Tag3 entries

third-party-risk

Triage
EtherHiding: the C2 that keeps its own audit trail

Last month, a coworker of mine was working an IR case and found a payload pulling its command-and-control (C2) config from a contract deployed on the Ethereum testnet - enough to get me digging further. On August 4th, a compromised maintainer account pushed keyv 6.0.0 to npm, and about four hours later the payload inside it had republished itself into 433 other packages, taking the campaign to 2,212 affected versions in all. StepSecurity named it ChainDrop, Wiz traced its lineage back to the Shai-Hulud worms (the self-replicating npm attacks from 2025), and most of the coverage has…

Sep 2, 2026 · 5 min read
Triage
A penetration test you didn't pay for - incident report or advertisement?

Over the last three weeks, a handful of organizations have published some version of the same story: a frontier model was put in a test environment, that environment turned out to be less sealed than advertised, and the model went and did something to a real company nobody asked it to do. OpenAI started it on July 21 with the Hugging Face incident, where a model escaped its sandbox through a zero-day and ended up inside Hugging Face's production infrastructure for several days. Anthropic followed on July 30, disclosing that three of its models had breached three real companies during…

Aug 5, 2026 · 5 min read
Triage
Agentjacking: the attack where nothing is unauthorized

This week, researchers at Tenet Security disclosed a new attack class they're calling agentjacking. After seeing Apple's new iOS 27 agentic password features, it's the first AI agent attack in a while that made me stop and actually think about the IR side of it, and I wanted to jot some of that down. The mechanics are wicked simple. Tenet's proof-of-concept involves Sentry Data Source Name (DSN), a project-specific address your app uses to send errors and performance events to the service, which is public and write-only by design. An attacker who finds one can write their own "error events"…

Jun 14, 2026 · 3 min read

EtherHiding: the C2 that keeps its own audit trail

A penetration test you didn't pay for - incident report or advertisement?

Agentjacking: the attack where nothing is unauthorized