Current Vulnerabilities

The threats that matter right now — explained in plain language with actionable steps to check your own project. Updated for 2025.

16B+

Credentials leaked in 2025

742%

Rise in supply chain attacks since 2019

80%

Of cyber incidents target web apps

AI coding assistants accelerate development but routinely introduce security vulnerabilities that pass linting and basic tests. Tools like Skylos and Bastion are designed to catch these AI-specific blind spots before they reach production.

Current Vulnerabilities

Most Common Vulnerabilities Right Now

Cross-Site Scripting (XSS)

Broken Access Control

Security Misconfiguration

SQL Injection

Credential Stuffing

Supply Chain Attacks

API Vulnerabilities

Exposed Secrets

What AI Gets Wrong

Phantom Function Calls

Incomplete Stubs & TODO Bombs

Disabled Security Controls

Hardcoded Test Credentials

Missing Input Validation

Recent Major Breaches

16 Billion Credentials Compilation

AT&T Customer Data Breach

MOVEit Transfer Supply Chain Attack

National Public Data Breach