Threat Intel | GeekIO

UNC6395: From GitHub to Salesforce, Inside the Supply‑Chain Breach

A compromise of Salesloft’s GitHub kicked off a supply‑chain campaign that used stolen OAuth tokens from Drift to export data at scale from Salesforce.

Threat Actors

Sep 114 min read

APT36 Explained: Transparent Tribe’s Tools, Targets & IOC's

APT36—also known as Transparent Tribe, Mythic Leopard, ProjectM, and Earth Karkaddan—is a Pakistan-based advanced persistent threat (APT) group active since at least 2013.

Threat Intel

Sep 64 min read

Security Onion SIEM Setup

Security Onion SIEM setup guide. Network security monitoring, intrusion detection, and log management

Threat Intel

May 133 min read