Anatomy of a Supply Chain Attack: npm Package Poisoning

[TUTORIAL]

Building a Home SOC: From Zero to Threat Detection in 48 Hours

A step-by-step guide to deploying Wazuh, Suricata, and Grafana on commodity hardware for enterprise-grade visibility.

M. Chen·14 min read

[RESEARCH]

Anatomy of a Supply Chain Attack: npm Package Poisoning

How attackers inject malicious code into open-source packages and evade automated scanning tools.

K. Osei·9 min read

[ADVISORY]CRITICAL

Cisco IOS XE Critical Flaw — CVE-2026-21044 Active Exploitation

Unauthenticated attackers can gain full device control. Affects 40,000+ internet-facing routers. Patch immediately.

JATeck Staff·4 min read

[THREAT INTEL]HIGH

Lazarus Group Deploys New Ransomware Variant Targeting Healthcare

DPRK-linked threat actor pivots to healthcare sector with custom loader and encrypted C2 channels.

T. Nakamura·7 min read

[TOOLS]

Nuclei Template Pack: 200+ New Detection Templates for 2026 CVEs

Community-contributed Nuclei templates covering the most critical vulnerabilities disclosed this year.

r00tkit_dev·3 min read

[NEWS]

NIST Finalizes Post-Quantum Cryptography Standards: What You Need to Know

NIST has officially finalized the first post-quantum cryptographic standards. Here's what security teams need to do now.

Dr. A. Patel·11 min read

[RESEARCH]HIGH

New Evasion Technique Bypasses Major EDR Solutions

Researchers have identified a novel process injection technique that evades detection across CrowdStrike, SentinelOne, and Microsoft Defender for Endpoint.

S. Volkov·8 min read

[THREAT INTEL]HIGH

APT-41 Campaign Targets Financial Sector Infrastructure

Chinese state-sponsored group APT-41 has launched a new campaign targeting SWIFT infrastructure and trading platforms.

J. Alvarez·10 min read