✨ No need to do from scratch. Deploy a Validated Containment Architecture built for your AI platform. →Deploy a Validated Containment Architecture for your AI platform. →A Validated Containment Architecture for your AI platform. →Validated Containment Architectures are here. →Contain Threats NowExplore✨
Aviatrix Threat Research Center
Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.
The Aviatrix Threat Research Center provides security teams with:
- A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
- What attackers exploited, and which enforcement gaps let them move.
- Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.
Recent Breaches, Security Incidents & Vulnerabilities
AI-Powered Threat Analysis
Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.
Displaying 3157 to 3168 of 5227
Critical RCE Vulnerability in React Native CLI Exposes Developers to Attacks
In November 2025, a critical remote code execution (RCE) vulnerability, designated as CVE-2025-11953 and dubbed 'Metro4Shell,' was discovered in the '@react-native-community/cli' npm package. This package, integral to React Native development, had versions 4.8.0 through 20.0.0-alpha.2 affected. The flaw allowed unauthenticated attackers to execute arbitrary operating system commands on machines running the Metro Development Server, which binds to external interfaces by default. Exploitation was achieved by sending specially crafted POST requests to the '/open-url' endpoint, leading to potential full system compromise. The vulnerability was patched in version 20.0.0 released in October 2025. ([github.com](https://github.com/advisories/GHSA-399j-vxmf-hjvr?utm_source=openai)) The 'Metro4Shell' incident underscores the critical importance of securing development environments and the potential risks posed by exposed development servers. It highlights the necessity for developers to regularly update dependencies, configure development tools securely, and implement network access controls to prevent unauthorized access. ([csa.gov.sg](https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-104/?utm_source=openai))
6 months ago
Kill Chain
DockerDash Vulnerability: A Wake-Up Call for AI Security in Development Tools
In November 2025, Docker addressed a critical vulnerability, dubbed 'DockerDash,' in its AI assistant, Ask Gordon. This flaw allowed attackers to embed malicious instructions within Docker image metadata, leading to remote code execution (RCE) in cloud and CLI environments, and data exfiltration in Docker Desktop setups. The attack exploited the AI's inability to distinguish between benign metadata and executable commands, enabling unauthorized actions without user consent. The incident underscores the emerging risks associated with integrating AI agents into development workflows, highlighting the need for stringent validation mechanisms to prevent similar vulnerabilities. Organizations are urged to update to Docker Desktop version 4.50.0 to mitigate this threat.
6 months ago
Kill Chain
AI-Driven AWS Breach: Lessons from the 2025 Incident
In November 2025, a sophisticated AI-assisted attack compromised an AWS environment within eight minutes. The attacker exploited publicly accessible S3 buckets containing valid credentials, enabling rapid escalation to administrative privileges. This breach underscores the critical need for stringent access controls and continuous monitoring in cloud infrastructures. The incident highlights a growing trend of AI-driven cyberattacks that leverage automation for swift and efficient exploitation. Organizations must adapt their security strategies to address these evolving threats, emphasizing proactive defense mechanisms and regular security audits.
6 months ago
Kill Chain
Dropbox Phishing Attack 2026: Credential Theft via Fake PDF Lures
In early 2026, a sophisticated phishing campaign targeted corporate users by distributing emails with PDF attachments labeled as 'request orders.' These PDFs contained links leading to a fake Dropbox login page designed to harvest user credentials. The attack employed a multi-stage obfuscation strategy, utilizing legitimate cloud services to host intermediary documents, thereby evading traditional email security filters. Upon entering their credentials, victims' information, including email and password, was exfiltrated to attacker-controlled infrastructure, enabling potential account takeovers and further malicious activities. This incident underscores the evolving tactics of cybercriminals who exploit trusted platforms and file formats to deceive users. The use of legitimate services for hosting malicious content highlights the need for enhanced vigilance and advanced security measures to detect and prevent such sophisticated phishing attacks.
6 months ago
Kill Chain
macOS Infostealer Campaigns of 2025: Understanding the Threat Landscape
In 2025, a series of sophisticated infostealer campaigns targeted macOS users, exploiting social engineering tactics and trusted platforms to distribute malware. Attackers utilized deceptive websites, fake software installers, and malicious advertisements to deliver infostealers like Atomic macOS Stealer (AMOS), DigitStealer, and MacSync. These malware variants harvested sensitive data, including browser credentials, cryptocurrency wallets, and developer secrets, leading to significant security breaches and financial losses. The increasing prevalence of cross-platform infostealers underscores a critical shift in cyber threats, emphasizing the need for enhanced security measures across all operating systems. Organizations must remain vigilant against evolving tactics, such as the abuse of legitimate platforms and the use of fileless execution methods, to effectively mitigate these risks.
