Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In May 2026, security researchers at Astra identified a Stored Cross-Site Scripting (XSS) Vulnerability in the SVG attachment preview function of nfty, affecting versions up to 2.22.0. Stored Cross-Site Scripting (XSS) is a vulnerability that allows attackers to inject and permanently execute malicious scripts within a web application. If exploited, the threat actor could perform actions on behalf of the victim.

In May 2026, security researchers at Astra identified a stored Cross-Site Scripting (XSS) Vulnerability in HTML ReportGenerator, affecting versions up to 5.5.8. Cross-Site Scripting(XSS) is a general web security vulnerability that allows threat actors to inject malicious scripts into a web application. This type of vulnerability is mostly exploited to perform actions on behalf of the victim or to mine cryptocurrency.

You’re most likely here because of some math and news about how to get that math and mess sorted. Your engineering team can’t manually pentest every release, your scanners flood Jira with noise, and your CISO needs audit-ready evidence by next quarter, and the autonomous pentesting market promises relief; AI agents that discover, chain, and exploit vulnerabilities at human-quality depth, in hours instead of weeks.

Your presence here, reading this, insinuates that something is nagging at you. Maybe it’s the Ivanti headline you saw last week or the fact that half your engineering team works from cafés, co-working spaces, and home offices you’ve never set foot in. Maybe it’s the audit coming up and that one checklist item about remote access controls you’ve been putting off. No, you’re not being paranoid. We have numbers that justify your burgeoning anxiety.