OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration

Trust No Skill: Integrity Verification for AI Agent Supply Chains

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

Paved With Intent: ROADtools and Nation-State Tactics in the Cloud

Tracking TamperedChef Clusters via Certificate and Code Reuse

Gremlin Stealer’s Evolved Tactics: Hiding in Plain Sight With Resource Files

Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools