Threat Intelligence Center

Cybersecurity image illustrating threat vectors and data protection in developer tools during TeamPCP's supply chain campaign.

The TeamPCP supply chain campaign has resumed operations following a 26-day hiatus, launching coordinated attacks against critical developer infrastructure. Three concurrent compromises have been confirmed affecting Checkmarx KICS, Bitwarden CLI, and xinference on PyPI, while researchers have identified CanisterSprawl, a new npm-based worm spreading through package repositories.

Cybersecurity illustration of APT37 targeting crypto wallet users through npm package, highlighting threat vectors and data protection.

Security researchers have identified a sophisticated supply chain attack in which APT37, also known as Famous Chollima and Reaper, distributes a malicious npm package named @validate-sdk/v2. The package leverages AI-assisted commit techniques and the PromptMink tool to target cryptocurrency wallet users and blockchain developers.

AI-powered honeypots detecting malicious AI agents, enhancing cybersecurity and data protection against evolving threat vectors.

As threat actors increasingly deploy autonomous AI agents to conduct reconnaissance and exploitation, traditional security controls face a fundamental challenge: detection lag.

Cybersecurity illustration showcasing threat vectors and data protection related to CISA's KEV catalog updates.

The Cybersecurity and Infrastructure Security Agency has added multiple ConnectWise and Windows vulnerabilities to its Known Exploited Vulnerabilities catalog following confirmed active exploitation by APT28 and Storm-1175 threat actors.

Conceptual image illustrating cybersecurity evolution as Microsoft deprecates legacy TLS for enhanced data protection.

Microsoft has announced a firm deprecation timeline for legacy Transport Layer Security protocols in Exchange Online, effective July 2024. Organizations still using TLS 1.0 and 1.1 for email connectivity will experience service disruptions unless they upgrade to TLS 1.2 or higher.

Cybersecurity image illustrating threat vectors and data protection in TeamPCP's supply chain campaign.

The TeamPCP supply chain campaign has resumed operations following a 26-day hiatus, deploying three concurrent compromises targeting critical developer infrastructure. Attackers have infiltrated Checkmarx KICS, Bitwarden CLI, and xinference packages on PyPI, while simultaneously distributing CanisterSprawl, a newly identified npm worm.

Conceptual image illustrating cybersecurity threats from fake CAPTCHA IRSF scams targeting crypto users and data protection.

Security researchers have identified a coordinated fraud campaign leveraging 120 instances of Keitaro Traffic Distribution System (TDS) to deliver fake CAPTCHA phishing attacks. Attributed to threat actors TA2726 and FaiKast, the operation targets cryptocurrency users and telecommunications subscribers through SMS-based social engineering.

TeamPCP Supply Chain Campaign Resumes with Three Concurrent Compromises Across Developer Tools

APT37 Deploys @validate-sdk/v2 npm Package to Target Crypto Wallet Users

AI-Powered Honeypots Detect Malicious AI Agents Before They Breach Networks

CISA Adds ConnectWise and Windows Flaws to KEV Catalog Exploited by APT28

Microsoft Deprecates Legacy TLS in Exchange Online Starting July

TeamPCP Supply Chain Campaign Resumes with Three Concurrent Compromises

Fake CAPTCHA IRSF Scam Hits Crypto Users via 120 Keitaro TDS Campaigns

More Articles …

About Us

Services Near Me

Get the latest news!