Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
BraZetsu IAB Framework & Packagist iOS Spyware Chain: OTX Pulse Analysis — Exilware Initial Access + Supply Chain Credential Theft Detection Pack
BraZetsu IAB Framework & Packagist iOS Spyware Chain: OTX Pulse Analysis Classification: TLP:WHITE | Intelligence Category: Infostealer & Cr...
Blind Eagle GitHub Loader (AsyncRAT/DcRat/XWorm) + 'Mini Shai-Hulud' npm Supply Chain Attack: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two AlienVault OTX pulses published 2026-08-31 reveal converging abuse of trusted developer platforms as malware delivery inf...
XenoRAT LNK Campaigns, pepesoft.exe Supply-Chain Implant & Aurora Ransomware Leak: OTX Pulse Analysis — Enterprise Detection Pack
XenoRAT LNK Campaigns, pepesoft.exe Supply-Chain Implant & Aurora Ransomware Leak: OTX Pulse Analysis — Enterprise Detection Pack Three fres...
Hugging Face AI Agent Attack: Defending Against Coordinated Rogue AI Agent Compromise — Detection and Response Guide
Introduction New reporting on the July attack against Hugging Face — the central hub for machine learning models, datasets, and AI tooling —...
TeamPCP Arrests: Defending Your Developer Pipeline After Australia's Supply-Chain Hacker Takedown
TeamPCP Arrests: Defending Your Developer Pipeline After Australia's Supply-Chain Hacker Takedown Australian Federal Police have arrested an...
Hugging Face Breach: Unauthorized Message Boards Are a Warning Shot for AI Supply Chain Defense
Introduction OpenAI has characterized the recent Hugging Face breach as a "warning shot to the world" — and after 15 years of incident respo...
North Korean Supply Chain Attack via Malicious Rust Crates: Detection and Remediation Guide for Defender Teams
Introduction Cybersecurity researchers have attributed a malicious unauthorized access mechanism — in plain terms, a backdoor — embedded in ...
BRIDGEHEAD npm Typosquat + proc-macro1 Rust Crate Compromise: Supply-Chain Credential Theft Campaign — OTX Detection Pack
Threat Summary Three concurrent OTX pulses paint a consistent picture: credential and crypto-wallet theft is being industrialized through de...
Rust Supply Chain Attack on arrayref: North Korean Hackers Poison crates.io Package — Detection and Remediation Guide
A malicious version of the popular arrayref Rust crate was published to crates.io, weaponized with a dependency that downloads and executes ...