Introducing StepSecurity Threat Intelligence: Real-Time Supply Chain Attack Alerts for Your SIEM

StepSecurity has launched Threat Intelligence, a real-time supply chain attack alerting system designed for seamless SIEM and SOC integration, delivering actionable intelligence within minutes of compromise and cutting MTTD and MTTR from days to minutes. It integrates with existing StepSecurity AWS S3 and webhook setups, enabling automatic ingestion into SIEMs for correlation with other security events and immediate on-call SOC investigations.

The service is powered by the same detection systems that uncovered the tj-actions and nx compromises, with a proven track record reported as first-to-detect for npm-related attacks and validated by CISA and major media outlets. In addition to real-time alerts, the Threat Center provides comprehensive details about active and historical threats, remediation guidance, and direct links to threat analyses.

The move comes as supply chain attacks are projected to cost organizations $60 billion globally in 2025, a 30% rise from 2023. The blog notes StepSecurity’s monitoring of npm and GitHub Actions 24/7, highlighting previous disclosures such as the ctrl/tinycolor and 40+ NPM packages compromised in the Shai-Hulud campaign and Harden-Runner’s protection of 8,000+ repositories.