Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
npm Supply Chain Attack: North Korean Campaign Targeting Axios Users — Detection and Mitigation
npm Supply Chain Attack: North Korean Campaign Targeting Axios Users — Detection and Mitigation Introduction AWS has publicly attributed a w...
North Korean NPM Supply Chain Attacks: Amazon Attribution and Defensive Strategies
North Korean NPM Supply Chain Attacks: Amazon Attribution and Defensive Strategies Introduction Amazon's security teams have recently attrib...
North Korea-Linked npm Supply Chain Attack: Rollup Polyfill Mimicry Detection
North Korea-Linked npm Supply Chain Attack: Rollup Polyfill Mimicry Detection Introduction A sophisticated supply chain attack has been iden...
PolinRider Campaign: Defending Against North Korean Supply Chain Attacks in npm, Go, and Chrome
Introduction The threat landscape for software development environments has deteriorated significantly with the emergence of the PolinRider ...
Medusa Ransomware: Lazarus Group Targets US Healthcare — Defense and Hunting Guide
Medusa Ransomware: Lazarus Group Targets US Healthcare — Defense and Hunting Guide Introduction The threat landscape facing the US healthcar...
Defending Against VS Code Auto-Run Attacks: Mitigating StoatWaffle Malware
Defending Against VS Code Auto-Run Attacks: Mitigating StoatWaffle Malware Introduction Software development environments have become a prim...
Lazarus Group Deploys Medusa Ransomware to Strike US Healthcare Sector
State-Sponsored Chaos: Lazarus Group Unleashes Medusa on Healthcare The healthcare sector has long been the soft underbelly of the nation's ...
Inside the "Contagious Interview" Campaign: Analyzing North Korea's Latest npm Supply Chain Attack
The New Face of Recruitment: Malware Disguised as a Coding Test For software developers, the job market can be grueling. It involves endless...
North Korean APT37 Weaponizes USBs to Infiltrate Air-Gapped Networks
North Korean APT37 Weaponizes USBs to Infiltrate Air-Gapped Networks For years, security professionals have considered "air-gapping"—physica...