Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Polymarket Supply-Chain Breach: $2.7M Stolen via Hijacked DebugBear Script — Detection & Response Guide
Executive Summary On October 29, 2025, attackers compromised Polymarket, a major cryptocurrency prediction market platform, by hijacking a t...
Weekly Threat Recap Defense Playbook: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, and 700 Supermarkets Hit — What to Patch, Hunt, and Harden Now
Introduction This week's recap is a reminder that the most damaging incidents rarely announce themselves. Between a surge of 98 zero-day vul...
ClearFake WebDAV Chain Delivers Amatera Stealer + Malicious Firefox Wallet Extensions: OTX Pulse Analysis — Enterprise Detection Pack
ClearFake WebDAV Chain Delivers Amatera Stealer + Malicious Firefox Wallet Extensions: OTX Pulse Analysis Threat Summary Two concurrent OTX ...
Placeholder Domains Weaponized Across 1,700 Repos: Supply-Chain Defense, Service Account Hardening, and Citrix Patch Guidance
Introduction This week's threat landscape is a case study in forgotten assumptions becoming live attack surface. The standout story: a domai...
Mantax Otax Mobile Ransomware, CAV3RN Espionage Framework & Browser Extension Crypto Theft: OTX Pulse Detection Pack
Mantax Otax Mobile Ransomware, CAV3RN Espionage Framework & Browser Extension Crypto Theft: OTX Pulse Detection Pack Three concurrent OTX pu...
Alby Hub Critical Wallet Takeover Flaw: How to Detect, Contain, and Patch Internet-Exposed Lightning Nodes
Alby Hub Critical Flaw: Internet-Exposed Lightning Wallets at Risk of Complete Takeover Alby has disclosed a critical vulnerability in Alby ...
13 Malicious Packagist Composer Packages Deploy iOS Spyware — Detection and Removal Guide
Thirteen Trojanized Composer Themes Are Turning PHP Sites Into Spyware Distribution Points Supply-chain compromises through open-source pack...
Malicious Chrome and Edge Extensions Stealing Crypto and Browser Data: Detection and Removal Guide
Introduction A recent report describes multiple extensions distributed through the Google Chrome Web Store and Microsoft Edge Add-ons store ...
Go-Based macOS Infostealer Targets Crypto Wallets and Credentials — Detection and Response Guide
A Cross-Platform Language Is Now a Cross-Platform Problem Security researchers have identified a new macOS malware variant written in Go tha...