Cover story
Node.js
Cantina research: Two Node.js Bugs You Should Know About
Two Node.js vulnerabilities can replay SQLite writes or crash workers through oversized DNS responses. See the affected paths, fixed releases, and mitigations.
· Cantina
Cantina editorial
August 2026 65 stories
The Loop
Intelligence for the new security frontier
Research, perspectives, and field notes from the people closing the loop on security.
Latest stories
Cover story
Dispatches
More from the desk
Analysis / Research / News
RabbitMQ
05What four RabbitMQ advisories reveal about broker security boundaries
Analysis of four RabbitMQ security vulnerabilities affecting OAuth permissions, topic access, loopback enforcement, and Direct Reply-To bindings.
Cantina
Node.js
06Cantina research: three trust boundary CVEs in node.js
Security researchers disclose three distinct vulnerabilities affecting Node.js hostname and TLS stack layers, each enabling authentication bypasses through trust boundary violations.
Cantina
cybersecurity
07Cantina joins Anthropic's cyber verification program
Cantina gains access to Anthropic's CVP to enhance AppSec agent capabilities for vulnerability verification and resolution.
Cantina
deepfakes
08Deepfakes in 2026: how they evolved, how to spot them, and where they are headed
A comprehensive analysis of deepfake fraud trends, detection methods, and defensive strategies as of 2026.
Cantina
Supply Chain Security
09TeamPCP: the hacker group that turned developer trust into an attack surface
Analysis of how TeamPCP compromised the Trivy security scanner and launched a multi-ecosystem supply chain attack affecting major software delivery infrastructure.
Cantina
AI security
10Cantina CEO Hari Mulackal on the Fable pull: the only clock you control Is how fast you fix
Cantina's CEO examines how AI model capabilities for finding vulnerabilities have shifted security from access control to remediation speed.
Cantina
healthcare security
11TrustLaunder: how a healthcare FHIR server turned attacker URLs into trusted patient data
A vulnerability in Pathling Server versions 1.2.0 and earlier allowed attackers to bypass security allowlists by reclassifying untrusted data as local after fetching it from attacker-controlled URLs.
Cantina
FHIR
12After TrustLaunder: Apex's other four pathling findings
Four additional high-severity vulnerabilities discovered in Pathling FHIR analytics server beyond the TrustLaunder findings.
Cantina
Page 1 of 6 · 65 stories