Resources Archive - Page 3 of 56 - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Resource Library

Threat Research CVE-2026-44381 MISP Threat Intelligence Platform Authenticated SQL Injection via ORDER BY Parameter POST /events/index — Boolean-Blind + Time-Based Oracle 1. Introduction This document illustrates a SQL injection vulnerability in MISP — the Malware Information Sharing Platform and Threat Sharing system — an open-source threat intelligence platform used… SAFE Safe Security Oct 21, 2026 9 min read
Events Governing AI at Gartner UK: Only 5% Say They’re Ready. Here’s Where to Start. During one AI governance session at the Gartner Security & Risk Management Summit in London, a well-known authority in the GRC world shared a number that stopped the… Jacqueline Lebo Safe Security Oct 20, 2026 5 min read
Threat Research One Person, Five AI Tools, a Country’s Banks: Inside South Korea’s AI-Run Breach A financially motivated hacker used a stack of AI tools to hit South Korean banks at the speed of a whole team. The tooling was new. The way… Rahul Tyagi Safe Security Oct 20, 2026 9 min read
Threat Research CVE-2026-101894: Symlink-Chain Path Traversal in @xhmikosr/decompress 1. Introduction The @xhmikosr/decompress package extracts tar, tar.gz, tar.bz2, and ZIP archives in Node.js applications. CVE-2026-101894 is a symlink-chain path traversal in its default decompress(input, output) API: crafted… SAFE Safe Security Oct 20, 2026 10 min read
Templates Third Party Cyber Risk Management Program Checklist Rahul Tyagi Safe Security Oct 20, 2026 2 min read
Templates Vendor Data Breach Response Checklist First 48 Hours Rahul Tyagi Safe Security Oct 20, 2026 2 min read
Templates Vendor SOC 2 Report Review Checklist Rahul Tyagi Safe Security Oct 20, 2026 2 min read
Threat Research CVE-2026-41948 Dify ≤ 1.14.1 – Unauthenticated Plugin Daemon Internal API Exposure via Path Traversal in the Console Icon Proxy 1. Introduction This document illustrates a relative path traversal vulnerability in Dify, the open-source large language model (LLM) application development platform used by more than 50,000 organisations to… SAFE Safe Security Oct 19, 2026 10 min read
Threat Research CVE-2026-45332 Automad Flat-File CMS Unauthenticated Admin Password Hash Disclosure via Broken Setup Endpoint — Offline Hash Cracking 1. Introduction This document illustrates an unauthenticated sensitive data exposure vulnerability in Automad — a modern flat-file content management system. The vulnerability, tracked as CVE-2026-45332, allows any unauthenticated… SAFE Safe Security Oct 19, 2026 9 min read
Whitepapers The Architects of Modern Defense Oct 15, 2026 1 min read
Templates Startup Vendor Security Questionnaire Without a SOC 2 Report Rahul Tyagi Safe Security Oct 15, 2026 2 min read
Templates Vendor Exit Security Attestation Questionnaire Rahul Tyagi Safe Security Oct 15, 2026 2 min read