Discover a new malware family, SynkLoder. See how we reverse-engineered its phishing tactics to expose its attack chain.

A self-propagating npm worm hit keyv, cacheable, and hundreds of dependent packages to steal CI/CD, cloud, and API credentials. Here's what to do now.

CylindricalCanine is a new threat group within GoldenEyeDog, and they're actively using their malware for email phishing. Here's what you need to know.

Analysis of agentic ransomware JadePuffer: human operator, LLM agent limits, and why fundamentals still protect defenders.

How the threat group used a zero-day vulnerability to disable the target's EDR, preventing it from intervening in their ransomware attack.

YouTube video by Expel

A supply chain worm compromised 170+ npm and PyPI packages. Here's what happened, the IOCs to watch for, and how to respond.

InstallFix is a new watering hole attack we're seeing, and it leverages Claude Code as the lure. Here's what you need to know.

The Axios npm package suffered a supply chain attack from March 30-31. The malicious packages are no longer active, but here's what you need to know.

What security teams need to know about Iran cyber threats. Expert insights on Iranian capabilities, TTPs, and defensive measures to implement today.

For IT admins - Learn how to configure chat and meetings with people outside your organization who use Microsoft Entra ID, Microsoft Teams Essentials, or Skype.