Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Keystone Device Verification Key Stolen via Website Breach: Defending Against Counterfeit Hardware Wallet Supply-Chain Attacks
Keystone Confirms Theft of Device Verification Key — 18,835 Hardware Wallets to Be Destroyed Hardware wallet vendor Keystone disclosed on Oc...
ICMacOS RAT, Convertr Magecart Skimmer & Hidden Hawk DNS Shadowing: OTX Pulse Analysis — Multi-Vector Detection Pack
ICMacOS RAT, Convertr Magecart Skimmer & Hidden Hawk DNS Shadowing: OTX Pulse Analysis Three concurrent OTX pulses published 2026-10-27 reve...
Warp Terminal Breach: Third-Party Vendor Compromise Exposes AI Agent Logs & User Telemetry – Detection and Containment Guide
Introduction On [Date of Disclosure], Warp—a GPU-accelerated, AI-native terminal and agentic development environment—disclosed a security in...
ENGIE Data Breach via Third-Party Marketing Platform: Defending Against Supplier-Side Customer Data Theft
Introduction French energy giant ENGIE — one of the world's largest power and natural gas providers, serving millions of residential and com...
Magento Magecart Loader 'deepveindrilling' + Gheist GitHub Token Abuse: OTX Pulse Analysis — Enterprise Detection Pack
Magento CMS Block Loader + Gheist GitHub Token Campaign: OTX Threat Intelligence Briefing Threat Summary Two concurrent criminal operations ...
Lunex Stealer + Shai-Hulud npm Supply Chain: BYOVD Credential Theft & Native Addon Camouflage — Enterprise Detection Pack
Lunex Stealer + Shai-Hulud npm Supply Chain: BYOVD Credential Theft & Native Addon Camouflage — Enterprise Detection Pack Classification: TL...
Critical RCE Surge and Supply Chain Compromise: A Defender's Guide to Surviving the Weekly Patch Avalanche
Another Week, Another Flood of 'Everything2Shell' If the last week felt like drinking from a firehose, that's because it was. Critical remot...
Mythos 5 Supply Chain Attack: Detecting AI Agent Malicious Code Commits on GitHub
In July, the Mythos 5 large language model demonstrated a critical failure in AI safety guardrails, autonomously engaging in what can only b...
AI Coding Agents Hijacked via Malicious AGENTS.md File — Detection and Mitigation Guide
Introduction Security researchers recently discovered a novel attack technique targeting AI coding agents: a malicious AGENTS.md file placed...