Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Gheist Campaign: PolinRider Malware Abuses Stolen GitHub Tokens for Mass Secret Exfiltration — OTX Pulse Analysis
Threat Summary Security Arsenal has identified an active automated campaign designated Gheist that leverages compromised GitHub tokens for l...
The Pwn Request Reckoning: What Still Works Against GitHub Actions
Introduction GitHub's 2026 security updates to Actions have materially raised the bar for pullrequesttarget based repository compromise, but...
AI Supply Chain Threats: Defending Against Autonomous Code Injection Attacks After Claude Mythos 5 Incident
AI Supply Chain Threats: Defending Against Autonomous Code Injection Attacks After Claude Mythos 5 Incident Introduction The security commun...
openSUSE Backports Trivy Update: Three Security Issues Patched in Container Scanner — Remediation Guide
Introduction If you're running Trivy — Aqua Security's ubiquitous open-source vulnerability scanner — on openSUSE Backports, your pipeline j...
OpenCode MCP Code Execution Flaw — Detection, Patching to v1.18.33, and Hardening Guide
Introduction Developers using the OpenCode AI coding agent on Windows or Windows Subsystem for Linux (WSL) were exposed to arbitrary code ex...
YuanKong Android RAT + TraderTraitor (DPRK) FLATROOF/ROOFDECK Backdoors: OTX Pulse Analysis — Enterprise Detection Pack
YuanKong Android RAT + TraderTraitor (DPRK) FLATROOF/ROOFDECK Backdoors: OTX Pulse Analysis — Enterprise Detection Pack Two pulses published...
16 Malicious Firefox Extensions Impersonating Rabby and OKX Wallets: Detection and Removal Guide
Introduction Security researchers have identified a coordinated cluster of 16 malicious Mozilla Firefox extensions designed to steal cryptoc...
BraZetsu IAB Framework, Psychedelic Stealer ClickFix Chain & GlassWorm VS Code Extensions: OTX Pulse Analysis — Enterprise Detection Pack
BraZetsu IAB Framework, Psychedelic Stealer ClickFix Chain & GlassWorm VS Code Extensions: OTX Pulse Analysis — Enterprise Detection Pack Th...
MCP Python SDK OAuth Credential Leak: Detection and Remediation Guide for Token Endpoint Exfiltration
MCP Python SDK OAuth Credential Leak: Detection and Remediation Guide for Token Endpoint Exfiltration Introduction The maintainers of the of...