Login
Moving up the Assemblyline: Exposing malicious code in browser extensions
How to use the open source Assemblyline tool to track browser extension updates and detect malicious code
Reading view
Hunting for malicious OpenClaw AI in the modern enterprise
We deconstruct a multi-step threat hunt for malicious OpenClaw AI agents, outlining our approach to identifying and mitigating risks posed by unauthorized AI skills.
Breaking down a supply chain attack leveraging a malicious Google Workspace OAuth app
How to detect and respond to OAuth consent attacks in Google Workspace
ChatGPT in your inbox? Investigating Entra apps that request unexpected permissions
How to observe, detect, investigate and mitigate against overly permissive Entra app consent
Bun and done: The second coming of the Shai-Hulud worm
Everything you need to know to detect and prevent npm compromises from Shai-Hulud’s latest campaign
