Threat Briefs
Concise threat briefs on emerging campaigns, novel techniques, and what defenders should do this week.
9 articles
Threat BriefCloudIntelligence
The Vercel OAuth Breach: When Your Hosting Platform Becomes the Supply Chain
In April 2026 Vercel disclosed that attackers had moved through an OAuth integration into customer environment variables. The incident is a working example of why platform trust now sits inside the threat model.
Threat BriefIntelligenceStrategy
The Foxconn Nitrogen Ransomware Attack: Manufacturing Becomes a Multi-Customer Breach
When Nitrogen ransomware hit Foxconn in May 2026 and claimed 8 terabytes of design files spanning Apple, NVIDIA, Google, Intel, and Dell projects, a single factory breach became a multi-customer supply chain incident.
AdvisoryThreat BriefIntelligence
The Oracle PeopleSoft Zero-Day: ShinyHunters and the HR Stack Problem
Oracle's out of band June 2026 advisory for CVE-2026-35273 confirmed what enterprise defenders had been seeing for days: ShinyHunters was exploiting PeopleSoft in the wild and the HR stack was the entry point.