Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
NYC Health + Hospitals Supply Chain Breach: Third-Party Compromise and Data Exfiltration Detection
Introduction NYC Health + Hospitals, the largest municipal healthcare system in the United States, has confirmed a significant security brea...
Shai-Hulud Supply Chain Attack: Detection and Remediation for 600 Compromised npm Packages
Introduction A massive supply-chain attack campaign, dubbed "Shai-Hulud," has flooded the Node Package Manager (npm) registry with over 600 ...
TeamPCP Supply Chain Campaign: Checkmarx Jenkins Plugin & Mini Shai-Hulud Worm
TeamPCP Supply Chain Campaign: Checkmarx Jenkins Plugin & Mini Shai-Hulud Worm Introduction The TeamPCP threat actor has significantly escal...
Compromised Nx Console v18.95.0: VS Code Supply Chain Attack and Credential Theft
Compromised Nx Console v18.95.0: VS Code Supply Chain Attack and Credential Theft Introduction Security teams need to be on immediate alert ...
Malicious npm Packages: Infostealers and Phantom Bot DDoS — Detection and Removal Guide
Introduction Security researchers have identified a fresh wave of malicious packages targeting the npm ecosystem, specifically designed to c...
CVE-2026-21410 & Supply Chain Attacks: Exchange Zero-Day, npm Worms, and AI Poisoning
Introduction This week opened with a stark reminder that trust is the most vulnerable attack surface. We are tracking active exploitation of...
UAT-8616 & Chollima APTs: Cisco SD-WAN Exploits & NPM Supply Chain Attacks — OTX Pulse Analysis
Threat Summary Recent intelligence from the OTX pulse feed indicates a surge in high-impact exploitation targeting enterprise infrastructure...
Gremlin, OtterCookie, and Vidar Surge: Credential Theft via Supply Chain and Edge Exploits
Executive Summary Live OTX pulse data from May 17, 2026, reveals a coordinated escalation in credential theft operations targeting enterpris...
TanStack 'Mini Shai-Hulud' Supply Chain Attack: IOC Analysis and macOS Hardening
Introduction OpenAI recently confirmed that two of its corporate macOS devices were compromised during the TanStack supply chain attack, dub...