iiinova — where your digital self keeps evolving

Datadog Security Labs

@securitylabs.datadoghq.com

Read our Security Labs blog: securitylabs.datadoghq.com Subscribe to our monthly newsletter: securitylabs.datadoghq.com/newslett…

Posts Replies Media

Datadog Security Labs @securitylabs.datadoghq.com · 26/06/2026

Introducing GuardDog 3.0: A new rules engine, transparent sandboxing, and more securitylabs.datadoghq.com/articles/gua...

000

Datadog Security Labs @securitylabs.datadoghq.com · 25/03/2026

LiteLLM compromised on PyPI: Tracing the March 2026 TeamPCP supply chain campaign securitylabs.datadoghq.com/articles/lit...

022

Datadog Security Labs @securitylabs.datadoghq.com · 11/02/2026

Tech impersonators: ClickFix and MacOS infostealers securitylabs.datadoghq.com/articles/tec...

010

Datadog Security Labs @securitylabs.datadoghq.com · 17/12/2025

Introducing Pathfinding.cloud, a library of privilege escalation paths in AWS securitylabs.datadoghq.com/articles/int... by @sethsec.bsky.social

063

Datadog Security Labs @securitylabs.datadoghq.com · 10/12/2025

Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users securitylabs.datadoghq.com/articles/inv...

022

Datadog Security Labs @securitylabs.datadoghq.com · 04/12/2025

CVE-2025-55182 (React2Shell): Remote code execution in React Server Components and Next.js securitylabs.datadoghq.com/articles/cve...

164

Datadog Security Labs @securitylabs.datadoghq.com · 26/11/2025

A few days ago, a new piece of malware started spreading in npm, compromising and backdooring hundreds of legitimate npm packages and GitHub users. Read the analysis from our security research team: securitylabs.datadoghq.com/articles/sha...

065

Datadog Security Labs @securitylabs.datadoghq.com · 05/11/2025

In this post, Lorenzo Susini demonstrates that runtime security can be valuable to identify software supply chain attacks. As an example, this is the process tree of a malicious npm package harvesting credentials

010

Datadog Security Labs @securitylabs.datadoghq.com · 27/06/2025

fwd:cloudsec is around the corner! Don't miss these 3 talks from Datadog researchers Seth Sec, Katie Knowles, Greg Foss, and Anthony Randazzo. fwdcloudsec.org/conference/n... @sethsec.bsky.social @siigil.bsky.social @gregfoss.com

042

Datadog Security Labs @securitylabs.datadoghq.com · 04/03/2025

Interested in malicious software packages? Our open-source dataset just hit over 5,000 samples of malicious npm and PyPI packages! github.com/DataDog/mali...

021

Datadog Security Labs @securitylabs.datadoghq.com · 26/02/2025

The Datadog Security Digest is a monthly, practitioner-focused newsletter. Don't miss our February edition going live tomorrow! securitylabs.datadoghq.com/newsletters/...

054

Datadog Security Labs @securitylabs.datadoghq.com · 12/02/2025

We're also releasing a new open-source tool, whoAMI-scanner, to scan for malicious AMIs in your environment! github.com/DataDog/whoA...

020

Datadog Security Labs @securitylabs.datadoghq.com · 11/12/2024

"Tales from the cloud trenches: Unwanted visitor" securitylabs.datadoghq.com/articles/tal... This post describes an attacker that we've observed in the wild, including a malicious AWS account ID used to create a backdoor IAM role.

0206

Datadog Security Labs @securitylabs.datadoghq.com · 06/12/2024

010