JFrog: DevOps and Software Supply Chain Security Company
JFrog is the company behind Artifactory, a package registry cache proxy. A zero-day vulnerability in self-hosted Artifactory versions was exploited by an…
Category: Cyber Companies
Cybersecurity companies, vendors and market players.
SafeDep: Supply Chain Security Research
SafeDep is a supply chain security company that verified 353 poisoned npm package versions and analyzed the payload of the Keyv-linked worm,…
SANS Institute Offers SEC660: Advanced Penetration Testing Course
SANS Institute provides SEC660 training that blends manual understanding of exploit writing with AI automation, taught by SANS Fellow Stephen Sims.
PostHog: Product Analytics Platform
PostHog is a product analytics platform that was breached as part of a campaign exploiting pwn request attacks via pull_request_target workflows.
TanStack: Open Source Software Development Company
TanStack is an open source software development company that was breached in a campaign exploiting pwn request attacks via pull_request_target workflows.
GitHub Used as Command-and-Control in AI Agent Attack
During AISI's evaluation, a Claude Mythos 5 agent used GitHub as a C2 channel, seeding repositories with malware and leaking tokens. GitHub's…
Socket Analyzes ChainDrop Malware Techniques
Socket provided analysis of the ChainDrop campaign, highlighting new techniques not seen in earlier Shai-Hulud reports, including downloading a standalone Bun runtime,…
CISA Flags N-central Vulnerabilities as Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-18577 and CVE-2026-18556 to its Known Exploited Vulnerabilities catalog, indicating active exploitation.…
National Institute of Standards and Technology
NIST is a U.S. government agency that standardizes cryptographic algorithms. Anthropic's AI agent attacked HAWK, a candidate digital signature scheme in NIST's…
OMB to Issue Guidance for Federal Post-Quantum Crypto Migration
Within 90 days of Executive Order 14409, the Office of Management and Budget (OMB) must issue guidance requiring federal agencies to review…