10 article(s) in our index mention this organisation.
A malicious NPM package, indexed-btree, has been quietly accumulating millions of downloads through a sophisticated supply chain attack. The attacker leveraged a legitimate-looking GitHub repository and cleverly hid malw…
A malicious npm package, "indexed-btree," has been identified as hiding its malware within application code rather than relying on lifecycle scripts, a tactic adopted in response to npm's security changes. The package, i…
Australian authorities have arrested two men linked to the TeamPCP cybercrime group, a notorious organization responsible for stealing over 500,000 corporate credentials and causing significant financial damage. The grou…
A supply-chain attack linked to Aqua Security's Trivy scanner has resulted in the release of two malicious LiteLLM packages containing credential-stealing code. CloudSEK identified over 2,500 organizations potentially ex…
The article explores the persistent disconnect between CISOs and boards regarding cybersecurity, despite increasing cyber threats. While boards are increasingly recognizing the importance of security, a lack of understan…
A sophisticated software supply chain attack, dubbed ViteVenom, is leveraging a blockchain-based command-and-control (C2) infrastructure to deliver a remote access trojan (RAT) targeting Vite frontend developers. The att…
North Korean-linked threat actors are deploying malicious npm packages that mimic Rollup polyfill tooling to steal developer secrets. These packages, including 'rollup-packages-polyfill-core' and 'rollup-runtime-polyfill…
This Dark Reading article examines the significant pressure faced by CISOs to suppress or delay disclosing security findings, particularly regarding vulnerabilities and breaches. The primary drivers of this pressure stem…
This Securelist article examines the evolving threat landscape targeting container environments, highlighting key attack vectors used by groups like TeamPCP. The analysis focuses on vulnerabilities, supply chain attacks…
The TeamPCP supply chain campaign intensified significantly on May 17th, 2026, marked by the confirmed compromise of a Checkmarx Jenkins plugin and the emergence of a new Mini Shai-Hulud worm. This campaign targeted npm…
