Browser Fingerprinting as a Malware Gating Mechanism
Threat actors are deploying sophisticated server-side gating using browser fingerprinting to hide malicious content from security researchers and automated systems.
Read article →
Device Code Phishing: How OAuth Flows Became an MFA Bypass
Device code phishing turns OAuth 2.0's legitimate authorisation flow into an MFA bypass vector. Learn how the attack works and what operators should do.
Read article →
Supply Chain Attacks via npm: Lessons for Hosting Infrastructure
Recent npm package squatting campaigns reveal how attackers exploit naming confusion to distribute malware. Infrastructure teams must understand dependency risks in their stack.
Read article →
Domain Seizures vs. Piracy: Why Enforcement Alone Won't Scale
Operation Offsides seized over 1,000 pirate domains during the World Cup. We analyse why seizure-based enforcement has structural limits and what infrastructure solutions might actually work.
Read article →
Supply Chain Poisoning: When Ad Scripts Become Wallet Hijackers
A compromised advertising script rewrote cryptocurrency wallet addresses in real time. This incident exposes a critical weakness in how websites trust third-party code.
Read article →
State-Sponsored APT Activity: How Central Asian Governments Fell to OctLurk
A sustained espionage campaign against Central Asian government infrastructure reveals how state-backed groups exploit weak network segmentation and legacy systems.
Read article →
