https://www.aikido.dev/blog/npm-cooldown-account-changes-announcement", "published_at": "2026-06-26T19:35:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fa9b4b128", "title": "Top Koi alternatives in 2026", "url": "https://www.aikido.dev/blog/top-koi-alternatives", "published_at": "2026-06-26T16:57:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725faaa6424b", "title": "Packagist is now protected by Aikido Intel and other updates to the PHP registry", "url": "https://www.aikido.dev/blog/composer-protected-aikido-packagist", "published_at": "2026-06-26T07:52:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fab8df816", "title": "Everybody's shipping code they can't read", "url": "https://www.aikido.dev/blog/shipping-code-they-cant-read", "published_at": "2026-06-25T03:32:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fabd8645a", "title": "Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets", "url": "https://www.aikido.dev/blog/compromised-github-action-codfish-steals-secrets", "published_at": "2026-06-24T21:06:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fac2cb500", "title": "Aikido x Drydock | A way for maintainers to catch malware before it ships", "url": "https://www.aikido.dev/blog/drydock-pre-publish-package-review", "published_at": "2026-06-23T12:47:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725facbe8170", "title": "Aikido x OWASP: 200 free credits for individual members", "url": "https://www.aikido.dev/blog/aikido-x-owasp-200-free-credits-for-individual-members", "published_at": "2026-06-18T13:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fad164802", "title": "Over 140 popular Mastra npm Packages Hit by Supply Chain Attack", "url": "https://www.aikido.dev/blog/over-140-popular-mastra-npm-packages-hit-by-supply-chain-attack", "published_at": "2026-06-17T08:43:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fad8740f4", "title": "Multiple JetBrains IDE plugins caught stealing AI keys", "url": "https://www.aikido.dev/blog/multiple-jetbrains-ide-plugins-caught-stealing-ai-keys", "published_at": "2026-06-16T19:48:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fade26af1", "title": "Introducing AI Code Analysis: Find complex vulnerabilities hidden in your source code", "url": "https://www.aikido.dev/blog/introducing-code-audit-find-complex-vulnerabilities-hidden-in-your-codebase", "published_at": "2026-06-16T13:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725faecdb7df", "title": "Full Fathom Five: The context of Anthropic’s Mythos-class public release", "url": "https://www.aikido.dev/blog/fable-5-release-full-fathom", "published_at": "2026-06-13T03:06:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725faf4e86f9", "title": "5 Socket security alternatives and why they are better", "url": "https://www.aikido.dev/blog/socket-security-alternatives", "published_at": "2026-06-12T09:42:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb001ead6", "title": "npm v12 delivers one of the biggest security improvements in years", "url": "https://www.aikido.dev/blog/npm-v12-block-postinstall", "published_at": "2026-06-11T15:16:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb091d653", "title": "Aikido x Docker: less noise, more signal in your containers", "url": "https://www.aikido.dev/blog/docker-hardened-images-vex", "published_at": "2026-06-11T12:00:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb186c84f", "title": "Code is being written everywhere, and the device is the only constant", "url": "https://www.aikido.dev/blog/code-is-written-everywhere", "published_at": "2026-06-10T19:01:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb26447fe", "title": "SBOMs in 2026: Everyone's generating them, no one's using them", "url": "https://www.aikido.dev/blog/sboms-everyones-generating-them-no-ones-using-them", "published_at": "2026-06-10T13:53:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb2df4ff0", "title": "Compromised Rust crate onering performs code