Research reports
1,224 reports from 387 publishers45 added in the past week
3 reports, newest added first
Added Wed 2 Sep
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
RedC2 extends its control layer with an AI-driven component called Red post-exploitation tasks, from network reconnaissance to credential dumping, using natu
MalwareSupply chain
Added Thu 6 Aug
Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft
By By: Jacob Santos, John Rainier Navato May 13, 2026 Read time: 17 min (4541 words) Summary Our research analyzed the April 22 Checkmarx Keeping Infrastructure as Code Secure (KICS) and April 24 elementary-data incidents as two case studies within a broader…
Supply chain
Added Wed 6 May
Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities
Quasar Linux RAT (QLNX) is a comprehensive Linux implant that combines remote access capabilities with advanced evasion, persistence, keylogging, and credential harvesting features. The malware carries embedded C source code for both its PAM backdoor and…
MalwarePhishingSupply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.