Malware Analysis

A practitioner breakdown of the npm worm that sweeps environment variables on install and republishes itself through Trusted Publishing.

How the April 2026 compromise of CPUID’s site turned CPU-Z and HWMonitor downloads into a multi-stage malware delivery chain.

A threat that matured abroad has found a home in the US. How ATM jackpotting works, why it keeps working, and what the industry guidance says.

OpenClaw is a case study in how fast AI agent deployment outran the governance meant to contain it. The vulnerabilities and what they teach.