Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CL-STA-1178 Blinder Tunnel + Agent Tesla Q3 Surge: OTX Detection Pack for ShelbyLoader, GTA VI Lures, Langflow RCE and AWS Bedrock Key Testing
CL-STA-1178 Blinder Tunnel + Agent Tesla Q3 Surge: OTX Detection Pack Threat Summary The latest OTX pulses describe a credential-theft-heavy...
LLMjacking via Malvertising: How Phished Cloud Credentials Become Six-Figure AI API Bills — Detection and Response Guide
Introduction A new wave of financially motivated attacks documented by Wiz demonstrates a threat chain that every cloud-first organization n...
FLATROOF/ROOFDECK Trojanized Terraform Campaign, ARTEX Agentic-AI Attacks & AWS Bedrock Credential Testing: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Three concurrent OTX pulses paint a coherent picture of a credential-theft and developer-targeting ecosystem that has matured...
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis — Credential Theft Detection Pack
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis Two fresh OTX pulses paint a converging picture: credentials a...
FortiBleed FortiGate Credential Harvesting + Shai-Hulud npm Worm & AWS Bedrock Key-Jacking: OTX Detection Pack
Threat Summary Four concurrent OTX pulses published on 2026-10-07/08 reveal a maturing, multi-front credential-theft ecosystem in which stol...
Fake AI Ads Browser-in-the-Browser + AWS Bedrock Token-Jacking: OTX Pulse Detection Pack
Threat Summary The two OTX pulses describe a converging credential-theft problem rather than a single named intrusion set. The first campaig...
AWS, Google, and Vercel AI Agent Flaws Bypass Model Guardrails — Detection and Hardening Guide
Introduction Security researchers have disclosed a class of architectural flaws in agent infrastructure from Amazon Web Services, Google, an...