Threat Intelligence

Poison at the Source: A Technical Deep Dive Into How Supply Chain Attacks Are Evolving

Supply chain attacks represent the most elegant class of intrusion available to sophisticated threat actors — compromise the builder, own the users. From SolarWinds to 3CX to the XZ Utils backdoor, we break down the technical tradecraft and explain why your current defenses probably won't catch the next one.

Aug 7, 2026

Poison in the Pipeline: How Foreign Adversaries Are Turning Open Source Into a Weapon

Nation-state actors have figured out that the fastest way to breach critical US infrastructure isn't through the front door — it's through the code your developers trust without thinking twice. From SolarWinds to Log4Shell, the open source supply chain has become the most dangerous attack surface most organizations aren't defending properly.

Aug 7, 2026