Security Operations

Open Sesame: How a Fail-Open Bug in Open VSX's New Scanner Let Malware Walk Right In

Open Sesame: How a Fail-Open Bug in Open VSX's New Scanner Let Malware Walk...

Editor’s Note: This article was originally published by Koi Security on March 27, 2026. Following Koi Security’s acquisition by Palo Alto Networks, it has been republished to preserve historical research findin...
Oct 12, 2026
Supply Chain Under Siege: GlassWorm’s Native Rust Loaders Target VS Code

Supply Chain Under Siege: GlassWorm’s Native Rust Loaders Target VS Code

Editor’s Note: This article was originally published by Koi Security on December 10, 2025. Following Palo Alto Networks' acquisition of Koi Security, this research has been migrated to the Palo Alto Networks Th...
Oct 09, 2026
Cortex AES Extends Code Package Visibility to Go

Cortex AES Extends Code Package Visibility to Go

Discover how Cortex AES extends supply chain security to Go modules across Windows and macOS endpoints. Flag malicious packages, retracted versions, a...
Oct 07, 2026
GlassWorm Goes Mac: Fresh Infrastructure, New Tricks

GlassWorm Goes Mac: Fresh Infrastructure, New Tricks

Editor’s note: This article was originally published by Koi Security on December 29, 2025. Koi is now part of Palo Alto Networks, and this article has been adapted for the Palo Alto Networks blog. The technical...
Oct 01, 2026

Subscribe to Security Operations Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.