Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
LofyStealer, Lumma & KYCShadow: Multi-Vector Credential Theft Surge — OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a coordinated surge in credential theft activity targeting diverse sectors. Threat actors are leve...
Vercel Breach: Detecting and Mitigating OAuth Sprawl & Shadow AI Supply Chain Attacks
Introduction The recent breach involving Vercel serves as a stark warning about the dangers of transitive trust in cloud environments. Attac...
GlassWorm, EtherRAT & Rebex RAT: Blockchain-C2 and Multi-Stage Supply Chain Attacks
GlassWorm, EtherRAT & Rebex RAT: Blockchain-C2 and Multi-Stage Supply Chain Attacks Excerpt APTs using Solana/Ethereum smart contracts & Tel...
"Mini Shai-Hulud": SAP npm Supply Chain Attack — Detection and Credential Protection
"Mini Shai-Hulud": SAP npm Supply Chain Attack — Detection and Credential Protection Introduction Defenders need to be on high alert followi...
ClickFix, GlassWorm & EtherRAT: Multi-Vector Social Engineering and Blockchain C2 Campaigns — Enterprise Detection Pack
Threat Intelligence Briefing: Multi-Vector Campaigns Leveraging LotL and Blockchain C2 Threat Summary Recent OTX pulse data indicates a surg...
Multi-Vector Credential Theft: ClickFix, PyPI Poisoning & AI Agent Exploitation — OTX Pulse Analysis
Executive Summary Current OTX pulse data reveals a convergence of sophisticated initial access vectors aimed exclusively at harvesting crede...
Multi-Vector Infostealer Surge: ClickFix, PyPI Poisoning, and AI-Delivered AMOS
Multi-Vector Infostealer Surge: ClickFix, PyPI Poisoning, and AI-Delivered AMOS Threat Summary Recent OTX pulses indicate a dangerous conver...
ClickFix, PyPI Supply Chain, and AI Agent Abuse: Multi-Vector Infostealer Campaign — Detection Pack
Threat Summary Current OTX pulse data indicates a convergence of high-risk delivery mechanisms aimed at credential theft and initial access....
GlassWorm OpenVSX 'Sleeper' Extensions: Supply Chain Attack Detection and Remediation
Introduction A resurgence of the GlassWorm campaign has been identified, specifically targeting the developer ecosystem via the OpenVSX exte...