Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Defending AI Infrastructure: Mapping Hugging Face Breach Tactics to Detection Rules
Introduction The compromise of Hugging Face signals a critical evolution in threat actor targeting: the weaponization of AI infrastructure. ...
RMM Exploitation & Supply Chain Worms: TaskWeaver, Djinn Stealer, and npm Attacks
Threat Intelligence Briefing Threat Summary Current OTX pulse data indicates a surge in credential theft campaigns utilizing diverse entry v...
Hotel Wi-Fi DNS Hijacking: Defending Against Microsoft 365 Credential Harvesting
Introduction Business travelers are facing a renewed and sophisticated threat at the network edge. Recent intelligence confirms that attacke...
Hotel Wi-Fi DNS Poisoning: Defending Against Corporate Credential Harvesting
Hotel Wi-Fi DNS Poisoning: Defending Against Corporate Credential Harvesting Introduction Researchers at ReliaQuest have issued a critical w...
Mistic Backdoor, Autonomous AI Agents, and GitHub Actions Abuse: OTX Pulse Analysis — Enterprise Detection Pack
Mistic Backdoor, Autonomous AI Agents, and GitHub Actions Abuse: OTX Pulse Analysis Threat Summary The latest OTX pulses reveal a convergenc...
CyberStrike Harvester & TAG-195 MaaS: Credential Harvesting & AI Supply Chain Attacks — OTX Pulse Analysis
Threat Summary A complex wave of credential theft and espionage activity has been identified across five distinct OTX pulses. The primary th...
Operation FortiBleed: Fortinet SSL VPN Credential Harvesting & GPU Cracking Infrastructure
Threat Summary The "FortiBleed" campaign represents a sophisticated, large-scale credential compromise operation specifically targeting inte...
NuGet Supply Chain Attack & LLM Jailbreaking: O-UNC-038 Phishing — Enterprise Detection Pack
Threat Summary Recent OTX pulses reveal a diverse set of high-risk threats targeting the software supply chain, AI infrastructure, and workf...
Active Phishing Campaign Targeting LastPass & Bitwarden: Detection and Hardening
Active Phishing Campaign Targeting LastPass & Bitwarden: Detection and Hardening Introduction Security operations centers (SOCs) and securit...