Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Hola Browser Supply Chain Compromise: Cryptominer Detection and Removal
Introduction Security researchers have identified a critical supply chain attack targeting the Windows version of the Hola Browser. In this ...
Claude Code GitHub Action Vulnerability: Repository Hijacking Analysis and Hardening
Introduction A critical security weakness in Anthropic's claude-code GitHub Action has exposed a dangerous attack vector within the modern s...
ClickFix, LofyStealer & JINX-0164: Multi-Vector Social Engineering & Supply Chain Assaults — OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a convergence of sophisticated, financially motivated threat campaigns targeting distinct sectors:...
ClickFix, LofyStealer, and JINX-0164: OTX Pulse Analysis on Emerging Infostealer & Supply Chain Threats
Threat Summary The current threat landscape indicates a aggressive multi-vector campaign focused on credential theft and initial access via ...
ClickFix, LofyStealer, and JINX-0164: OTX Pulse Analysis — Credential Theft & Supply Chain Attacks
ClickFix, LofyStealer, and JINX-0164: OTX Pulse Analysis — Credential Theft & Supply Chain Attacks Excerpt: Active campaigns involving Click...
ClickFix, LofyStealer & JINX-0164: Multi-Vector Infostealer & Supply Chain Assault — OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a coordinated surge in credential theft operations leveraging diverse attack vectors. Threat actor...
Critical Infostealer Surge: ClickFix, LofyStealer, and NPM Supply Chain Attacks Targeting Cloud & Gaming Sectors
Threat Summary Recent OTX pulse data indicates a surge in sophisticated credential theft campaigns utilizing diverse initial access vectors ...
CISA KEV Flash: Critical PAN-OS Auth Bypass & Linux Kernel Flaws Under Active Attack
Active Exploitation Intelligence CISA has added 8 vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog between May 26 and Ju...
Red Hat npm Supply-Chain Attack: Detecting and Remediating Shai-Hulud Miasma Credential Theft
Introduction A critical supply-chain attack has compromised more than 30 npm packages within Red Hat's '@redhat-cloud-services' namespace, d...