HAIJA INTEL REPORT

An update to our Threat Brief on npm supply chain attacks discusses the latest campaign, where attackers exploited a process gap in the CI/CD pipeline itself. Unit 42 also observed activity where an attacker used GitHub Copilot to trigger infection: https:// bit.ly/4cwtCk3

Is reverse proxy phishing slowly dying? This is what I've been trying to find out during the past several months. Major websites have caught up and vastly improved their security, successfully detecting malicious traffic originating from reverse-proxy phishing servers.

Nighthawk 1.0 is now released to customers, blog post to follow. Here's a sneak peak of our new CET compatible, per API, custom configurable stack masking ... just one of many new features

AI has drastically accelerated vulnerability research and exploitation. Because of this speed, the half-life of a security team's baseline skills is now measured in months. Keeping up requires treating continuous upskilling as a strict operational requirement. Organizations

Who would win in a fight: You or the Autonomous SOC? Tag a friend below who you think couldn’t walk away the champion Find out at Black Hat! Purple AI, Purple MCP, and Auto-Investigation are the machine. Your goal: beat the machine, by detecting threats earlier and responding

http:// securitycontext.dev now has two new MCP tools. Now your agent can hit the full dataset directly: search thousands of enriched CVEs and Nuclei templates, and pull the complete record for any CVE or template. Repo security context plus vulnerability intel. Better signal for