Cantina editorial
June 2026 65 stories
Intelligence for the new security frontier
Research, perspectives, and field notes from the people closing the loop on security.
Latest storiesDispatches
Analysis / Research / News
AI security
05AI-generated code often contains authorization flaws that static analysis misses because the vulnerabilities exist across multiple functions rather than within individual code blocks.
Cantina
supply chain security
06A poisoned VS Code extension compromised a GitHub employee device, exposing 3,800 internal repos in a broader supply chain attack campaign.
Cantina
AI governance
07Governance requires mapping policy clauses to runtime checks and audit evidence, not just writing policies.
Cantina
Apple Security
08Analysis of Apple's May 2026 security patch cycle that closed 80+ vulnerabilities, including AI-credited findings from both Cantina and Anthropic.
Cantina
CVE
09Four production-critical AI infrastructure vulnerabilities reveal systemic gaps in how organizations manage interconnected security risks across their AI stack.
Cantina
Linux security
10Analysis of Dirty Frag, a Linux privilege escalation vulnerability affecting major distributions through networking subsystem flaws.
Cantina
cargo theft
11Cyber-enabled cargo theft reached $725M in losses during 2025, exploiting compromised dispatch workflows and freight software to orchestrate sophisticated theft schemes.
Cantina
WebKit
12Cantina's autonomous agent Apex discovered a memory safety vulnerability that persisted in WebKit for 13 years, along with two CSP bypasses, all patched in iOS 26.5.
Cantina
Page 2 of 6 · 65 stories
