DevSecOps - MorphHats InfoSecure

Filter by
Categories
Tags
Authors
Show all

All
AI & Security
Announcements
Cloud Security
DFIR
Digital Forensics & Incident Response
Governance & Compliance
Security Awareness
Threats & Attacks
Tools & Techniques
Vulnerabilities & Patching
Zero Trust

All
Access Control
Agentic AI
AI Adoption
AI Governance
AI Security
Artificial Intelligence
Attack Surface
Attack Techniques
Authentication
Automation
Automotive
Awareness
Backups
BEC
Bill C-26
Bill C-8
Blue Team
Business Continuity
Canada
CCCS
CISA Advisory
Cl0p
Clop
Cloud
Cloud Security
Compliance
Conditional Access
Configuration
Credential Stuffing
Credential Theft
Critical Infrastructure
Culture
Data Breach
Data Brokers
Data Loss
Data Privacy
Data Protection
DDoS
Defensible Architecture
Detection
Detection Engineering
DevSecOps
DFIR
Digital Forensics
Double Extortion
Edge Devices
Education
Encrypted Messaging
Endpoint
Espionage
Extortion
F5
Forensics
FortiOS
Fraud
Governance
Government
Hardening
Help Desk
IAM
Identity
Identity & Access Management
Identity Theft
Incident Reporting
Incident Response
Least Privilege
Linux
LLM
Logging
Machine Learning
Managed File Transfer
MFA
MICCMAC
Microsoft
Misconfiguration
Misconfigurations
MITRE ATTACK
MorphHats
Multi-Cloud
Nation-State
Network Security
North Korea
npm
OpenSSH
Passkeys
Patch Management
Patching
Persistence
Personal Security
Phishing
Phishing-Resistant
PIPEDA
Policy
Preparedness
Prioritization
Privacy
Prompt Injection
Purple Team
Ransomware
RCE
Recovery
Regulation
Resilience
Risk
Risk Management
Roadmap
SaaS
Salt Typhoon
Scattered Spider
Security Architecture
Security Automation
Security Awareness
Segmentation
Shadow AI
Shared Responsibility
SharePoint
SIEM
Sigma
Signing
SMB
Social Engineering
Supply Chain
Tabletop
Tabletop Exercises
Telecom
Third-Party Risk
Threat Actors
Threat Detection
Threat Hunting
Threat Intelligence
Threats
Training
Validation
Vendor Risk
Visibility
VPN
Vulnerability Management
Windows
Zero Trust
Zero-Day

September 24, 2025

Shai-Hulud and the npm Supply Chain: Poisoning the Well Developers Drink From

In September 2025, a self-propagating worm dubbed Shai-Hulud swept through the npm ecosystem, compromising hundreds of packages by stealing developer and CI credentials and using them […]