supply chain attack
Qubole AWS Trust Abuse Shows Why Dormant Cloud Integrations Stay Dangerous
Qubole AWS Trust Abuse Shows Why Dormant Cloud Integrations Stay Dangerous An attacker used credentials associated with Qubole's AWS account to enter multiple c...
Lucas Oliveira
Research
NIKKE PC Launcher Compromise Turns a Trusted Update Path into a Malware Delivery Channel
NIKKE PC Launcher Compromise Turns a Trusted Update Path into a Malware Delivery Channel The Windows PC launcher for Goddess of Victory: NIKKE was tampered with...
Lucas Oliveira
Research
XCPE Backdoor Turns Android TV Boxes into a Supply-Chain Botnet
XCPE Backdoor Turns Android TV Boxes into a Supply-Chain Botnet Google and industry partners have disrupted a backdoor that enrolled more than 1.3 million Andro...
Lucas Oliveira
Research
AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows Attackers compromised the update infrastructure used by AOMEI Backupper and briefly red...
Lucas Oliveira
Research
ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step ConnectWise is beginning a phased restoration of Cloud Backup, formerly SkyKick, after un...
Lucas Oliveira
Research
MALFEX’s `imgdecode` Package Shows Why Native npm Addons Need Supply-Chain Scrutiny
MALFEX’s imgdecode Package Shows Why Native npm Addons Need Supply-Chain Scrutiny The latest MALFEX campaign has moved its most dangerous logic out of readable...
Lucas Oliveira
Research
ConnectWise SkyKick Credential Abuse Hits 173 Microsoft 365 Tenants
ConnectWise SkyKick: Compromised Credential Hits 173 M365 Tenants | 2026 Executive Summary Unknown threat actors used a compromised Microsoft 365 credential bel...
Lucas Oliveira
Research
Rust crate owners targeted in video-call supply chain campaign
Rust crate owners targeted in video-call supply chain campaign Rust's security response working group and the crates.io team have warned that prominent Rust con...
Lucas Oliveira
Research
Brevo Supply Chain Attack: 100K Sites Served ClickFix
Brevo Supply Chain Attack: 100K Sites Served ClickFix | 2026 Executive Summary Brevo faced a supply-chain incident on September 14, 2026, after attackers abused...
Lucas Oliveira
Research
Brevo breach turns trusted crypto newsletters into phishing channels
Brevo breach turns trusted crypto newsletters into phishing channels Executive Summary A compromise at Brevo, the email marketing provider used by several crypt...
Lucas Oliveira
Research
Mastra npm compromise turns AI agent builds into credential-theft risk
Mastra npm compromise turns AI agent builds into credential-theft risk The Mastra npm incident is a sharp warning for teams building AI agents: dependency compr...
Lucas Oliveira
Research
Red Hat npm compromise proves provenance alone is not enough
Red Hat npm compromise proves provenance alone is not enough Red Hat has confirmed that multiple packages published under the @redhat-cloud-services npm namespa...
Lucas Oliveira
Research