Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
keyv & cacheable npm Supply Chain Compromise: Self-Propagating Cloud Credential Theft — OTX Pulse Analysis & Enterprise Detection Pack
keyv & cacheable npm Supply Chain Compromise: Self-Propagating Cloud Credential Theft — Enterprise Detection Pack Threat Summary A live OTX ...
QuickFox Supply Chain Attack: Detection and Response for FDMTP Malware
QuickFox Supply Chain Attack: Detection and Response for FDMTP Malware Introduction Security teams managing environments with QuickFox VPN n...
XCSSET v40 & SakDriver Rootkit: macOS Supply Chain & Windows Kernel Evasion
XCSSET v40 & SakDriver Rootkit: macOS Supply Chain & Windows Kernel Evasion Threat Summary Recent OTX pulses indicate a surge in sophisticat...
Shai-Hulud NPM Worm & ClickFix WebDAV: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Recent OTX Pulse data reveals a coordinated surge in credential theft operations targeting both development environments and ...
Compromised @joyfill npm Packages Delivering DEV#POPPER RAT — Detection and Remediation Guide
Compromised @joyfill npm Packages Delivering DEVPOPPER RAT — Detection and Remediation Guide Introduction A concerning supply chain attack i...
Supply Chain Compromise: Klue to LastPass OAuth Token Theft — CRM Data Breach
Threat Summary Recent OTX pulses indicate a significant supply chain security incident impacting LastPass. The attack vector involves the co...
LokiBot Resurgence & GitHub Actions Supply Chain Attacks: OTX Pulse Analysis
Threat Summary Recent OTX pulses indicate a convergence of legacy malware persistence and modern infrastructure abuse. A mature LokiBot info...
Woodgnat Mistic Backdoor & Shai-Hulud NPM Supply Chain Attack: OTX Pulse Analysis
Woodgnat Mistic Backdoor & Shai-Hulud NPM Supply Chain Attack: OTX Pulse Analysis Threat Summary Recent OTX pulses indicate a convergence of...
GitHub Actions Weaponization Campaign Targets cPanel and WHM Servers — Detection and Defense Guide
GitHub Actions Weaponization Campaign Targets cPanel and WHM Servers — Detection and Defense Guide Introduction Security researchers have un...