Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LokiBot Resurgence & GitHub Actions Supply Chain Attacks: OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a convergence of legacy malware persistence and modern infrastructure abuse. A mature LokiBot info...
Woodgnat Mistic Backdoor & Shai-Hulud NPM Supply Chain Attack: OTX Pulse Analysis
Woodgnat Mistic Backdoor & Shai-Hulud NPM Supply Chain Attack: OTX Pulse Analysis Threat Summary Recent OTX pulses indicate a convergence of...
GitHub Actions Weaponization Campaign Targets cPanel and WHM Servers — Detection and Defense Guide
GitHub Actions Weaponization Campaign Targets cPanel and WHM Servers — Detection and Defense Guide Introduction Security researchers have un...
Icarus Threat Group: Klue Supply Chain Attack & OAuth Token Theft — Detection Engineering
Threat Summary The Icarus threat group has launched a sophisticated supply chain attack targeting Klue, a market intelligence platform used ...
SleeperGem Supply Chain Attack — RubyGems Detection and Remediation
Introduction Defenders need to act immediately against a new software supply chain attack dubbed "SleeperGem." Security researchers have ide...
Unpatched Cursor IDE Vulnerability: Mitigating Arbitrary Code Execution via Malicious Git Binaries
Unpatched Cursor IDE Vulnerability: Mitigating Arbitrary Code Execution via Malicious Git Binaries Introduction A critical vulnerability has...
Miasma Infostealer & AsyncAPI Supply Chain Compromise: GitHub Actions 'Pwn Request' Analysis
Miasma Infostealer & AsyncAPI Supply Chain Compromise: GitHub Actions 'Pwn Request' Analysis Threat Summary OTX Pulse data reveals a critica...
jscrambler npm Supply Chain Compromise: Native Binary Infostealer Injection
Threat Summary OTX Pulse data indicates a sophisticated supply chain attack targeting the JavaScript ecosystem. The jscrambler npm package (...
Supply Chain Attack: Malicious Injective SDK npm Package v1.20.21 Exfiltrating Web3 Wallet Keys
Threat Summary Intelligence confirms an active supply chain attack targeting the blockchain development sector. An adversary successfully co...