Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Supply Chain Attack: Malicious Node-IPC Versions (v9.1.6, v9.2.3, v12.0.1) — Detection and Remediation
Introduction A critical supply chain compromise has been identified within the widely used node-ipc npm package. Security researchers at Soc...
Falcon AIDR: Detecting Prompt Injection Threats in Kubernetes AI Applications
Falcon AIDR: Detecting Prompt Injection Threats in Kubernetes AI Applications Introduction The integration of Large Language Models (LLMs) i...
Microsoft MDASH AI Uncovers 16 Windows Flaws — Patch Advisory & Verification Guide
Introduction Microsoft has officially unveiled MDASH (Multi-model Agentic Scanning Harness), a sophisticated, model-agnostic AI system desig...
ModeloRAT Campaign Analysis: Microsoft Teams to Domain Compromise Detection Guide
ModeloRAT Campaign Analysis: Microsoft Teams to Domain Compromise Detection Guide Excerpt Attackers are abusing Microsoft Teams for initial ...
Accelerating Detection Engineering: AI-Assisted Synthetic Attack Log Generation
Accelerating Detection Engineering: AI-Assisted Synthetic Attack Log Generation Introduction Detection engineering is often bottlenecked by ...
RubyGems Supply Chain Attack: Detecting and Mitigating Malicious Package Campaigns
Introduction The RubyGems repository—the foundational infrastructure for the Ruby ecosystem—is currently under a coordinated and significant...
Mini Shai-Hulud Worm: TanStack, Mistral AI & Guardrails Supply Chain Attack
Introduction A sophisticated supply chain campaign dubbed "Mini Shai-Hulud" has been attributed to the threat actor TeamPCP, resulting in th...
TeamPCP Supply Chain Attack on Checkmarx Jenkins AST Plugin — Detection and Remediation Guide
Introduction A critical supply chain attack has emerged involving the Checkmarx Jenkins AST (Application Security Testing) plugin. The threa...
Canvas LMS Availability Breach: Mitigating Service Disruption & Web Exploits
Canvas LMS Availability Breach: Mitigating Service Disruption & Web Exploits Introduction A widespread cyberattack targeting Instructure’s C...