Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ModeloRAT Campaign Analysis: Microsoft Teams to Domain Compromise Detection Guide
ModeloRAT Campaign Analysis: Microsoft Teams to Domain Compromise Detection Guide Excerpt Attackers are abusing Microsoft Teams for initial ...
Accelerating Detection Engineering: AI-Assisted Synthetic Attack Log Generation
Accelerating Detection Engineering: AI-Assisted Synthetic Attack Log Generation Introduction Detection engineering is often bottlenecked by ...
QILIN Ransomware: Global Campaign Targets Business Services & Construction — CVE Exploitation Analysis
QILIN Ransomware: Global Campaign Targets Business Services & Construction — CVE Exploitation Analysis Threat Actor Profile — QILIN Aliases ...
RubyGems Supply Chain Attack: Detecting and Mitigating Malicious Package Campaigns
Introduction The RubyGems repository—the foundational infrastructure for the Ruby ecosystem—is currently under a coordinated and significant...
Mini Shai-Hulud Worm: TanStack, Mistral AI & Guardrails Supply Chain Attack
Introduction A sophisticated supply chain campaign dubbed "Mini Shai-Hulud" has been attributed to the threat actor TeamPCP, resulting in th...
Operationalizing Purple Teaming: Moving Beyond Co-Location to True Integration
Operationalizing Purple Teaming: Moving Beyond Co-Location to True Integration Introduction The "2 AM test" is the ultimate metric for SOC m...
TeamPCP Supply Chain Attack on Checkmarx Jenkins AST Plugin — Detection and Remediation Guide
Introduction A critical supply chain attack has emerged involving the Checkmarx Jenkins AST (Application Security Testing) plugin. The threa...
Canvas LMS Availability Breach: Mitigating Service Disruption & Web Exploits
Canvas LMS Availability Breach: Mitigating Service Disruption & Web Exploits Introduction A widespread cyberattack targeting Instructure’s C...
PyTorch Lightning Supply Chain Attack and ScarCruft APT: Detection & Remediation
Supply Chain Alert: Backdoored PyTorch Lightning and ScarCruft Gaming Attack Introduction The latest Security Affairs malware newsletter (Ro...