Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Bitwarden CLI npm Compromise: Detecting Malicious @bitwarden/cli Packages (v2024.8.0, v2024.7.1)
Introduction The software supply chain was struck again when attackers compromised the official Bitwarden CLI npm package, @bitwarden/cli. B...
UNC6692 Microsoft Teams Phishing: Detecting SNOW Malware and IT Helpdesk Impersonation
UNC6692 Microsoft Teams Phishing: Detecting SNOW Malware and IT Helpdesk Impersonation Introduction A new threat cluster, tracked as UNC6692...
Defending Against China-Nexus Covert Networks: Edge Router Compromise & Detection
Introduction A joint advisory released by CISA, the NCSC (UK), and international partners (AA26-113A) highlights a persistent and alarming s...
GopherWhisper APT: Detecting Go-Based Loaders and Injectors in Government Networks
Introduction A previously undocumented Advanced Persistent Threat (APT) group, tracked as GopherWhisper, has actively compromised at least 1...
Malicious Checkmarx KICS Docker Images & VS Code Extensions: Supply Chain Detection and Remediation
Malicious Checkmarx KICS Docker Images & VS Code Extensions: Supply Chain Detection and Remediation Introduction A critical supply chain com...
Google Antigravity Unauthenticated RCE: Detection and Remediation for Active Exploitation
Google Antigravity Unauthenticated RCE: Detection and Remediation for Active Exploitation Introduction Security researchers and threat intel...
NGate Android Malware Analysis: NFC Data Theft via Trojanized HandyPay App
NGate Android Malware Analysis: NFC Data Theft via Trojanized HandyPay App Introduction A new variant of the NGate malware is actively targe...
Rapid7 Bulk Export MCP Server: Accelerating AI-Powered Security Workflows and Vulnerability Prioritization
Rapid7 Bulk Export MCP Server: Accelerating AI-Powered Security Workflows and Vulnerability Prioritization Introduction Rapid7 has released ...
Axios npm Supply Chain Compromise: Detection & Remediation for Versions 1.14.1 and 0.30.4
Introduction On March 31, 2026, the JavaScript ecosystem faced a critical supply chain assault. The Cybersecurity and Infrastructure Securit...