corpus.blog
56,966 blogs · [ { "id": "01a0e31b-bb51-70da-813a-3406e3a14f28", "title": "OX Security is Now Available in the Cursor MCP Directory", "url": "https://www.ox.security/blog/ox-security-is-now-available-in-the-cursor-mcp-directory/", "published_at": "2026-03-03T12:38:33+00:00" }, { "id": "01a0e31b-bb51-70da-813a-3406e46339d1", "title": "FreeScout RCE Enables Full System Takeover", "url": "https://www.ox.security/blog/freescout-rce-cve-2026-27636/", "published_at": "2026-02-25T16:13:01+00:00" }, { "id": "01a0e31b-bb55-73de-b481-6e7bf02689c0", "title": "The Claude Code Security Promise: Why This Can’t Be Our Safety Net", "url": "https://www.ox.security/blog/the-claude-code-security-promise-why-this-cant-be-our-safety-net/", "published_at": "2026-02-23T15:00:09+00:00" }, { "id": "01a0e31b-bb55-73de-b481-6e7bf10e5d60", "title": "Newly discovered NPM worm is hijacking CI workflows and targeting AI-based packages", "url": "https://www.ox.security/blog/npm-worm-hijacks-ci-workflows-ai-packages/", "published_at": "2026-02-20T21:38:47+00:00" }, { "id": "01a0e31b-bb55-73de-b481-6e7bf1241dc1", "title": "Four Vulnerabilities Expose a Massive Security Blind Spot in IDE Extensions", "url": "https://www.ox.security/blog/four-vulnerabilities-expose-a-massive-security-blind-spot-in-ide-extensions/", "published_at": "2026-02-17T13:37:58+00:00" }, { "id": "01a0e31b-bb55-73de-b481-6e7bf17f51ed", "title": "Code Runner VS Code Extension Enables Remote Code Execution via Settings Manipulation", "url": "https://www.ox.security/blog/cve-2025-65715-code-runner-vscode-rce/", "published_at": "2026-02-17T12:35:22+00:00" }, { "id": "01a0e31b-bb55-73de-b481-6e7bf2691082", "title": "Live Server VS Code Extension Allows Remote Exfiltration of Local Files", "url": "https://www.ox.security/blog/cve-2025-65717-live-server-vscode-vulnerability/", "published_at": "2026-02-17T12:34:56+00:00" }, { "id": "01a0e31b-bb55-73de-b481-6e7bf27ae10b", "title": "Markdown Preview Enhanced Executes JavaScript When Opening Malicious Files", "url": "https://www.ox.security/blog/cve-2025-65716-markdown-preview-enhanced-vscode-vulnerability/", "published_at": "2026-02-17T12:34:14+00:00" }, { "id": "01a0e31b-bb55-73de-b481-6e7bf2857ce0", "title": "Bridging Application Security and Security Operations with Torq and OX Security", "url": "https://www.ox.security/blog/bridging-application-security-and-security-operations-with-torq-and-ox-security/", "published_at": "2026-02-12T14:01:35+00:00" }, { "id": "01a0e31b-bb55-73de-b481-6e7bf31019a6", "title": "The hottest website on the internet is violating privacy at scale", "url": "https://www.ox.security/blog/moltbook-blocks-account-deletion-privacy-risks/", "published_at": "2026-02-10T15:20:29+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4ed67c000", "title": "Container Security Best Practices: An Enterprise Guide for 2026", "url": "https://www.ox.security/blog/container-security-best-practices/", "published_at": "2026-02-05T12:56:02+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4eddb7966", "title": "You Can’t Just “Delete” OpenClaw: You Gave It Access to Everything. Now What?", "url": "https://www.ox.security/blog/how-to-uninstall-openclaw-remove-data-revoke-access/", "published_at": "2026-02-04T19:35:04+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4eed5e0ed", "title": "Millions of AI Servers at Risk: Critical vLLM RCE Lets Attackers Take Over via Video Link (CVE-2026-22778)", "url": "https://www.ox.security/blog/cve-2026-22778-vllm-rce-vulnerability/", "published_at": "2026-02-02T19:49:36+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4ef412df0", "title": "Prevent or Fail: Why Detection-First AppSec Cannot