Admin Login

 Expires: — Get 40% off any Linux VPS Hosting plan. Offer applied automatically at checkout.

HOSTCAY BLOG

Insights on offshore hosting, privacy, security and the cloud.

CrashStealer: How Notarized macOS Malware Bypasses Gatekeeper
July 14, 2026 · HOSTCAY

CrashStealer: How Notarized macOS Malware Bypasses Gatekeeper

A new macOS information stealer bypasses Apple's security checks using legitimate notarization. Understand the technical approach and implications for infrastructure defenders.

Read article →
State Infrastructure Under Siege: What the Balochistan Police Breach Teaches Us
July 13, 2026 · HOSTCAY

State Infrastructure Under Siege: What the Balochistan Police Breach Teaches Us

When government portals managing sensitive citizen and criminal data fall to sustained espionage campaigns, the infrastructure lessons extend far beyond one agency. A detailed look at what happened and why.

Read article →
Supply Chain Compromise: The jscrambler npm Incident and Dependency Risk
July 12, 2026 · HOSTCAY

Supply Chain Compromise: The jscrambler npm Incident and Dependency Risk

An npm package update delivered a multi-platform infostealer via preinstall hooks. What this incident reveals about build pipeline risks and detection gaps.

Read article →
When Your Storage Infrastructure Becomes a Security Liability
July 11, 2026 · HOSTCAY

When Your Storage Infrastructure Becomes a Security Liability

A critical vulnerability in distributed storage controllers reveals gaps in how enterprises manage remote infrastructure. What you should audit in your own setup.

Read article →
Ghost Accounts and API Reconnaissance: Securing GitHub Infrastructure
July 10, 2026 · HOSTCAY

Ghost Accounts and API Reconnaissance: Securing GitHub Infrastructure

Attackers are systematically mapping corporate GitHub organisations using dormant accounts and compromised tokens. Here's what infrastructure teams need to know about this reconnaissance pattern.

Read article →
When AI Coding Tools Trip Security Alerts
July 9, 2026 · HOSTCAY

When AI Coding Tools Trip Security Alerts

AI coding assistants are inadvertently triggering endpoint security systems. Understanding why helps infrastructure teams tune defences without blocking legitimate tooling.

Read article →

LATEST BLOG ARTICLES