Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Detecting 'Peeping Tom' Supply Chain Attacks: Analysis of Malicious Dev Tools (CVE-2026-3981)
Detecting 'Peeping Tom' Supply Chain Attacks: Analysis of Malicious Dev Tools (CVE-2026-3981) Introduction The threat landscape this week is...
TeamPCP, LofyStealer & GhostSocks: OTX Threat Analysis — Enterprise Detection Pack
Threat Summary Recent OTX pulses indicate a convergence of high-risk threats ranging from sophisticated supply chain compromises to targeted...
TeamPCP Supply Chain, LofyStealer & GhostSocks: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Recent OTX pulses highlight a converging threat landscape involving supply chain compromise, targeted credential theft, and i...
Mini Shai-Hulud: Detecting SAP NPM Supply Chain Attack and Bun Binary Abuse
Introduction The open-source ecosystem faces a persistent threat from supply chain compromises, and the recent "Mini Shai-Hulud" attack camp...
LofyStealer, Lumma & KYCShadow: Multi-Vector Credential Theft Surge — OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a coordinated surge in credential theft activity targeting diverse sectors. Threat actors are leve...
Vercel Breach: Detecting and Mitigating OAuth Sprawl & Shadow AI Supply Chain Attacks
Introduction The recent breach involving Vercel serves as a stark warning about the dangers of transitive trust in cloud environments. Attac...
GlassWorm, EtherRAT & Rebex RAT: Blockchain-C2 and Multi-Stage Supply Chain Attacks
GlassWorm, EtherRAT & Rebex RAT: Blockchain-C2 and Multi-Stage Supply Chain Attacks Excerpt APTs using Solana/Ethereum smart contracts & Tel...
"Mini Shai-Hulud": SAP npm Supply Chain Attack — Detection and Credential Protection
"Mini Shai-Hulud": SAP npm Supply Chain Attack — Detection and Credential Protection Introduction Defenders need to be on high alert followi...
ClickFix, GlassWorm & EtherRAT: Multi-Vector Social Engineering and Blockchain C2 Campaigns — Enterprise Detection Pack
Threat Intelligence Briefing: Multi-Vector Campaigns Leveraging LotL and Blockchain C2 Threat Summary Recent OTX pulse data indicates a surg...