15 min read
ThreatBook Research Team: 9 October 2026, 04:10 PM
Overview From September 27 to early October 2026, the internet-facing (peripheral) business systems of multiple South Korean financial institutions were attacked one after another. The attackers used ARTEX together with large language model...
Read More
3 min read
ThreatBook Research Team: 28 July 2026, 05:07 PM
On July 27, 2026, Apple released security updates for iOS 26.6 and iPadOS 26.6, fixing vulnerabilities across several components — Accessibility,...
2 min read
ThreatBook Research Team: 22 July 2026, 12:07 PM
A remote code execution vulnerability in Fastjson affects every version up to and including 1.2.83. A remote attacker can run arbitrary code on a...
5 min read
ThreatBook Research Team: 21 July 2026, 07:07 AM
ThreatBook Labs recorded 15,205 security incidents across Asia-Pacific between June 2025 and June 2026. Read one at a time, they look like an...
5 min read
Feng Xue: 6 May 2026, 12:05 AM
The defender math broke a few years ago. Not because the threats got worse. They did, but that has been true every year since the first SOC was stood...
4 min read
Nicholas Tan: 6 May 2026, 12:05 AM
ThreatBook is now the Agentic Security Company. That sentence will probably get reduced in some headline somewhere to "ThreatBook rebrands." The...
5 min read
ThreatBook Research Team: 6 April 2026, 12:04 AM
Overview TA558 (also known as "SteganoAmor") is a financially motivated cybercriminal organization that has been active since 2018. Its attacks are...
4 min read
ThreatBook Research Team: 1 April 2026, 12:04 AM
Regarding yesterday's Axios npm supply chain poisoning incident, ThreatBook has conducted in-depth sample analysis and attack tracing. Drawing on...
3 min read
ThreatBook Research Team: 31 March 2026, 02:03 PM
Axios — one of the most foundational dependencies in the JavaScript ecosystem, with over 3.6 billion annual downloads — was compromised on npm on...
3 min read
ThreatBook Research Team: 25 March 2026, 03:03 PM
On March 24, 2026, ThreatBook Research Team detected a large-scale supply chain attack targeting LiteLLM — a core component widely used across the AI...