Survive", "url": "https://www.ox.security/blog/prevent-or-fail-why-detection-first-appsec-cannot-survive/", "published_at": "2026-02-01T13:41:06+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4f01c1de1", "title": "One Step Away From a Massive Data Breach: What We Found Inside MoltBot", "url": "https://www.ox.security/blog/one-step-away-from-a-massive-data-breach-what-we-found-inside-moltbot/", "published_at": "2026-01-29T15:36:24+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4f1031df4", "title": "AI Attacks Are Outpacing Static Security Tools: What CISOs Are Missing", "url": "https://www.ox.security/blog/ai-attacks-are-outpacing-static-security-tools/", "published_at": "2026-01-27T11:33:37+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4f164258a", "title": "Software Supply Chain Risk: Why It Needs Your Full Attention", "url": "https://www.ox.security/blog/software-supply-chain-risk/", "published_at": "2026-01-27T11:18:04+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4f1e67a7b", "title": "Top 5 Vulnerability Scanning Tools for Enterprise Product Security Leaders", "url": "https://www.ox.security/blog/vulnerability-scanning-tools/", "published_at": "2026-01-26T07:28:02+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4f258df2d", "title": "CVE-2026-23958 Compromises Admin Accounts on DataEase ; Enterprise BI at Risk", "url": "https://www.ox.security/blog/blog-dataease-cve-2026-23958-admin-takeover/", "published_at": "2026-01-21T08:32:29+00:00" }, { "id": "01a0e337-d2a4-733e-a751-76c4f3390dda", "title": "XSS in Live Preview, Microsoft VS Code Extension with 11M Downloads", "url": "https://www.ox.security/blog/xssinlivepreview/", "published_at": "2026-01-14T09:36:03+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf4c6a55c0", "title": "SAST vs SCA in the Age of AI-Generated Code: Why Point Tools Aren’t Enough Anymore", "url": "https://www.ox.security/blog/sast-vs-sca-2026/", "published_at": "2026-01-05T07:11:10+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf4d478ce0", "title": "900K Users Compromised: Chrome Extensions Steal ChatGPT and DeepSeek Conversations", "url": "https://www.ox.security/blog/malicious-chrome-extensions-steal-chatgpt-deepseek-conversations/", "published_at": "2025-12-30T11:08:03+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf4dc79f85", "title": "PoC: Exploiting MongoBleed, CVE-2025-14847 | Technical Walkthrough", "url": "https://www.ox.security/blog/poc-exploiting-mongobleed-cve-2025-14847-technical-walkthrough/", "published_at": "2025-12-29T20:05:16+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf4e860e9d", "title": "Shai Hulud #3: The Attack Continues", "url": "https://www.ox.security/blog/shai-hulud-3-the-attack-continues/", "published_at": "2025-12-29T02:55:09+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf4ebd72dc", "title": "MongoDB Unauthenticated Attacker Sensitive Memory Leak", "url": "https://www.ox.security/blog/attackers-could-exploit-zlib-to-exfiltrate-data-cve-2025-14847/", "published_at": "2025-12-24T18:02:38+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf4f0ff2f5", "title": "Checkmarx Alternatives: Exploring the Best Tools for Secure Code Analysis", "url": "https://www.ox.security/blog/checkmarx-alternatives/", "published_at": "2025-12-17T09:47:34+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf4f1a3ee1", "title": "Top 10 Snyk Alternatives for DevSecOps and Platform Engineering Workflows [2026 Update]", "url": "https://www.ox.security/blog/snyk-alternatives/", "published_at": "2025-12-17T09:47:34+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf5010e66d", "title": "Top 5 Veracode Alternatives for Application Security Testing (2026 Edition)", "url": "https://www.ox.security/blog/veracode-alternatives/", "published_at": "2025-12-17T09:47:34+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf50b822bf", "title": "Apiiro Alternatives for 2026: What AppSec Architects Should Actually Compare", "url": "https://www.ox.security/blog/apiiro-alternatives/", "published_at": "2025-12-17T09:47:33+00:00" }, { "id": "01a0e36b-cde1-7131-b8f9-0cbf516f5fb6", "title": "Top 5 SBOM Tools for Securing the Software Supply Chain ", "url": "https://www.ox.security/blog/sbom-tools/", "published_at": "2025-12-17T09:47:33+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d2897effa8ae", "title": "Top 5 Aikido Alternatives for Application Security Management (2026)", "url": "https://www.ox.security/blog/aikido-alternatives/", "published_at": "2025-12-17T09:47:32+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d2897f7ff06d", "title": "Agility Meets Security: Kaltura’s Journey to Streamlined Development with OX Security", "url": "https://www.ox.security/blog/kalturas-journey-to-streamlined-development-with-ox-security/", "published_at": "2025-12-17T09:46:01+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d28980487bd4", "title": "Betting on a New Approach with Active ASPM", "url": "https://www.ox.security/blog/888-holdings-betting-on-a-new-approach-with-active-aspm/", "published_at": "2025-12-17T09:46:00+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d2898103ef7f", "title": "React Vulnerabilities Strike Again: Denial Of Service & Information Leakage in Patched Versions of React2Shell", "url": "https://www.ox.security/blog/react-cve-2025-55184-67779-55183-react-19-vulnerabilities/", "published_at": "2025-12-12T10:30:57+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d28981af4b5a", "title": "React2Shell | Going Granular: A Deep-Deep-Deep Technical Analysis of CVE-2025-55182", "url": "https://www.ox.security/blog/react2shell-going-granular-a-deep-deep-deep-technical-analysis-of-cve-2025-55182/", "published_at": "2025-12-11T17:03:17+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d28981f01a93", "title": "OX Named Innovation Leader for the Second Consecutive Year in Frost & Sullivan’s ASPM Frost Radar", "url": "https://www.ox.security/blog/ox-named-innovation-leader-for-the-second-consecutive-year-in-frost-sullivans-aspm-frost-radar/", "published_at": "2025-12-10T16:06:36+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d289822f59aa", "title": "Two Clicks to $1M: How Attackers Can Drain Enterprise Budgets Through AI Platforms", "url": "https://www.ox.security/blog/two-clicks-to-1m-how-attackers-can-drain-enterprise-budgets-through-ai-platforms/", "published_at": "2025-12-09T10:50:51+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d28982db4384", "title": "Top 10 Container Security Tools to Know in 2026", "url": "https://www.ox.security/blog/container-security-tools-2026/", "published_at": "2025-12-08T08:03:45+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d28983b1923d", "title": "Top 8 Container Security Solutions for Enterprise in 2026 [Tried & Tested]", "url": "https://www.ox.security/blog/container-security-solutions-in-2026/", "published_at": "2025-12-05T12:29:33+00:00" }, { "id": "01a0e397-8525-72cf-bc33-d28983e96c84", "title": "React’s CVE-2025-55182 Is Now Actively Exploitable: Verified PoC", "url": "https://www.ox.security/blog/reacts-cve-2025-55182-is-now-actively-exploitable-verified-poc/", "published_at": "2025-12-05T09:15:54+00:00" } ] posts Claim your blog
Back to ox.security
Blog · corpus.blog/blogs/ox.security/posts

ox.security

ox.security

2026

OX Security is Now Available in the Cursor MCP Directoryoriginal ↗
3 Mar 2026
