4 min read
Nicholas Tan: 15 October 2026, 09:10 PM
Recent news of multiple South Korean banks having their networks breached has once again deepened the industry's alarm over AI attacks. Even when attackers are not technically skilled, they can use AI agents to cause a major security impact.
Read More
15 min read
ThreatBook Research Team: 9 October 2026, 04:10 PM
Overview From September 27 to early October 2026, the internet-facing (peripheral) business systems of multiple South Korean financial institutions...
3 min read
ThreatBook Research Team: 28 July 2026, 05:07 PM
On July 27, 2026, Apple released security updates for iOS 26.6 and iPadOS 26.6, fixing vulnerabilities across several components — Accessibility,...
2 min read
ThreatBook Research Team: 22 July 2026, 12:07 PM
A remote code execution vulnerability in Fastjson affects every version up to and including 1.2.83. A remote attacker can run arbitrary code on a...
5 min read
ThreatBook Research Team: 21 July 2026, 07:07 AM
ThreatBook Labs recorded 15,205 security incidents across Asia-Pacific between June 2025 and June 2026. Read one at a time, they look like an...
5 min read
Feng Xue: 6 May 2026, 12:05 AM
The defender math broke a few years ago. Not because the threats got worse. They did, but that has been true every year since the first SOC was stood...
4 min read
Nicholas Tan: 6 May 2026, 12:05 AM
ThreatBook is now the Agentic Security Company. That sentence will probably get reduced in some headline somewhere to "ThreatBook rebrands." The...
5 min read
ThreatBook Research Team: 6 April 2026, 12:04 AM
Overview TA558 (also known as "SteganoAmor") is a financially motivated cybercriminal organization that has been active since 2018. Its attacks are...
4 min read
ThreatBook Research Team: 1 April 2026, 12:04 AM
Regarding yesterday's Axios npm supply chain poisoning incident, ThreatBook has conducted in-depth sample analysis and attack tracing. Drawing on...
3 min read
ThreatBook Research Team: 31 March 2026, 02:03 PM
Axios — one of the most foundational dependencies in the JavaScript ecosystem, with over 3.6 billion annual downloads — was compromised on npm on...