Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LLMjacking via Malvertising: How Phished Cloud Credentials Become Six-Figure AI API Bills — Detection and Response Guide
Introduction A new wave of financially motivated attacks documented by Wiz demonstrates a threat chain that every cloud-first organization n...
LiteLLM 1.107.0 Supply Chain Compromise: PyPI Credential Stealer and Backdoor — Detection and Remediation Guide
Introduction The LiteLLM Python package — one of the most widely deployed libraries for routing calls to large language model APIs — has bee...
LLMjacking via GCP Phishing: Gemini API Abuse & Cloud Billing Hijack Campaign — OTX Detection Pack
LLMjacking via GCP Phishing: Gemini API Abuse & Cloud Billing Hijack Campaign Threat Summary OTX pulse data published by AlienVault on 2026-...
OpenCode Console Breach Exposes OpenAI, Anthropic, and Google Gemini API Keys — Detection, Key Rotation, and Incident Response Guide
OpenCode Console Breach: What Defenders Need to Do Right Now If your developers use OpenCode Console — the web-based management interface fo...
APT28 'Swallowtail' Espionage Campaign: Hookedge Backdoor Hits NATO Defense Firms — OTX Pulse Detection Pack
APT28 'Swallowtail' Espionage Campaign: Hookedge Backdoor Hits NATO Defense Firms Threat Summary AlienVault OTX pulse data confirms an activ...
OpenCode Console Breach: AI Provider API Keys Potentially Exposed — Detection, Rotation, and Containment Guide
OpenCode Console Breach: Your AI Provider Keys May Be Walking Out the Door On the night of October 16, an intruder gained access to a legacy...
PolinRider Infostealer: Compromised GitHub Accounts Poison Packagist Supply Chain — OTX Detection Pack
PolinRider Infostealer: Compromised GitHub Accounts Poison Packagist Supply Chain Threat Summary AlienVault OTX pulse data confirms an activ...
Anthropic 'SneakPeek' Zero-Click Flaw in Claude Code Desktop: Detecting and Remediating Silent Credential Theft
Overview A newly disclosed vulnerability dubbed 'SneakPeek' in Anthropic's Claude Code Desktop application demonstrates something security t...
KGB RAT, KREMLIN, Variola & ARMORY CASTLE: OTX Pulse Analysis — Infostealer, Browser Hijack, and Zero-Day Exploitation Detection Pack
KGB RAT, KREMLIN, Variola & ARMORY CASTLE: OTX Pulse Analysis — Infostealer, Browser Hijack, and Zero-Day Exploitation Detection Pack This e...