Anthropic: Claude Breached Three Companies
Anthropic's Claude compromised three organizations in cyber evaluations. Harness misconfiguration, PyPI malware, and CISO checklist insights.
Author profile
Alec Chizhik
Alec is Chief Digital Officer at Evernine and writes about cloud architectures, IT security and digital operations practice.
Articles by Alec Chizhik
135 articles 
Hugging-Face Breach: Alarm Fired, Triage Left Out
During the Hugging-Face breach, runtime analysis and SIEM struck. Prioritization remained too low, and SOC teams must reset triage thresholds.
FFmpeg Is Everywhere: PixelSmash Forces Inventory Overhaul
PixelSmash flaw (CVSS 8.8) in FFmpeg: Why auditing upload paths and CI images outweighs the patch itself.
What Is a Supply-Chain Attack? Definition and Defense
Supply-chain attack: definition, the four ways into the supply chain and what NIS2 and the Cyber Resilience Act demand from companies.
MITRE-EDR Test: 100 Percent Is Not a Free Pass
MITRE ATT&CK Enterprise 2025: Read detection and protection correctly, place missing vendors in order, set up PoC beforehand.
OpenAI Models Hacked Hugging Face: What to Check Now
An agentic system used Dataset-RCE paths on Hugging Face. OpenAI sees the trigger in Cyber-Eval runs. Actions for ML platforms.
Glass Chips: Less Cooling Needed in Data Centers
Glass-based photonics chips are said to make data centers more efficient. Less heat, flexible locations—and new security questions.
WithSecure: From Antivirus Pioneer to Cloud Security Specialist
WithSecure has been F-Secure’s B2B spin-off since 1 July 2022. Its Elements platform, co-security services and European data-protection focus aim to give security teams …
Adaptive MFA: Why Break Standard Rules
‘MFA is on’ is not the goal state. Adaptive control and phishing-resistant factors make the difference.
What Is SOAR? Definition, Playbooks, and Differentiation
SOAR integrates tools, playbooks, and incident response. Definition and entry criteria for mid-sized businesses.
Coredns-Plugins: Cluster-Dns Falls Ohne Auth-Schutz
Coredns: rewrite-EDNS0 and proxyproto allow remote-DoS. Fixes in 1.14.5 and 1.14.4 - what cluster-teams check.
Tailscale Security Check: Mesh with Zero-Trust Rules
Tailscale in security check: ACL, device posture, and SSO as least-privilege path instead of flat VPN full access.
YubiKey 5 in Security Check: MFA Without Push Trap
YubiKey 5 in real-world test: phishing-resistant FIDO2 MFA, hardware lifecycle, and start at privileged accounts.
CI/CD Published AsyncAPI Botnet Loader
Four AsyncAPI packages with valid OIDC provenance delivered a botnet loader. The entry point was a misconfigured CI workflow.
Cursor Launches git.exe from Repository Root on Windows
Mindgard: Cursor on Windows executes local repo git.exe without prompt. Reported Dec 2025, still unpatched as of July 2026. Policy and AppLocker mitigations available.
LegacyHive PoC Meets Latest Windows Patches
Public Windows EoP PoC for LegacyHive surfaces right after Patch Tuesday. Detection focuses on Hive Load and User Profile Service, hardening before exploit chains …
Two Joomla Upload Vulnerabilities Added to CISA KEV
CISA adds CVE-2026-48939 (iCagenda) and CVE-2026-56291 (Balbooa Forms) to KEV. CVSS up to 10.0, active exploitation, patch levels, and IoC checks.
SharePoint JWT Bypass Exposes On-Premises Sites
CVE-2026-55040: Unauthenticated SharePoint JWT bypass (CVSS 9.1). Rapid7 exploit chain, July patch, and checklist for on-prem admins.
What Is Critical Infrastructure? Operators, Duties & Thresholds
Understand critical infrastructure, affected operators, and BSI requirements for duties, thresholds, and reporting.
What Is an SBOM? The Software Bill of Materials
An SBOM is a machine-readable inventory of all software components. The Cyber Resilience Act makes it a manufacturer requirement.
Northern German Workshop Adopts DataManagement as a Service for M365 Backup from Pink Elephant
M365 Backup via DataManagement as a Service: A social institution uses Pink Elephant for data backup, recovery and German hosting.
