Security Articles

ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More

A comprehensive security threat bulletin covering multiple critical vulnerabilities and cyberattacks.

New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"

The LayerX Security report reveals enterprise AI risk concentrates in power users and consumer platforms, with personal account usage creating visibility gaps.

JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

JINX-0164 is a newly documented threat actor targeting cryptocurrency companies using fake recruiter social engineering and custom macOS malware to facilitate digital asset theft.

Vercel

02 min read

Team-wide provider allowlist on AI Gateway

AI Gateway now supports team-wide provider allowlist to restrict which AI providers can serve requests.

Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users

The article discusses two banking malware campaigns targeting Latin America and Europe: Grandoreiro for Windows and BTMOB for Android devices.

Malicious npm Package Stole Files From Claude AI User Directory via GitHub

A malicious npm package "mouse5212-super-formatter" steals files from Claude AI's /mnt/user-data directory and uploads them to attacker GitHub accounts.

Docker

Mitigating CVE-2026-31431 (“Copy Fail”) in Docker Engine

This post addresses CVE-2026-31431 ("Copy Fail"), a security vulnerability in Docker Engine, offering guidance on mitigation strategies.

Introducing Google AI Threat Defense to help you outpace the adversary

Google introduces AI Threat Defense, combining Gemini, Wiz, and Mandiant to automate defense against AI-powered cyber threats.

AI & Machine Learning

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

GlassWorm targets developers through malicious VS Code extensions and packages to harvest credentials and establish persistent access.

3 SOC Steps that Shut Down Incident Risks Early

This article explains how SOCs can reduce incident risk by keeping threat visibility current, enriching alerts with context, and converting investigations into immediate operational action.

5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

This article presents a five-step framework for managing shadow AI tools in organizations while maintaining security and employee productivity.