exfiltration", "url": "https://www.aikido.dev/blog/compromised-rust-crate-onering-performs-code-exfiltration", "published_at": "2026-06-10T10:22:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb35e7c14", "title": "10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forums", "url": "https://www.aikido.dev/blog/phpbb-authentication-bypass-rce", "published_at": "2026-06-10T08:56:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb4070d53", "title": "Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System", "url": "https://www.aikido.dev/blog/exploring-binding-gyp-npm-build-system", "published_at": "2026-06-09T13:25:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb44dc21d", "title": "What is AI SAST?", "url": "https://www.aikido.dev/blog/what-is-ai-sast", "published_at": "2026-06-06T17:30:00+00:00" }, { "id": "01a0b5c4-0233-72a9-8ede-725fb475bd2b", "title": "Top 5 Tenable Nessus alternatives in 2026", "url": "https://www.aikido.dev/blog/tenable-alternatives", "published_at": "2026-06-03T09:33:00+00:00" } ] posts Claim your blog
Back to aikido.dev
Blog · corpus.blog/blogs/aikido.dev/posts

aikido.dev

aikido.dev

2026

Top CodeQL alternatives in 2026original ↗
24 Sept 2026
Top Greptile alternatives in 2026original ↗
23 Sept 2026
Aikido and Deel: set up once, secure every hireoriginal ↗
23 Sept 2026
Novel supplychain.local Go worm appearsoriginal ↗
23 Sept 2026
Send GitLab an email, push to mainoriginal ↗
23 Sept 2026
Cyber Resilience Act is here! Myth busting and first impressionsoriginal ↗
23 Sept 2026
Graphalgo campaign spreads to Terraform providers and Go Modulesoriginal ↗
22 Sept 2026
Introducing Aikido Altar: the model that makes sovereign security intelligence possibleoriginal ↗
21 Sept 2026
Top on-prem AI pentesting tools in 2026original ↗
17 Sept 2026
Aikido achieves AWS Security Competency for Application Securityoriginal ↗
17 Sept 2026
Top Qodo Alternatives for AI-Powered Code Assistanceoriginal ↗
16 Sept 2026
Top Aqua Security alternatives for cloud-native security in 2026original ↗
16 Sept 2026
Dependabot vs Renovateoriginal ↗
14 Sept 2026
The CVE spike across major software companies is a remediation problemoriginal ↗
10 Sept 2026
Jason Haddix: Stop fearing AI pentestingoriginal ↗
8 Sept 2026
Compromised Flutter package on pub.dev contains XCSSET malwareoriginal ↗
8 Sept 2026
Shai-Hulud Rises From the Dead after 111 daysoriginal ↗
7 Sept 2026
StyleSmuggler fix: patch the Magento and Adobe Commerce RCEoriginal ↗
7 Sept 2026
Stop breaking SLAs: how to patch vulnerabilities before the fix even shipsoriginal ↗
4 Sept 2026
Top Trivy alternatives for container and cloud scanning in 2026original ↗
4 Sept 2026
MECCHA CHAMELEON can't hide from the RCEoriginal ↗
3 Sept 2026
Top DSPM tools in 2026original ↗
1 Sept 2026
The dark figure of supply chain detectionoriginal ↗
1 Sept 2026
Popular code generator for TanStack Query hit by supply chain wormoriginal ↗
28 Aug 2026
Securing Docker imagesoriginal ↗
28 Aug 2026
Good riddance, TeamPCP. Now for the hard part.original ↗
27 Aug 2026
Top Minimus alternatives in 2026original ↗
26 Aug 2026
Software supply chain security requires decisions rather than defaultsoriginal ↗
26 Aug 2026
Aikido Security achieves ISO 42001:2023 certification for AI governanceoriginal ↗
26 Aug 2026
Aikido launches agentic pentesting for Android appsoriginal ↗
26 Aug 2026
Could OpenClaw have actually hacked that Australian gym? We decided to test it.original ↗
25 Aug 2026
How Aikido finds more vulnerabilities than Mythos at half the costoriginal ↗
24 Aug 2026
Shai-Hulud was the best thing to happen to supply chain securityoriginal ↗
24 Aug 2026
Top image hardening tools in 2026original ↗
21 Aug 2026
Best enterprise AI pentesting tools for application security in 2026original ↗
21 Aug 2026
What is CVE remediation in 2026?original ↗
21 Aug 2026
We burned 11.7bn tokens to find the best cyber AI modeloriginal ↗
21 Aug 2026
Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attackoriginal ↗
20 Aug 2026
AI pentesting evaluation checklist: What to look for in an AI pentesting vendororiginal ↗
20 Aug 2026
Yet another RCE in Gogs, but it's fixed this time!original ↗
19 Aug 2026
Top enterprise SCA tools in 2026original ↗
14 Aug 2026
Top enterprise DAST tools in 2026original ↗
14 Aug 2026
Top unified security tools in 2026original ↗
14 Aug 2026
From Hugging Face to Fable: this summer shows AI control matters more than trustoriginal ↗
13 Aug 2026
Finding vulnerabilities at every stage: what to run, and whenoriginal ↗
12 Aug 2026
What is AI harness engineering?original ↗
6 Aug 2026
Who was behind the attack? Possibly nobodyoriginal ↗
