Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
npm Supply Chain Attacks: Detecting Shai Hulud-style Malware and CI/CD Persistence
Introduction The JavaScript ecosystem is currently the battleground for one of the most sophisticated supply chain campaigns we've seen in y...
ClickFix, GlassWorm & EtherRAT: Multi-Vector APT Campaign Analysis — Enterprise Defense Pack
Executive Summary Current OTX pulse data indicates a convergence of sophisticated threat campaigns utilizing \"Living-Off-The-Land\" (LotL) ...
ClickFix & KICS Supply Chain: Trigona, GlassWorm, and Stealer Swarm — Enterprise Detection Pack
ClickFix & KICS Supply Chain: Trigona, GlassWorm, and Stealer Swarm — Enterprise Detection Pack Executive Summary The threat landscape from ...
ClickFix, GlassWorm & EtherRAT: Cross-Platform Stealers and Blockchain C2 Tactics — OTX Analysis
Threat Summary Recent OTX pulses indicate a surge in sophisticated, multi-vector threats targeting enterprises, specifically focusing on fin...
TeamPCP Supply Chain Poisoning & ClickFix Infostealer Surge: OTX Pulse Analysis
Threat Summary Recent OTX pulse data indicates a multi-faceted surge in credential theft activity driven by supply chain compromises and soc...
Npm Supply Chain Attack: Worm-Like Propagation and Credential Theft — Detection and Remediation
Introduction A sophisticated supply chain attack targeting the npm registry has been identified, characterized by worm-like propagation capa...
macOS LotL Abuse & Supply Chain Compromise: ThreatsDay Defense Guide
Introduction The ThreatsDay Bulletin this week paints a stark picture of the modern threat landscape: a $290M DeFi heist, rampant abuse of m...
TwizAdmin & ClickFix Campaigns: Infostealer & Supply Chain Attacks — OTX Pulse Analysis
Threat Summary The latest OTX pulses indicate a convergence of high-risk credential theft activity and ransomware preparation. We are tracki...
Supply Chain & Multi-Stage Infostealers: TwizAdmin, Mach-O Man, and TeamPCP Analysis — Detection Pack
Threat Summary The current threat landscape reflects a dangerous convergence of supply chain compromises and direct credential theft operati...