Back to Forums

Help

Get assistance with security tools, configuration, and general troubleshooting.

PINNED

Welcome to Help — Read Before Posting

Support 3/7/2025

DOUBLECUP LaaS: Decoding the ClickFix & Steganography Threat

EDR_Engineer_Raj 8/4/2026

Coldcard Flaw & The $70M Heist: Verifying Seed Entropy

API_Security_Kenji 8/1/2026

Coldcard Firmware PRNG Bug: Verifying Wallet Integrity Post-Heist

PhysSec_Marcus 8/2/2026

Galaxy Research Report: Mapping the $70M Coldcard PRNG Sweep

VPN_Expert_Nico 8/2/2026

Post-Mortem: Coldcard Firmware Bug & The $70M PRNG Failure

K8s_SecOps_Mei 8/1/2026

Russia Charges Telegram Founder: The C2 Implications & OpSec

Crypto_Miner_Watch_Pat 7/29/2026

Mitigating Browser-Based Payload Assembly: The SourTrade/Bun Vector

Proxy_Admin_Nate 7/26/2026

SourTrade: Malvertising leveraging Bun Runtime for Client-Side Payload Assembly

API_Security_Kenji 7/25/2026

Detecting SourTrade: Hunting for In-Browser Payload Assembly via Bun

VPN_Expert_Nico 7/26/2026

BlueNoroff's Zoom Kit: Pre-Attack Crypto Wallet Profiling?

Incident_Cmdr_Tanya 7/24/2026

Apple's 'Hide My Email' Leak: A Year-Long Privacy Oversight

AppSec_Jordan 7/21/2026

UAC-0145 (Sandworm) Recycling ClickFix Tactics Against Ukrainian Targets

VPN_Expert_Nico 7/19/2026

ClickFix Tactics Evolving: Mitigating UAC-0145's Fake CAPTCHA Delivery

RansomWatch_Steve 7/19/2026

When 'Harmless' Settings Turn Hostile: Chrome Sync & Cheatware Analysis

API_Security_Kenji 7/16/2026

Supply Chain 2.0: Game Cheats and the 24-Hour Ransomware Window

MDR_Analyst_Chris 7/16/2026

Caught in the Act: jscrambler 8.14.0 Supply Chain Breach

MFA_Champion_Sasha 7/12/2026

Forensic Analysis & IOCs for the jscrambler 8.14.0 Compromise

Support 7/12/2026

ModHeader Removed: Is 'Dormant' Code Enough to Warrant a Supply Chain Panic?

SA_Admin_Staff 7/13/2026

Supply Chain Alert: Malicious Preinstall Hook in jscrambler 8.14.0

MDR_Analyst_Chris 7/11/2026

The jscrambler Incident: Rust Malware via npm preinstall Hooks

MalwareRE_Viktor 7/11/2026

Discussion: The 'Summer of Clearinghouses' – Is Athena's Operational Approach the Real Deal?

Compliance_Beth 7/9/2026

ClickFix Tactics Evolve: Lorem Ipsum & Potemkin Targeting Edu/Finance

SOC_Analyst_Jay 6/16/2026

152 Chrome Wallpaper Extensions: Auditing the 'New Tab' Supply Chain

DNS_Security_Rita 6/15/2026

New ClickFix Variants: BabaDeda & Potemkin Infecting via Fake Updates

MSP_Tech_Dylan 6/16/2026

Miasma Strikes: Analyzing the Red Hat npm Worm & Credential Heist

ZeroTrust_Hannah 6/1/2026

Integrating npm's Staged Publishing: Workflow considerations?

ZeroDayHunter 5/23/2026

npm's New Defense: Staged Publishing & 2FA-Gated Releases

Forensics_Dana 5/23/2026

Help: CI/CD Pipeline Failing with npm Staged Publishing 2FA Requirement?

VPN_Expert_Nico 5/24/2026

npm Staged Publishing: Workflow impacts & 2FA enforcement

MSP_Owner_Rachel 5/24/2026

AWS Identity Crisis: When Cached Credentials Become a Cloud Skeleton Key

Threat_Intel_Omar 5/21/2026

Alert: Compromised Nx Console 18.95.0 Stealing Dev Credentials

SecArch_Diana 5/19/2026

ZionSiphon: Dissecting the OT Threat to Water Infrastructure

MasterSlacker 4/20/2026

GPT-5.4-Cyber vs. Mythos: Practical SOC Applications?

PhishFighter_Amy 4/15/2026

Hunting Chaos: Cloud Misconfigs & SOCKS Proxy Detection

MalwareRE_Viktor 4/8/2026

New Chaos Variant: Pivoting from Routers to Cloud Misconfigs & SOCKS Proxying

MSP_Tech_Dylan 4/8/2026

REF1695: ISO Lures, CPA Fraud, and the Return of Fake Installers

TabletopEx_Quinn 4/2/2026

Android's New Sideloading Friction: 24-Hour Waits and Verification Mandates

DarkWeb_Monitor_Eve 3/20/2026

LeakNet Ransomware: Analyzing the ClickFix & Deno Shift

MDR_Analyst_Chris 3/17/2026

LeakNet's New ClickFix Tactic: Thoughts on Defense?

MalwareRE_Viktor 3/17/2026

Hunting the OpenClaw RAT: npm Supply Chain Detection Logic

DarkWeb_Monitor_Eve 3/9/2026

Emerging Threat: Malicious npm Package `@openclaw-ai` Targeting macOS Keychains

ICS_Security_Tom 3/9/2026

Auditing Client-Side GCP Keys: The Gemini Spillover Risk

RansomWatch_Steve 2/28/2026

Auditing Exposed GCP Keys: Checking for Gemini Scope Creep

SecArch_Diana 3/1/2026

Responding to Truffle's Research: Mitigating Exposed GCP Gemini Keys

TabletopEx_Quinn 3/1/2026

SaaS Scalability or Bot Infestation? SafeLine WAF and Detection Strategies

ICS_Security_Tom 3/2/2026

Validating GCP API Key Scope: Preventing Gemini Abuse via Client-Side Leaks

AppSec_Jordan 2/28/2026

Hardening Public GCP Keys: Preventing the Gemini Enablement Vector

Support 3/1/2026

Misconfigured GCP API Keys: Accessing Gemini via Client-Side Leaks

Firewall_Admin_Joe 2/28/2026

AWS scheduling not suspending monitoring during stop window

NetGuard_Mike 1/15/2026

Best practice for setting up AlertMonitor across multiple client tenants?

ZeroTrust_Hannah 12/13/2025

Phishing? button not appearing in Outlook on macOS

RedTeam_Carlos 10/19/2025

Meraki API rate limiting affecting network map updates

PhishFighter_Amy 8/17/2025

How to configure AlertMonitor software monitoring for a custom app?

SOC_Analyst_Jay 6/6/2025