Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Supply Chain Zero Days: Detecting Compromised Packages Before a CVE Exists
The Gap Nobody's Patch Tuesday Covers There is a structural blind spot in how most organizations handle software supply chain risk: we treat...
Ransomware Affiliate Betrayal, WhatsApp RAT, and Malicious Dev Packages: A Defender's Playbook for the Latest ThreatsDay Roundup
When the Criminals Can't Trust Each Other Either This week's ThreatsDay roundup is a useful reminder that operational security failures are ...
PhantomSub Campaign: 101 Malicious npm Packages Weaponize Baileys to Hijack Developers' WhatsApp Accounts — Detection and Remediation Guide
Introduction OX Security researchers Nir Zadok, Moshe Siman Tov Bustan, and Vitalii Chepurko have disclosed a coordinated supply-chain campa...
Malicious Terraform Providers on HashiCorp Registry Deliver Go Malware — Detection and Supply Chain Remediation Guide
Introduction For years, supply chain attackers focused their efforts on npm, PyPI, and RubyGems. That perimeter has now expanded. Researcher...
AI Agent Swarm Floods RubyGems With Malicious Packages: Supply Chain Detection and Remediation Guide
Introduction Security researchers have confirmed that a swarm of autonomous AI agents built on OpenAI's models was used to upload hundreds o...
CrowdStrike Extends Falcon to Stop Software Supply Chain Attacks: Defender's Guide to Detecting Malicious Packages and Compromised Builds
The Announcement CrowdStrike has announced an extension of its Falcon endpoint security platform aimed squarely at one of the fastest-growin...
13 Malicious Packagist Composer Packages Deploy iOS Spyware — Detection and Removal Guide
Thirteen Trojanized Composer Themes Are Turning PHP Sites Into Spyware Distribution Points Supply-chain compromises through open-source pack...
800 Malicious npm Packages Delivering Cross-Platform RAT and Infostealer: Supply Chain Detection and Remediation Guide
A Supply Chain Shotgun Blast: 800 Malicious npm Packages in One Campaign OpenSourceMalware researcher Paul has disclosed a cluster of nearly...