5 Aug 2026
The Aikido Machine: on-prem AI pentesting that never leaves your networkoriginal ↗
5 Aug 2026
Keyv and friends compromised in active Shai-Hulud supply chain attackoriginal ↗
4 Aug 2026
Top enterprise SAST tools 2026original ↗
31 Jul 2026
Anthropic's Fever Dream: Claude's package that stole real keysoriginal ↗
31 Jul 2026
Top Astra Security alternatives for automated pentesting in 2026original ↗
31 Jul 2026
Four incident-response decisions from the Hugging Face breachoriginal ↗
29 Jul 2026
Top SAST tools 2026original ↗
29 Jul 2026
Top LLM security tools to protect AI applicationsoriginal ↗
24 Jul 2026
Top Acunetix alternatives for automated vulnerability scanningoriginal ↗
24 Jul 2026
Better generic secrets detection starts with finding non-secretsoriginal ↗
23 Jul 2026
Finding eight high-severity vulnerabilities in NodeBB in six hoursoriginal ↗
22 Jul 2026
SQL injection isn't deadoriginal ↗
22 Jul 2026
The upgrade trap: when upgrading is the wrong answer to a CVEoriginal ↗
22 Jul 2026
Tyro's CISO: Being the "Einstein of cybersecurity" isn't enough if developers don't trust youoriginal ↗
21 Jul 2026
What developers need to know about DSPM and data exposure in codeoriginal ↗
20 Jul 2026
SleeperGem: RubyGems supply chain attack targets dormant maintainer accountsoriginal ↗
19 Jul 2026
Unauthenticated RCE in WordPress core (wp2shell), via SQL injectionoriginal ↗
17 Jul 2026
Top Pentera alternatives for automated penetration testingoriginal ↗
17 Jul 2026
Benchmarking 13 AI models on rediscovering known CVEsoriginal ↗
16 Jul 2026
The practical checklist for defending against supply chain attacksoriginal ↗
14 Jul 2026
AsyncAPI npm packages backdoored via GitHub Actionsoriginal ↗
14 Jul 2026
How Aikido Intel detects malware and vulnerabilities firstoriginal ↗
13 Jul 2026
What is a dependency firewall?original ↗
13 Jul 2026
How to maintain code quality standards with AI code and vibe codingoriginal ↗
13 Jul 2026
Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetryoriginal ↗
9 Jul 2026
AI Pentesting Buyer's Guide: How to evaluate AI pentesting vendorsoriginal ↗
9 Jul 2026
Top Burp Suite alternatives for web application security testingoriginal ↗
7 Jul 2026
Top Chainguard alternatives 2026original ↗
7 Jul 2026
Predicting MongoDB ObjectId continuously in Rocket.Chatoriginal ↗
6 Jul 2026
Authentication Bypass in the default configuration phpBBoriginal ↗
3 Jul 2026
And another one. GitHub ships break-glass credential revocationoriginal ↗
1 Jul 2026
Aikido acquires Root to secure the supply chainoriginal ↗
30 Jun 2026
npm now freezes high-impact accounts after risky account changesoriginal ↗
26 Jun 2026
Top Koi alternatives in 2026original ↗
26 Jun 2026
Packagist is now protected by Aikido Intel and other updates to the PHP registryoriginal ↗
26 Jun 2026
Everybody's shipping code they can't readoriginal ↗
25 Jun 2026
Compromised GitHub action codfish/semantic-release-action steals CI/CD secretsoriginal ↗
24 Jun 2026
Aikido x Drydock | A way for maintainers to catch malware before it shipsoriginal ↗
23 Jun 2026
Aikido x OWASP: 200 free credits for individual membersoriginal ↗
18 Jun 2026
Over 140 popular Mastra npm Packages Hit by Supply Chain Attackoriginal ↗
17 Jun 2026
Multiple JetBrains IDE plugins caught stealing AI keysoriginal ↗
16 Jun 2026
Introducing AI Code Analysis: Find complex vulnerabilities hidden in your source codeoriginal ↗
16 Jun 2026
Full Fathom Five: The context of Anthropic’s Mythos-class public releaseoriginal ↗
13 Jun 2026
5 Socket security alternatives and why they are betteroriginal ↗
12 Jun 2026
npm v12 delivers one of the biggest security improvements in yearsoriginal ↗
11 Jun 2026
Aikido x Docker: less noise, more signal in your containersoriginal ↗
11 Jun 2026
Code is being written everywhere, and the device is the only constantoriginal ↗
10 Jun 2026
SBOMs in 2026: Everyone's generating them, no one's using themoriginal ↗
10 Jun 2026
Compromised Rust crate onering performs code exfiltrationoriginal ↗
10 Jun 2026
10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forumsoriginal ↗
10 Jun 2026
Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build Systemoriginal ↗
9 Jun 2026
What is AI SAST?original ↗
6 Jun 2026
Top 5 Tenable Nessus alternatives in 2026original ↗
3 Jun 2026
Next