3 min read
ThreatBook Research Team: 28 July 2026, 05:07 PM
On July 27, 2026, Apple released security updates for iOS 26.6 and iPadOS 26.6, fixing vulnerabilities across several components — Accessibility,...
2 min read
ThreatBook Research Team: 22 July 2026, 12:07 PM
A remote code execution vulnerability in Fastjson affects every version up to and including 1.2.83. A remote attacker can run arbitrary code on a...
5 min read
ThreatBook Research Team: 21 July 2026, 07:07 AM
ThreatBook Labs recorded 15,205 security incidents across Asia-Pacific between June 2025 and June 2026. Read one at a time, they look like an...
5 min read
ThreatBook Research Team: 6 April 2026, 12:04 AM
Overview TA558 (also known as "SteganoAmor") is a financially motivated cybercriminal organization that has been active since 2018. Its attacks are...
4 min read
ThreatBook Research Team: 1 April 2026, 12:04 AM
Regarding yesterday's Axios npm supply chain poisoning incident, ThreatBook has conducted in-depth sample analysis and attack tracing. Drawing on...
3 min read
ThreatBook Research Team: 31 March 2026, 02:03 PM
Axios — one of the most foundational dependencies in the JavaScript ecosystem, with over 3.6 billion annual downloads — was compromised on npm on...
3 min read
ThreatBook Research Team: 25 March 2026, 03:03 PM
On March 24, 2026, ThreatBook Research Team detected a large-scale supply chain attack targeting LiteLLM — a core component widely used across the AI...
3 min read
ThreatBook Research Team: 20 March 2026, 08:03 AM
ThreatBook Research and Response Team has identified and tracked an organized threat group conducting a large-scale malware distribution campaign...
3 min read
ThreatBook Research Team: 20 March 2026, 08:03 AM
This is the full technical companion to our campaign overview published in Part 1. It documents the Windows and macOS malware chains in detail, and...
2 min read
ThreatBook Research Team: 18 March 2026, 08:03 AM
Last week, ThreatBook's endpoint detection product, OneSEC EDR, identified and fully captured an active attack targeting OpenClaw users. The attack...