Open Source Intelligence
pac4j CVE-2026-29000: Sonatype Finds 18 Additional Packages
A newly disclosed critical vulnerability in the widely used pac4j authentication framework is drawing attention across the open source community. Tracked as CVE-2026-29000, the flaw affects the pac4j-jwt library, which is commonly ...
Accelerate Secure Releases With Microsoft Copilot and Sonatype Guide
AI coding assistants, such as Microsoft Copilot, are fundamentally transforming the process of software development. Developers can generate scaffolding, draft functions, update dependencies, and even build full applications in seconds. The speed ...
Modern Vulnerability Management in the Age of AI
Vulnerability management today is not failing because teams stopped scanning. It's failing because the ground underneath it shifted. The approach we've relied on — complete advisory data, upstream fixes on demand, and ...
The Human Element: Turning Threat Actor OPSEC Fails into Investigative Breakthroughs
In this post, we explore how the psychological traps of operational security can unmask even the most sophisticated actors. The post The Human Element: Turning Threat Actor OPSEC Fails into Investigative Breakthroughs ...
The Great Shift: Cybersecurity Predictions for 2026 and the New Era of Threat Intelligence
As we look back on 2025, AI and open source have fundamentally changed how software is built. Generative AI, automated pipelines, and ubiquitous open source have dramatically increased developer velocity and expanded ...
AI Is Hard Work
"Opportunity is missed by most people because it is dressed in overalls and looks like work."— Thomas A. Edison ...
Why Natural Language Processing Is Crucial for Open-Source Intelligence Analysts
As the volume of data continues to grow, it's important to have tools that can help derive meaningful insights from this data. Natural language processing (NLP) is one such tool that's becoming ...
OSINT APIs for Mere Mortals
When it comes to OSINT research, APIs can be mightily helpful. Here are three ways to create custom capabilities using APIs without much programming experience. The post OSINT APIs for Mere Mortals ...
OSINT Tools Library
A constantly updated list of OSINT tools and techniques from across the open-source intelligence community, curated by Flashpoint The post OSINT Tools Library appeared first on Flashpoint ...
The Benefits of Sock Puppets in Open-Source Intelligence (OSINT)
A Sock Puppet is fake persona, or an alternative online identity used to collect and investigate open-source information on a target. The post The Benefits of Sock Puppets in Open-Source Intelligence (OSINT) ...
