3 min read
ThreatBook Research Team: 28 July 2026, 05:07 PM
On July 27, 2026, Apple released security updates for iOS 26.6 and iPadOS 26.6, fixing vulnerabilities across several components — Accessibility, Kernel, Libnotify, and WebKit. Among them is CVE-2026-64739, a stack-based buffer overflow in...
Read More
2 min read
ThreatBook Research Team: 22 July 2026, 12:07 PM
A remote code execution vulnerability in Fastjson affects every version up to and including 1.2.83. A remote attacker can run arbitrary code on a...
5 min read
ThreatBook Research Team: 21 July 2026, 07:07 AM
ThreatBook Labs recorded 15,205 security incidents across Asia-Pacific between June 2025 and June 2026. Read one at a time, they look like an...
5 min read
Feng Xue: 6 May 2026, 12:05 AM
The defender math broke a few years ago. Not because the threats got worse. They did, but that has been true every year since the first SOC was stood...
4 min read
Nicholas Tan: 6 May 2026, 12:05 AM
ThreatBook is now the Agentic Security Company. That sentence will probably get reduced in some headline somewhere to "ThreatBook rebrands." The...
5 min read
ThreatBook Research Team: 6 April 2026, 12:04 AM
Overview TA558 (also known as "SteganoAmor") is a financially motivated cybercriminal organization that has been active since 2018. Its attacks are...
4 min read
ThreatBook Research Team: 1 April 2026, 12:04 AM
Regarding yesterday's Axios npm supply chain poisoning incident, ThreatBook has conducted in-depth sample analysis and attack tracing. Drawing on...
3 min read
ThreatBook Research Team: 31 March 2026, 02:03 PM
Axios — one of the most foundational dependencies in the JavaScript ecosystem, with over 3.6 billion annual downloads — was compromised on npm on...
3 min read
ThreatBook Research Team: 25 March 2026, 03:03 PM
On March 24, 2026, ThreatBook Research Team detected a large-scale supply chain attack targeting LiteLLM — a core component widely used across the AI...
2 min read
Nicholas Tan: 24 March 2026, 08:03 AM
A security director at a mid-sized enterprise came to us recently with a question that sounds simple but turns out to be surprisingly hard to answer:...