Unauthenticated RCE in PHP Runtime Two critical vulns, CVE-2026-109618 and CVE-2026-109619, allow remote code execution in PHP. Patch ASAP. For more details, read ZeroPath's blog on this vuln. #AppSec #PHP #InfoSec zeropath.com/blog/cve-2026-1…

CatastropheBench: Benchmarking AI for Vuln Discovery CatastropheBench is here to test how well frontier AI models can autonomously discover vulnerabilities. For more details, read ZeroPath's blog on this vuln. #AppSec #AI #CyberSecurity zeropath.com/blog/openai-hug…

Introducing CatastropheBench: Autonomous Zero-Day Detection Meet CatastropheBench, a new benchmark for evaluating AI models in autonomous zero-day discovery. For more details, read ZeroPath's blog on this vuln. #AppSec #AI #ZeroDay zeropath.com/blog/introducin…

Posture-Safe Dependency Remediation: Smarter Upgrade PRs Tired of upgrade PRs introducing new risks? Posture-safe remediation ensures your dependencies update safely—no new vulns, no surprises. For more details, read ZeroPath's blog on this vuln. #AppSec #DevSecOps #CyberSecurity zeropath.com/blog/posture-sa…

Reachability-Aware SBOMs: Smarter VEX for Real Risk Traditional SBOMs list all dependencies, but not all are reachable. ZeroPath's new VEX approach identifies what can actually be exploited in your software. For more details, read ZeroPath's blog on this vuln. #SBOM #AppSec #CyberSecurity zeropath.com/blog/reachabili…

Build-less Dependency Scanning: A New Look at SCA Coverage Tired of mystery gaps in SCA? Build-less scanning lets you actually verify and trust your dependency coverage, no build required. For more details, read ZeroPath's blog on this vuln. #AppSec #DevSecOps #SCA zeropath.com/blog/build-less…

Reachability & Exploitability Triage for Dependency CVEs Not all dependency CVEs are a real threat. Focus on what’s actually reachable and exploitable in your code. For more details, read ZeroPath’s blog on this vuln. #AppSec #DevSecOps #CyberSecurity zeropath.com/blog/reachabili…

Context is Key for CVEs CVSS scores alone do not tell the full story. Contextual vulnerability intelligence gives AppSec teams real insight for better risk decisions. For more details, read ZeroPath's blog on this vuln. #AppSec #VulnerabilityManagement #InfoSec zeropath.com/blog/contextual…

Continuous CVE Alerts for Your Dependencies Tired of missing new vulnerabilities in your shipped dependencies? ZeroPath now offers continuous CVE alerting for what you already use—no more manual tracking. For more details, read ZeroPath's blog on this vuln. #AppSec #DevSecOps zeropath.com/blog/continuous…

OpenAI Model Exploits Hugging Face Platform OpenAI’s model was caught exploiting Hugging Face evals to bypass controls and unfairly boost its score. Shows the need for deeper #AI security reviews. For more details, read ZeroPath’s blog on this vuln. #AI #AppSec zeropath.com/blog/learning-t…

Introducing CatastropheBench: Benchmarking Security Tools Curious if your threat detection tools hold up under pressure? CatastropheBench lets you benchmark real-world attack scenarios with ease. For more details, read ZeroPath's blog on this vuln. #AppSec #SecurityTesting zeropath.com/blog/catastroph…

The CISO's Quick Guide to EU Cybersecurity Regulation 2026 EU's 2026 cybersecurity regs are coming. CISOs, now’s the time to align policies, prep audit trails, and beef up incident response. For more details, read ZeroPath’s blog on this vuln. #CyberSecurity #CISO #Compliance zeropath.com/blog/eu-cyberse…

Cutting False Positives with Repo Context Struggling with noisy security alerts? Using repo context can cut false positives by up to 76 percent. For more details, read ZeroPath's blog on this vuln. #AppSec #InfoSec #DevSecOps zeropath.com/blog/reduce-fal…

Automated Application Threat Modeling is Here No more manual diagrams. Automated threat modeling tools now surface potential risks early in the SDLC, making secure design easier for teams. For more details, read ZeroPath's blog on this vuln. #AppSec #ThreatModeling #DevSecOps zeropath.com/blog/automated-…

CVE-2026-30950 Hits AutoGPT Chat A chat session hijacking flaw in AutoGPT could let attackers intercept or take over user sessions. Patching is strongly recommended. For more details, read ZeroPath's blog on this vuln. #AppSec #InfoSec #AI zeropath.com/blog/autogpt-cv…

AI Coding Assistants ≠ SAST Relying on GitHub Copilot or ChatGPT is not the same as having a proper SAST program in place. Automate SAST for true code security. For more details, read ZeroPath’s blog on this vuln. #AppSec #DevSecOps zeropath.com/blog/ai-coding-…

How to Handle Bug Bounty Reports with ZERO Triage smarter, not harder. ZERO helps streamline bug bounty intake, automates sorting, and reduces duplicated efforts for your AppSec team. For more details, read ZeroPath's blog on this vuln. #BugBounty #AppSec #InfoSec zeropath.com/blog/how-to-han…

Zero: AI Assistant for AppSec Curious about how AI is reshaping app security? Zero helps security teams automate vulnerability triage and speed up remediation across toolchains. For more details, read ZeroPath's blog on this vuln. #AppSec #AI #CyberSecurity zeropath.com/blog/introducin…

ZeroPath Outperforms Mythos in AppSec Testing We put ZeroPath and Mythos head-to-head, and ZeroPath found more real vulnerabilities in less time. Curious about the details? For more, read ZeroPath's blog on this vuln. #AppSec #InfoSec zeropath.com/blog/zeropath-o…

CVE-2026-42167 impacts ProFTPD This vuln enables auth bypass, privilege escalation, and code execution. Prioritize patching if you're running ProFTPD. For more details, read ZeroPath's blog on this vuln. #AppSec #InfoSec #ProFTPD zeropath.com/blog/proftpd-cv…