Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Bitwarden CLI npm Compromise: Detecting Malicious @bitwarden/cli Packages (v2024.8.0, v2024.7.1)
Introduction The software supply chain was struck again when attackers compromised the official Bitwarden CLI npm package, @bitwarden/cli. B...
Lazarus & Void Dokkaebi Campaigns: Mach-O Man, TwizAdmin, and Dev Repo Poisoning — OTX Pulse Analysis
Threat Summary Live OTX data indicates a surge in sophisticated operations targeting the financial and technology sectors. Three distinct th...
Checkmarx KICS Supply Chain Compromise: Detection and Incident Response Guide
Introduction A critical supply-chain breach has been confirmed affecting the Checkmarx KICS (Keeping Infrastructure as Code Secure) analysis...
Vercel Breach: Detecting Account Compromise via Context.ai Internal System Intrusion
Introduction On Wednesday, Vercel disclosed a concerning expansion of a security incident involving unauthorized access to its internal syst...
TwizAdmin, Mach-O Man & Void Dokkaebi: Multi-Platform MaaS & Supply Chain Threats
TwizAdmin, Mach-O Man & Void Dokkaebi: Multi-Platform MaaS & Supply Chain Threats Active APT campaigns detected: DataBreachPlus TwizAdmin Ma...
TwizAdmin, Mach-O Man & Void Dokkaebi: Multi-Platform Infostealer & Supply Chain Attacks
TwizAdmin, Mach-O Man & Void Dokkaebi: Multi-Platform Infostealer & Supply Chain Attacks Excerpt Active campaigns by Lazarus & DataBreachPlu...
The Gentlemen RaaS & Void Dokkaebi Supply Chain: OTX Pulse Analysis — Multi-Vector Credential Theft
Threat Intelligence Brief: The Gentlemen, Void Dokkaebi & ClickFix Campaigns Executive Summary Recent OTX pulses reveal a convergence of hig...
Vercel Breach Analysis: Third-Party AI Supply Chain Attack via Compromised Context.ai
Introduction Vercel recently disclosed a security breach stemming from a compromised third-party AI tool, Context.ai. This incident highligh...
The Gentlemen RaaS, Void Dokkaebi Supply Chain, & macOS ClickFix Infostealers: OTX Pulse Analysis
Threat Summary Recent OTX pulses reveal a convergence of high-impact threats targeting enterprise infrastructure, software supply chains, an...