Used primarily for resource management, cgroups unlock valuable telemetry for investigating malicious processes on Linux

Our annual analysis brings you a year’s worth of security operations and intelligence insights, including how adversaries are both leveraging and targeting AI

How to use the open source Assemblyline tool to track browser extension updates and detect malicious code

We deconstruct a multi-step threat hunt for malicious OpenClaw AI agents, outlining our approach to identifying and mitigating risks posed by unauthorized AI skills.

How to detect and respond to OAuth consent attacks in Google Workspace

How to observe, detect, investigate and mitigate against overly permissive Entra app consent

Everything you need to know to detect and prevent npm compromises from Shai-Hulud’s latest campaign