 | Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access | 2026-10-06 | 70 | | True | | |
| Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals | 2026-10-05 | 45 | | True | | |
| Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4) | 2026-09-24 | 70 | | True | | |
| Attacker infrastructure, but vibe-coded: tracking the evolution of credential harvesting platforms | 2026-09-18 | 78 | | True | | |
| Mapping out your unknown: A threat hunter’s guide to GitHub | 2026-09-16 | 70 | | True | | |
| Password spraying campaign targets AWS root user accounts across 150+ organizations | 2026-08-31 | 45 | | True | | |
| N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it | 2026-08-20 | 78 | | True | | |
| Putting models to the secure coding test: Plan vs default mode | 2026-08-19 | 60 | | True | | |
| Worm compromises hundreds of popular npm packages | 2026-08-04 | 90 | | True | | |
| Before the first prompt: Code execution paths in trusted coding-agent projects | 2026-08-03 | 70 | | True | | |
| Detection primitives for eBPF rootkits | 2026-07-27 | 75 | | True | | |
| Compromised AsyncAPI npm packages: inside a CI supply-chain attack | 2026-07-14 | 88 | | True | | |
| Not-so-anonymous telemetry: The @injectivelabs/sdk-ts backdoor | 2026-07-09 | 85 | | True | | |
| Coordinated GitHub API enumeration and access token abuse | 2026-07-08 | 65 | | True | | |
| Backdoors & Breaches: New scenarios and adaptations | 2026-07-01 | 40 | | True | | |
| Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond | 2026-06-24 | 70 | | True | | |
| Detecting the Klue supply chain attack in Salesforce instances | 2026-06-22 | 75 | | True | | |
| Entra Agent ID: Inside a cross-tenant agent compromise | 2026-06-18 | 78 | | True | | |
| Mapping out your unknown: A threat hunter’s guide to Salesforce | 2026-06-16 | 65 | | True | | |
| Holding blobs for ransom: Four methods for Azure Storage ransomware | 2026-06-15 | 80 | | True | | |
| Entra Agent ID: The blueprint blast radius | 2026-06-11 | 60 | | True | | |
| The case for GitHub Actions security after recent supply chain attacks | 2026-06-02 | 78 | | True | | |
| From Exploit Code to Production Detection: Building a CVE-2026-31431 (Copy Fail) detection with Agents | 2026-05-28 | 80 | | True | | |
| Unpatchable Vulnerabilities of Kubernetes: CVE-2021-25740 | 2026-05-21 | 50 | | True | | |
| Backdoored Cemu release linked to TanStack and Mistral supply chain campaign | 2026-05-14 | 85 | | True | | |
| Backdoored node-ipc npm releases steal developer credentials through DNS queries | 2026-05-14 | 80 | | True | | |
| Shai-Hulud Goes Open Source | 2026-05-13 | 90 | | True | | |
| Malicious Coding Agent Skills and the Risk of Dynamic Context | 2026-05-11 | 75 | | True | | |
| The case for dependency cooldowns in a post-axios world | 2026-04-16 | 80 | | True | | |
| Unpatchable Vulnerabilities of Kubernetes: CVE-2020-8562 | 2026-04-09 | 50 | | True | | |
| Compromised axios npm package delivers cross-platform RAT | 2026-03-31 | 75 | | True | | |
| Unpatchable Vulnerabilities of Kubernetes: CVE-2020-8561 | 2026-03-27 | 55 | | True | | |
| LiteLLM compromised on PyPI: Tracing the March 2026 TeamPCP supply chain campaign | 2026-03-24 | 90 | | True | | |
| Uncovering agent logging gaps in Copilot Studio | 2026-03-10 | 50 | | True | | |
| Behind the console: Active phishing campaign targeting AWS console credentials | 2026-03-09 | 75 | | True | | |
| Hook, line, and vault: A technical deep dive into the 1Phish kit | 2026-02-27 | 78 | | True | | |
| Kubernetes project issues warning on Ingress NGINX retirement | 2026-02-19 | 80 | | True | | |
| Tech impersonators: ClickFix and MacOS infostealers | 2026-02-10 | 75 | | True | | |
| Web Traffic Hijacking: When Your Nginx Configuration Turns Malicious | 2026-02-04 | 75 | | True | | |
| OpenSSL January 2026 Security Update: CMS and PKCS#12 Buffer Overflows | 2026-01-27 | 65 | | True | | |
| Introducing IDE-SHEPHERD: Your shield against threat actors lurking in your IDE | 2026-01-26 | 70 | | True | | |
| Unpatchable Vulnerabilities of Kubernetes: CVE-2020-8554 | 2026-01-14 | 40 | | True | | |
| Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users | 2025-12-10 | 75 | | True | | |
| CVE-2025-55182 (React2Shell): Remote code execution in React Server Components and Next.js | 2025-12-04 | 85 | | True | | |
| The Shai-Hulud 2.0 npm worm: analysis, and what you need to know | 2025-11-25 | 88 | | True | | |
| MUT-4831: Trojanized npm packages deliver Vidar infostealer malware | 2025-11-06 | 75 | | True | | |
| A runtime security approach to detecting supply chain attacks | 2025-11-05 | 88 | | True | | |
| Datadog threat roundup: Top insights for Q3 2025 | 2025-10-31 | 85 | | True | | |
| Learnings from recent npm supply chain compromises | 2025-10-30 | 90 | | True | | |
| CoPhish: Using Microsoft Copilot Studio as a wrapper for OAuth phishing | 2025-10-20 | 70 | | True | | |
