CVE-2026-34046: Broken authorization in Langflow exposes user flows
Dynattrace Security Researchers identified a high-severity zero-day vulnerability in Langflow (CVE-2026-34046) that allows authenticated users to unauthorizedly access, modify, or …
Back to all articles
Category
Application Security
13 articles · Page 1 of 2
Cyber Deception with Koney and Dynatrace
Koney is an open-source Kubernetes operator that automates cyber deception by deploying "honeytokens," or decoy files, across a cluster to catch attackers during unauthorized acces…
How CISA BOD 26-04 is reshaping the vulnerability remediation approach
CISA’s new Binding Operational Directive (BOD) 26-04 mandates that U.S. federal agencies transition from using static severity scores to a risk-based vulnerability prioritization m…
Dynatrace Security Enrichment: Every threat intelligence source in one unified experience
Dynatrace Security Enrichment provides a unified platform to integrate various commercial, open-source, and proprietary threat intelligence sources through standardized HTTP-based …
Your business applications are at risk: Introducing in-context security findings for Kubernetes
Dynatrace has enhanced its Kubernetes Security Posture Management (KSPM) by embedding vulnerabilities, threats, and misconfigurations directly into its existing Kubernetes app to e…
How Anthropic Claude Mythos is reshaping the vulnerability landscape
The emergence of AI models like Claude Mythos threatens to drastically accelerate the discovery and weaponization of zero-day vulnerabilities, rendering traditional static scanning…
Prioritize GitHub Advanced Security alerts with runtime context from Dynatrace
Dynatrace has enhanced its integration with GitHub Advanced Security to share runtime context—like internet exposure and sensitive data access—from monitored Kubernetes environment…
Strengthen your security posture with the Common Configuration Scoring System for misconfigured production environments
Dynatrace Security Posture Management (SPM) is now using the Common Configuration Scoring System (CCSS) to standardize how misconfiguration severity is assessed. This means misconf…
Ingest, enrich, and deduplicate Qualys vulnerability findings with Dynatrace
Dynatrace now integrates with Qualys to improve vulnerability management for DevSecOps teams. This integration unifies and deduplicates vulnerability findings from Qualys, then enr…
Introducing findings in the Vulnerabilities app: Unified, granular insights for smarter security
The new Findings tab in the Dynatrace Vulnerabilities app introduces a unified, analytics-ready view of all security findings across your Dynatrace environment and integrated tools…
CVE-2025-55182: React2Shell Critical Vulnerability — what it is and what to do
TL;DR: A critical flaw in React’s Flight protocol (CVE-2025-55182) allows attackers to run code on servers using React Server Components. In short, if your organization uses React …
Smarter cloud security with Dynatrace and Kiro CLI
Cloud misconfigurations are a persistent challenge for Site Reliability Engineers (SREs). The sheer volume of high and critical alerts can overwhelm teams, making it difficult to p…