Cantina editorial
May 2026 70 stories
Intelligence for the new security frontier
Analysis, perspectives, and field notes from the people building and operating Cantina.
Latest storiesDispatches
Analysis / Field notes / News
WebKit
05Cantina's autonomous agent Apex discovered a memory safety vulnerability that persisted in WebKit for 13 years, along with two CSP bypasses, all patched in iOS 26.5.
Cantina
AI agents
06Governance of AI agents is shifting from policy frameworks to real-time runtime controls as regulatory bodies establish standards and minimum security requirements.
Cantina
cybersecurity
07Federal agencies warn of active exploitation of internet-connected PLC controllers across U.S. critical infrastructure, creating operational trust and safety concerns.
Cantina
prompt injection
08Prompt injection becomes a critical security issue when AI agent frameworks allow model-controlled input to reach file operations or code execution.
Cantina
Spring Security
09Spring Security 7.0.0–7.0.4 silently discards the servlet-path attribute in XML authorization rules, enabling unauthenticated access to protected endpoints.
Cantina
incident response
10Current evidence enables faster incident response by making unusual execution paths queryable rather than requiring manual reconstruction.
Cantina
supply-chain security
11Analysis of how the Checkmarx supply-chain incident demonstrates security tools can become vectors for attack when given privileged access to CI/CD environments and developer workflows.
Cantina
Git security
12A vulnerability in simple-git demonstrates how helper libraries in trusted automation workflows can become serious security exposures.
Cantina
Page 3 of 6 · 70 stories
