A technical walkthrough of the actively exploited Outlook NTLM credential-theft zero-day, covering the exploit path, suspicious Outlook child processes, outbound SMB authentication detection, and mitigation priorities beyond patching.
A new report details how attackers used Codex, DeepSeek, and hundreds of AI agents to automate PaperCut reconnaissance, credential theft, and Linux sudo hijacking, while CERT-In warns that AI-driven attacks can unfold in hours.
Provenance attestations prove where an npm package was built, not who was at the keyboard when it was published, which is why a hijacked maintainer account can still push credential-stealing releases through a fully verified pipeline.
A deep technical walkthrough of Microsoft’s findings on a Claude Code vulnerability that could expose GitHub credentials, with a defensive checklist for developers and security teams.
A deep technical walkthrough for hardening Windows against Search URI abuse that can trigger NTLMv2 credential theft and exposure of authentication hashes.
A deep technical walkthrough of the Red Hat Cloud Services npm supply-chain compromise, tracing how a malicious package enabled credential-stealing behavior and what developers should inspect, contain, and harden in their own dependency pipelines.
A practical deep-technical walkthrough for auditing the compromised Red Hat Cloud Services npm packages, tracing credential-stealing behavior, and hardening dependency, CI/CD, and secret-management defenses against supply-chain malware.
A deep technical walkthrough of the malicious Laravel-Lang package update that silently exfiltrated secrets, tracing the supply-chain compromise, payload behavior, affected developer workflows, and concrete detection and hardening steps.
A GitHub Actions supply-chain attack redirected mutable version tags to attacker-controlled commits, enabling credential theft from CI/CD workflows that relied on unpinned actions.