Datadog Security Research investigates a June 2026 adversary-in-the-middle phishing campaign that cloned the AWS console login page to harvest victim credentials and multi-factor authentication codes.

Alt: melting claude credits

Datadog scaled malicious code detection from pull requests to dependency packages using stacked LLM evaluations and agentic investigation.

Learn how Datadog detected and resolved issues from hackerbot-claw, an AI-powered automated attack campaign.

Episode #534 consacré à « Shai-Hulud » Avec Christophe Tafani-Dereeper Références : Shai-Hulud:  https://securitylabs.datadoghq.com/articles/shai-hulud-2.0-npm-worm/ https://github.com/DataDog/indicat...

This blog post explores the rationale and implementation behind GitHub's security recommendations for npm maintainers following numerous high-profile supply-chain incidents. It details how hardening p...

Building an npm virus via self-replicating lifecycle scripts.

The EU is pushing legislation that would scan all our private messages, even in encrypted apps.

fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

A whistleblower tells Congress and NPR that DOGE may have taken sensitive labor data and hid its tracks. "None of that ... information should ever leave the agency," said a former NLRB official.

This month’s digest has a little bit of everything—cloud threats, supply chain attacks, and a reminder that yes, attackers are still exploiting SSRFs.

This February edition of the Datadog Security Digest dives into the

The fwd:cloudsec scholarship is our way of granting students & people wanting to make a career change with a passion for cloud security an opportunity to attend fwd:cloudsec, network with our attendee...

We're building a platform that engineers love to use. Join us, and help usher in the future.

Starting in mid-January 2025, Volexity identified several social-engineering and spear-phishing campaigns by Russian threat actors aimed at compromising Microsoft 365 (M365) accounts. These attack cam...

/// Why a relatively unknown Chinese-developed AI model has turned the AI industry on its head.

In our first 2025 edition, read about a threat actor Datadog uncovered, tips for better remote work, and how to stay away from IMDSv1 in AWS.

On November 20, 2024, Shubham Shah and I discovered a security vulnerability in Subaru’s STARLINK admin panel that gave us unrestricted access to all vehicles and customer accounts in the United State...