Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
MALFEX npm Supply Chain Campaign: Detecting and Removing the Overlord RAT and Info-Stealer in Your Developer Environment
Introduction CloudSEK and Checkmarx have jointly disclosed a long-running npm supply chain campaign, codenamed MALFEX, that has been quietly...
ClickFix Campaign on Hacked Ukrainian Sites Drops Psychedelic Stealer via Fake Cloudflare Pages — Detection and Defense Guide
What Happened Threat researchers are tracking an active ClickFix campaign in which attackers have compromised legitimate Ukrainian business ...
Pass-ta-key Attacks: Detecting Google Passkey Hijacking on Windows
Introduction Security researchers have unveiled "Pass-ta-key," a set of three novel attack vectors that allow malicious software to hijack G...
Atomic MacOS (AMOS) Stealer: Detection and Incident Response Playbook
Atomic MacOS (AMOS) Stealer: Detection and Incident Response Playbook Introduction The SANS Internet Storm Center (ISC) has raised the flag ...
CrashStealer macOS Malware: Countering Notarized Dropper Gatekeeper Bypasses
Introduction The macOS threat landscape has matured significantly, and the emergence of CrashStealer in July 2026 marks a troubling escalati...
PamStealer macOS Malware: Detecting Fake Maccy Apps and PAM Attacks
Introduction Security operations teams must be on high alert for PamStealer, a newly identified macOS information stealer actively targeting...
3AM and Lumma Stealer Botnet Takedown: Detection and Remediation Guide
Introduction In a massive coordinated operation, Dutch law enforcement recently dismantled a botnet infrastructure that had compromised appr...
Kimsuky PebbleDash, Vidar Stealer & ASO RAT: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Recent OTX pulses indicate a surge in diverse threat campaigns ranging from state-sponsored espionage to financially motivate...
Venom Stealer MaaS: Detecting and Blocking ClickFix Social Engineering Attacks
Introduction The commoditization of cybercrime continues to accelerate with the emergence of Venom Stealer, a new Malware-as-a-Service (MaaS...