Prophet AI Detection Engineer: Automated Detection Tuning
Prophet AI Detection Engineer turns insights from investigations and hunts into backtested, reviewable detections, improving detection coverage and reducing false positives.
Cybersecurity products, tools, platforms and software categories.
Prophet AI Detection Engineer turns insights from investigations and hunts into backtested, reviewable detections, improving detection coverage and reducing false positives.
Checkmarx KICS, an open-source security scanner, was compromised in the TeamPCP campaign. Credentials from Trivy were used to attack its GitHub Actions.
Docker Hub was one of the distribution ecosystems used by TeamPCP to distribute compromised container images.
OpenVSX, a marketplace for VS Code extensions, was one of the distribution ecosystems used by TeamPCP.
Azure DevOps was one of the platforms affected by the TeamPCP campaign, with 233 organizations impacted.
Bitbucket Pipelines was one of the platforms affected by the TeamPCP campaign, with 94 organizations impacted.
OPSWAT AppRemover is a product that includes the vulnerable driver ardrv.sys (CVE-2026-36425). The driver is abused in a BYOVD attack to disable…
Huorong Internet Security is a Chinese endpoint security program that is specifically targeted by the Spark RAT campaign. The malware attempts to…
Tencent PC Manager is a security product that is targeted by the Spark RAT campaign. The malware uses the vulnerable OPSWAT driver…
TrueSight is a driver that is referenced in the BYOVD routine of the Spark RAT campaign. It has also been used by…