FreeScout RCE Enables Full System Takeoveroriginal ↗
25 Feb 2026
The Claude Code Security Promise: Why This Can’t Be Our Safety Netoriginal ↗
23 Feb 2026
Newly discovered NPM worm is hijacking CI workflows and targeting AI-based packagesoriginal ↗
20 Feb 2026
Four Vulnerabilities Expose a Massive Security Blind Spot in IDE Extensionsoriginal ↗
17 Feb 2026
Code Runner VS Code Extension Enables Remote Code Execution via Settings Manipulationoriginal ↗
17 Feb 2026
Live Server VS Code Extension Allows Remote Exfiltration of Local Filesoriginal ↗
17 Feb 2026
Markdown Preview Enhanced Executes JavaScript When Opening Malicious Filesoriginal ↗
17 Feb 2026
Bridging Application Security and Security Operations with Torq and OX Securityoriginal ↗
12 Feb 2026
The hottest website on the internet is violating privacy at scaleoriginal ↗
10 Feb 2026
Container Security Best Practices: An Enterprise Guide for 2026original ↗
5 Feb 2026
You Can’t Just “Delete” OpenClaw: You Gave It Access to Everything. Now What?original ↗
4 Feb 2026
Millions of AI Servers at Risk: Critical vLLM RCE Lets Attackers Take Over via Video Link (CVE-2026-22778)original ↗
2 Feb 2026
Prevent or Fail: Why Detection-First AppSec Cannot Surviveoriginal ↗
1 Feb 2026
One Step Away From a Massive Data Breach: What We Found Inside MoltBotoriginal ↗
29 Jan 2026
AI Attacks Are Outpacing Static Security Tools: What CISOs Are Missingoriginal ↗
27 Jan 2026
Software Supply Chain Risk: Why It Needs Your Full Attentionoriginal ↗
27 Jan 2026
Top 5 Vulnerability Scanning Tools for Enterprise Product Security Leadersoriginal ↗
26 Jan 2026
CVE-2026-23958 Compromises Admin Accounts on DataEase ; Enterprise BI at Riskoriginal ↗
21 Jan 2026
XSS in Live Preview, Microsoft VS Code Extension with 11M Downloadsoriginal ↗
14 Jan 2026
SAST vs SCA in the Age of AI-Generated Code: Why Point Tools Aren’t Enough Anymoreoriginal ↗
5 Jan 2026

2025

900K Users Compromised: Chrome Extensions Steal ChatGPT and DeepSeek Conversationsoriginal ↗
30 Dec 2025
PoC: Exploiting MongoBleed, CVE-2025-14847 | Technical Walkthroughoriginal ↗
29 Dec 2025
Shai Hulud #3: The Attack Continuesoriginal ↗
29 Dec 2025
MongoDB Unauthenticated Attacker Sensitive Memory Leakoriginal ↗
24 Dec 2025
Checkmarx Alternatives: Exploring the Best Tools for Secure Code Analysisoriginal ↗
17 Dec 2025
Top 10 Snyk Alternatives for DevSecOps and Platform Engineering Workflows [2026 Update]original ↗
17 Dec 2025
Top 5 Veracode Alternatives for Application Security Testing (2026 Edition)original ↗
17 Dec 2025
Apiiro Alternatives for 2026: What AppSec Architects Should Actually Compareoriginal ↗
17 Dec 2025
Top 5 SBOM Tools for Securing the Software Supply Chain original ↗
17 Dec 2025
Top 5 Aikido Alternatives for Application Security Management (2026)original ↗
17 Dec 2025
Agility Meets Security: Kaltura’s Journey to Streamlined Development with OX Securityoriginal ↗
17 Dec 2025
Betting on a New Approach with Active ASPMoriginal ↗
17 Dec 2025
React Vulnerabilities Strike Again: Denial Of Service & Information Leakage in Patched Versions of React2Shelloriginal ↗
12 Dec 2025
React2Shell | Going Granular: A Deep-Deep-Deep Technical Analysis of CVE-2025-55182original ↗
11 Dec 2025
OX Named Innovation Leader for the Second Consecutive Year in Frost & Sullivan’s ASPM Frost Radaroriginal ↗
10 Dec 2025
Two Clicks to $1M: How Attackers Can Drain Enterprise Budgets Through AI Platformsoriginal ↗
9 Dec 2025
Top 10 Container Security Tools to Know in 2026original ↗
8 Dec 2025
Top 8 Container Security Solutions for Enterprise in 2026 [Tried & Tested]original ↗
5 Dec 2025
React’s CVE-2025-55182 Is Now Actively Exploitable: Verified PoCoriginal ↗
5 Dec 2025
Previous