Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
TeamPCP Supply Chain Poisoning & ClickFix Infostealer Surge: OTX Pulse Analysis
Threat Summary Recent OTX pulse data indicates a multi-faceted surge in credential theft activity driven by supply chain compromises and soc...
Npm Supply Chain Attack: Worm-Like Propagation and Credential Theft — Detection and Remediation
Introduction A sophisticated supply chain attack targeting the npm registry has been identified, characterized by worm-like propagation capa...
macOS LotL Abuse & Supply Chain Compromise: ThreatsDay Defense Guide
Introduction The ThreatsDay Bulletin this week paints a stark picture of the modern threat landscape: a $290M DeFi heist, rampant abuse of m...
TwizAdmin & ClickFix Campaigns: Infostealer & Supply Chain Attacks — OTX Pulse Analysis
Threat Summary The latest OTX pulses indicate a convergence of high-risk credential theft activity and ransomware preparation. We are tracki...
Supply Chain & Multi-Stage Infostealers: TwizAdmin, Mach-O Man, and TeamPCP Analysis — Detection Pack
Threat Summary The current threat landscape reflects a dangerous convergence of supply chain compromises and direct credential theft operati...
Bitwarden CLI npm Compromise: Detecting Malicious @bitwarden/cli Packages (v2024.8.0, v2024.7.1)
Introduction The software supply chain was struck again when attackers compromised the official Bitwarden CLI npm package, @bitwarden/cli. B...
Lazarus & Void Dokkaebi Campaigns: Mach-O Man, TwizAdmin, and Dev Repo Poisoning — OTX Pulse Analysis
Threat Summary Live OTX data indicates a surge in sophisticated operations targeting the financial and technology sectors. Three distinct th...
Checkmarx KICS Supply Chain Compromise: Detection and Incident Response Guide
Introduction A critical supply-chain breach has been confirmed affecting the Checkmarx KICS (Keeping Infrastructure as Code Secure) analysis...
Vercel Breach: Detecting Account Compromise via Context.ai Internal System Intrusion
Introduction On Wednesday, Vercel disclosed a concerning expansion of a security incident involving unauthorized access to its internal syst...