Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
GoSerpent RAT + HelloNet ViPNet Supply-Chain Campaign: OTX Pulse Analysis — State-Sponsored Intrusion Detection Pack
GoSerpent RAT + HelloNet ViPNet Supply-Chain Campaign: OTX Pulse Analysis Threat Summary Two concurrent OTX pulses published 2026-08-15 reve...
Trivy Supply-Chain Compromise: How a Poisoned GitHub Action Exposed 2,500 Organizations — Detection and Remediation Guide
The Real Patient Zero: Trivy, Not LiteLLM When the LiteLLM supply-chain attack broke, the initial narrative pointed at poisoned PyPI package...
PATCHCORD, SHEETCORD & Evooo1Bot: Google Sheets C2 Espionage + Linux Botnet Credential Theft — OTX Detection Pack
Threat Summary This week's AlienVault OTX feed surfaces four distinct but operationally converging threat streams, all orbiting a common obj...
npm Supply Chain Attack: Six Malicious Packages Resolved C2 Servers via Ethereum Wallet — Detection and Remediation Guide
Security researchers have disclosed a campaign in which six malicious npm packages embedded a novel command-and-control (C2) resolution mech...
LiteLLM Supply Chain Attack via Trivy Compromise: 2,500+ Organizations Exposed — Detection and Remediation Guide
A Poisoned Python Package in the AI Stack LiteLLM — the popular open-source Python library used to normalize API calls across dozens of larg...
BdThemes Supply Chain Attack: Poisoned JSON Creates Rogue WordPress Admins — Detection and Remediation Guide
BdThemes Supply Chain Attack: Poisoned JSON Creates Rogue WordPress Admins WordPress site owners running plugins from vendor BdThemes need t...
Head Mare Exploits TrueConf Server Flaws to Push PhantomCore via Trojanized Installers — Detection and Remediation Guide
Introduction Kaspersky's incident response team has confirmed that the threat actor Head Mare is once again weaponizing vulnerabilities in u...
BdThemes Supply-Chain Compromise: Rogue WordPress Admin Accounts — Detection and Remediation Guide
BdThemes Supply-Chain Compromise: Rogue WordPress Admin Accounts — Detection and Remediation Guide A threat actor compromised the upstream i...
Malicious 'Solidity Pro' VS Code Extensions Steal Crypto Wallets and Credentials — Detection and Removal Guide
Malicious 'Solidity Pro' VS Code Extensions Steal Crypto Wallets and Credentials Security researchers have flagged a malicious Visual Studio...