Browsing: Supply Chain Attack

Summary Points Malicious npm packages targeting the Vite ecosystem use scoped names to impersonate legitimate…

Summary Points Threat groups are increasingly using legitimate cloud services, OAuth tokens, and supply chain…

Fast Facts Cybercriminals exploited unpatched systems and compromised credentials to launch large-scale data breaches, ransomware…

Summary Points The widespread adoption of AI in cybersecurity increases the risk of sophisticated AI-driven…

Essential Insights The NewsJunkie operation generated nearly two billion invalid CTV bid requests daily by…

Fast Facts Iranian-linked group Cavern (Cav3rn) employs a sophisticated, modular C2 framework built on .NET,…

Summary Points Cavern Manticore employs a modular, multi-compile format (.NET, Mixed-Mode C++, NativeAOT) to evade…

Quick Takeaways Threat actors increasingly exploited public-facing applications and AI vulnerabilities, notably using T1190 exploits…

Fast Facts AI-driven ransomware can autonomously exploit unpatched vulnerabilities, conduct lateral movement, and encrypt data…

Quick Takeaways Attackers hide malware in Python dependencies within fake exploit code repositories, covertly stealing…