Cover story
supply chain security
Bitwarden's npm incident was a publish-path compromise
Analysis of how a malicious Bitwarden CLI package bypassed source controls through npm registry compromise.
· Cantina
Cantina editorial
April 2026 65 stories
The Loop
Intelligence for the new security frontier
Research, perspectives, and field notes from the people closing the loop on security.
Latest stories
Cover story
Dispatches
More from the desk
Analysis / Research / News
Application Security
05How production context changes which security alerts matter first
Production deployment context helps security teams prioritize alerts based on actual operational risk rather than severity alone.
Cantina
AI security
06How auto-approve changes the control boundary for coding agents
Auto-approval settings for coding agents shift execution control boundaries and require careful policy definition before rollout.
Cantina
AI security
07How to catch secret leaks in AI coding workflows before commit
GitHub's MCP server push protection now blocks secrets within agent sessions rather than at repository commit.
Cantina
MCP security
08Cantina threat advisory: how Anthropic's MCP stdio model turns configuration into code execution
Analysis of how untrusted input reaching MCP stdio configuration can enable local code execution attacks.
Cantina
OAuth
09Vercel's April 2026 incident was an oAuth-to-control-plane breach
Analysis of how Vercel's April 2026 security breach leveraged compromised third-party OAuth access through Google Workspace to reach deployment control-plane configuration.
Cantina
healthtech security
10Healthtech security in 2026: continuity Is the new standard
Security incidents in healthtech are now judged like operational failures, making continuity protection equally important as data protection.
Cantina
OpenSSH
11Cantina case study: Apex finds 44-year-old bugs in OpenSSH
OpenSSH 10.3p1 fixes two vulnerabilities rooted in decades-old trust assumptions from Berkeley rcp.
Cantina
AI governance
12AI agent governance readiness guide
Framework for assessing AI agent governance readiness across inventory, permissions, approvals, logging, and incident response.
Cantina
Page 4 of 6 · 65 stories