Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
RubyGems Supply Chain Attack: Detecting and Mitigating Malicious Package Campaigns
Introduction The RubyGems repository—the foundational infrastructure for the Ruby ecosystem—is currently under a coordinated and significant...
Mini Shai-Hulud Worm: TanStack, Mistral AI & Guardrails Supply Chain Attack
Introduction A sophisticated supply chain campaign dubbed "Mini Shai-Hulud" has been attributed to the threat actor TeamPCP, resulting in th...
TeamPCP Supply Chain Attack on Checkmarx Jenkins AST Plugin — Detection and Remediation Guide
Introduction A critical supply chain attack has emerged involving the Checkmarx Jenkins AST (Application Security Testing) plugin. The threa...
Canvas LMS Availability Breach: Mitigating Service Disruption & Web Exploits
Canvas LMS Availability Breach: Mitigating Service Disruption & Web Exploits Introduction A widespread cyberattack targeting Instructure’s C...
PyTorch Lightning Supply Chain Attack and ScarCruft APT: Detection & Remediation
Supply Chain Alert: Backdoored PyTorch Lightning and ScarCruft Gaming Attack Introduction The latest Security Affairs malware newsletter (Ro...
YARA-X 1.16.0 Release: Stability Fixes and Detection Logic Improvements
YARA-X 1.16.0 Release: Stability Fixes and Detection Logic Improvements Introduction On May 10th, the YARA-X project released version 1.16.0...
ShinyHunters vs. Instructure: Detecting and Containing Massive PII Exfiltration
Introduction The threat actor ShinyHunters has reportedly claimed a second attack against Instructure, the creator of the Canvas Learning Ma...
Trellix Source Code Breach: RansomHouse Intrusion — Detection and Hardening Guide
Trellix Source Code Breach: RansomHouse Intrusion — Detection and Hardening Guide Introduction Security Arsenal is tracking a significant cl...
ClickFix Attacks Delivering Vidar Infostealer: ACSC Detection & Defense Guide
Introduction The Australian Cyber Security Centre (ACSC) has issued a critical alert regarding an active campaign employing "ClickFix" techn...