Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Shai-Hulud NPM Worm & ClickFix WebDAV: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Recent OTX Pulse data reveals a coordinated surge in credential theft operations targeting both development environments and ...
Compromised @joyfill npm Packages Delivering DEV#POPPER RAT — Detection and Remediation Guide
Compromised @joyfill npm Packages Delivering DEVPOPPER RAT — Detection and Remediation Guide Introduction A concerning supply chain attack i...
Supply Chain Compromise: Klue to LastPass OAuth Token Theft — CRM Data Breach
Threat Summary Recent OTX pulses indicate a significant supply chain security incident impacting LastPass. The attack vector involves the co...
LokiBot Resurgence & GitHub Actions Supply Chain Attacks: OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a convergence of legacy malware persistence and modern infrastructure abuse. A mature LokiBot info...
Woodgnat Mistic Backdoor & Shai-Hulud NPM Supply Chain Attack: OTX Pulse Analysis
Woodgnat Mistic Backdoor & Shai-Hulud NPM Supply Chain Attack: OTX Pulse Analysis Threat Summary Recent OTX pulses indicate a convergence of...
GitHub Actions Weaponization Campaign Targets cPanel and WHM Servers — Detection and Defense Guide
GitHub Actions Weaponization Campaign Targets cPanel and WHM Servers — Detection and Defense Guide Introduction Security researchers have un...
Icarus Threat Group: Klue Supply Chain Attack & OAuth Token Theft — Detection Engineering
Threat Summary The Icarus threat group has launched a sophisticated supply chain attack targeting Klue, a market intelligence platform used ...
SleeperGem Supply Chain Attack — RubyGems Detection and Remediation
Introduction Defenders need to act immediately against a new software supply chain attack dubbed "SleeperGem." Security researchers have ide...
Unpatched Cursor IDE Vulnerability: Mitigating Arbitrary Code Execution via Malicious Git Binaries
Unpatched Cursor IDE Vulnerability: Mitigating Arbitrary Code Execution via Malicious Git Binaries Introduction A critical vulnerability has...