Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Vidar v1.5, Gremlin & Void Dokkaebi: Cross-Platform Credential Harvesting & Supply Chain Threats — OTX Pulse Analysis
Threat Summary Intelligence from OTX pulses dated 2026-05-21 indicates a surge in sophisticated credential theft and infrastructure hijackin...
Grafana GitHub Source Code Exfiltration via TanStack npm Supply Chain Attack — IR Guide
Introduction On May 19, 2026, Grafana Labs disclosed a significant security incident confirming that their GitHub environment was breached, ...
NYC Health + Hospitals Supply Chain Breach: Third-Party Compromise and Data Exfiltration Detection
Introduction NYC Health + Hospitals, the largest municipal healthcare system in the United States, has confirmed a significant security brea...
Shai-Hulud Supply Chain Attack: Detection and Remediation for 600 Compromised npm Packages
Introduction A massive supply-chain attack campaign, dubbed "Shai-Hulud," has flooded the Node Package Manager (npm) registry with over 600 ...
TeamPCP Supply Chain Campaign: Checkmarx Jenkins Plugin & Mini Shai-Hulud Worm
TeamPCP Supply Chain Campaign: Checkmarx Jenkins Plugin & Mini Shai-Hulud Worm Introduction The TeamPCP threat actor has significantly escal...
Compromised Nx Console v18.95.0: VS Code Supply Chain Attack and Credential Theft
Compromised Nx Console v18.95.0: VS Code Supply Chain Attack and Credential Theft Introduction Security teams need to be on immediate alert ...
Malicious npm Packages: Infostealers and Phantom Bot DDoS — Detection and Removal Guide
Introduction Security researchers have identified a fresh wave of malicious packages targeting the npm ecosystem, specifically designed to c...
CVE-2026-21410 & Supply Chain Attacks: Exchange Zero-Day, npm Worms, and AI Poisoning
Introduction This week opened with a stark reminder that trust is the most vulnerable attack surface. We are tracking active exploitation of...
UAT-8616 & Chollima APTs: Cisco SD-WAN Exploits & NPM Supply Chain Attacks — OTX Pulse Analysis
Threat Summary Recent intelligence from the OTX pulse feed indicates a surge in high-impact exploitation targeting enterprise infrastructure...