Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Ledger Hardware Implant via CryptoBilis Reseller: Supply-Chain Defense, Verification, and Response Guide
Introduction Ledger has publicly confirmed what many in the hardware wallet community feared: devices distributed through the Southeast Asia...
Daiichi Kosho Supply Chain Breach Exposes 8 Million Karaoke Customers — Detection and Third-Party Risk Response Guide
Daiichi Kosho Supply Chain Breach: 8 Million Records Out the Door Through a Trusted Partner Daiichi Kosho — one of the largest karaoke equip...
JFrog Artifactory Zero-Day Chain (CVE-2026-42016 / CVE-2026-42018 / CVE-2026-82329): In-the-Wild Exploitation Drops Rust Backdoor via log.gitclone.org C2 — OTX Detection Pack
JFrog Artifactory Under Active Attack: Three-CVE Exploit Chain Deploys Rust Backdoor Threat Summary AlienVault OTX pulse data confirms in-th...
Ransomware Affiliate Betrayal, WhatsApp RAT, and Malicious Dev Packages: A Defender's Playbook for the Latest ThreatsDay Roundup
When the Criminals Can't Trust Each Other Either This week's ThreatsDay roundup is a useful reminder that operational security failures are ...
GitHub Actions Credential-Theft Campaign Hits 340+ Repos via Compromised Maintainers: Detection and Response Guide
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories Security researchers at StepSecurity have disclose...
TraderTraitor Terraform Supply-Chain Campaign, Blockchain-C2 Hotel Intrusion Wave & Flax Typhoon Disruption: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent OTX pulses paint a picture of an accelerating convergence between supply-chain compromise, novel C2 evasion,...
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis — Credential Theft Detection Pack
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis Two fresh OTX pulses paint a converging picture: credentials a...
FortiBleed FortiGate Credential Harvesting + Shai-Hulud npm Worm & AWS Bedrock Key-Jacking: OTX Detection Pack
Threat Summary Four concurrent OTX pulses published on 2026-10-07/08 reveal a maturing, multi-front credential-theft ecosystem in which stol...
Web3 Meets the Cloud Supply Chain: Defending Against Blockchain-Based C2 and Open-Source Package Compromise (Unit 42)
The New Attack Surface Nobody Budgeted For Unit 42 has published research that should be on every cloud security team's desk this quarter: t...