#Threat Intelligence

Poisoned Trivy scanner led to malicious LiteLLM releases on PyPI | 2026 The LiteLLM incident is what modern software supply-chain compromise looks like when one...

Lucas Oliveira

Research

CVE-2026-20131: Interlock hit Cisco FMC before disclosure | 2026 CVE-2026-20131 is the kind of firewall-management flaw defenders dread: an unauthenticated bug...

Lucas Oliveira

Research

OpenClaw AI Agents Can Leak Data via Indirect Prompt Injection | 2026 Executive Summary OpenClaw is facing renewed scrutiny after reporting from The Hacker News...

Lucas Oliveira

Research

CVE-2025-26399: SolarWinds WHD Exploitation Hits Servers | 2026 Executive Summary CVE-2025-26399 in SolarWinds Web Help Desk has moved from “critical but patcha...

Lucas Oliveira

Research

Executive Summary Since February 2026, the North Korea–linked group UNC1069 has been observed running a highly targeted deepfake campaign against cryptocurrency...

Lucas Oliveira

Research

Executive Summary Since December 2025, two critical vulnerabilities in Fortinet's infrastructure have created a perfect storm for enterprise compromise: [CVE-20...

Lucas Oliveira

Research

Executive Summary Since January 2026, the sophisticated MaliciousCorgi supply chain attack has weaponized two malicious AI coding assistants on the official VSC...

Lucas Oliveira

Research

Executive Summary Since June 2025, [ShinyHunters](https://cloud.google.com/blog/topics/threat-intelligence/expansion-shinyhunters-saas-data-theft) cybercrime co...

Lucas Oliveira

Research

Executive Summary Since July 2025, the critical CVE-2025-8088 vulnerability in WinRAR has become a weaponized vector for initial access, exploited by state-spon...

Lucas Oliveira

Research