Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Vercel Breach: Detecting Account Compromise via Context.ai Internal System Intrusion
Introduction On Wednesday, Vercel disclosed a concerning expansion of a security incident involving unauthorized access to its internal syst...
TwizAdmin, Mach-O Man & Void Dokkaebi: Multi-Platform MaaS & Supply Chain Threats
TwizAdmin, Mach-O Man & Void Dokkaebi: Multi-Platform MaaS & Supply Chain Threats Active APT campaigns detected: DataBreachPlus TwizAdmin Ma...
TwizAdmin, Mach-O Man & Void Dokkaebi: Multi-Platform Infostealer & Supply Chain Attacks
TwizAdmin, Mach-O Man & Void Dokkaebi: Multi-Platform Infostealer & Supply Chain Attacks Excerpt Active campaigns by Lazarus & DataBreachPlu...
The Gentlemen RaaS & Void Dokkaebi Supply Chain: OTX Pulse Analysis — Multi-Vector Credential Theft
Threat Intelligence Brief: The Gentlemen, Void Dokkaebi & ClickFix Campaigns Executive Summary Recent OTX pulses reveal a convergence of hig...
Vercel Breach Analysis: Third-Party AI Supply Chain Attack via Compromised Context.ai
Introduction Vercel recently disclosed a security breach stemming from a compromised third-party AI tool, Context.ai. This incident highligh...
The Gentlemen RaaS, Void Dokkaebi Supply Chain, & macOS ClickFix Infostealers: OTX Pulse Analysis
Threat Summary Recent OTX pulses reveal a convergence of high-impact threats targeting enterprise infrastructure, software supply chains, an...
OpenAI macOS Supply Chain Compromise: Axios Malware Injection & Certificate Revocation
OpenAI macOS Supply Chain Compromise: Axios Malware Injection & Certificate Revocation Introduction On March 31, 2026, OpenAI disclosed a si...
Axios npm Supply Chain Attack: Emergency Detection and Incident Response for Malicious Versions 1.14.1 and 0.30.4
Introduction A confirmed supply chain attack has compromised the Axios npm package, one of the most widely used HTTP client libraries in the...
Axios npm Supply Chain Compromise: Detection & Remediation for Versions 1.14.1 and 0.30.4
Introduction On March 31, 2026, the JavaScript ecosystem faced a critical supply chain assault. The Cybersecurity and Infrastructure Securit...