6 months ago
Kill Chain
OpenClaw AI Agent Security Vulnerabilities Exposed in 2026
In early 2026, the OpenClaw AI agent framework, formerly known as Clawdbot and Moltbot, experienced rapid adoption, amassing over 180,000 GitHub stars and 2 million visitors in a single week. This surge exposed significant security vulnerabilities, including over 1,800 instances leaking API keys, chat histories, and account credentials. The extensible nature of OpenClaw allowed malicious actors to upload at least 14 compromised 'skills' to ClawHub, the platform's public registry, between January 27 and 29, 2026. These skills, disguised as crypto trading tools, executed remote scripts to steal sensitive data from users' systems. Additionally, OpenClaw's integration with messaging applications expanded the attack surface, enabling threat actors to craft malicious prompts that led to unintended behaviors. The platform's architecture, which grants AI agents high-level privileges to execute shell commands and access local file systems, further exacerbated these risks. ([venturebeat.com](https://venturebeat.com/security/openclaw-agentic-ai-security-risk-ciso-guide?utm_source=openai)) The OpenClaw incident underscores the urgent need for robust security measures in AI agent frameworks. The rapid proliferation of autonomous AI agents with extensive system access highlights the necessity for organizations to implement stringent access controls, conduct thorough code audits, and establish comprehensive monitoring systems. This event serves as a critical reminder of the potential risks associated with deploying AI agents without adequate security protocols, emphasizing the importance of proactive measures to safeguard sensitive information and maintain system integrity.
6 months ago
Kill Chain
Microsoft's Compliance with FBI Requests for BitLocker Keys Raises Privacy Concerns
In early 2025, Microsoft complied with a federal search warrant by providing the FBI with BitLocker recovery keys to access encrypted data on three laptops involved in a fraud investigation in Guam. BitLocker, a full-disk encryption feature in Windows, often stores recovery keys in Microsoft's cloud by default, facilitating data recovery but also enabling law enforcement access when legally mandated. This incident underscores the privacy implications of default cloud storage of encryption keys, as it allows Microsoft to decrypt user data upon receiving valid legal orders. ([forbes.com](https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/?utm_source=openai)) The case highlights a significant privacy concern, especially when compared to other tech companies like Apple and Meta, which have implemented zero-knowledge encryption systems that prevent even the companies themselves from accessing user data. This architectural difference raises questions about user data security and the potential for unauthorized access through legal channels. ([forbes.com](https://www.forbes.com/sites/thomasbrewster/2026/01/22/microsoft-gave-fbi-keys-to-unlock-bitlocker-encrypted-data/?utm_source=openai))
6 months ago
Kill Chain
Notepad++ Supply Chain Attack: A 2025 Case Study
In June 2025, the Chinese state-sponsored group Lotus Blossom compromised the update infrastructure of Notepad++, a widely used open-source text editor. By infiltrating the hosting provider's server, the attackers selectively redirected update requests from targeted users to malicious servers, delivering trojanized installers embedded with a custom backdoor named Chrysalis. This sophisticated supply chain attack persisted until December 2025, affecting users in sectors such as government, telecommunications, and financial services. ([cyberscoop.com](https://cyberscoop.com/china-espionage-group-lotus-blossom-attacks-notepad/?utm_source=openai)) This incident underscores the escalating threat of supply chain attacks, where trusted software distribution channels are exploited to infiltrate targeted systems. Organizations must enhance their software supply chain security measures to mitigate such risks. ([orca.security](https://orca.security/resources/blog/notepad-plus-plus-supply-chain-attack/?utm_source=openai))
6 months ago
Kill Chain
NationStates Data Breach Exposes User Information
In late January 2026, NationStates, a popular multiplayer browser-based game, experienced a significant data breach. A long-standing community member, previously recognized for responsible vulnerability disclosures, identified a critical flaw in the game's 'Dispatch Search' feature. While testing this vulnerability, the individual exceeded authorized boundaries, achieving remote code execution on the production server. This unauthorized access led to the copying of sensitive user data, including email addresses, MD5-hashed passwords, IP addresses, and browser UserAgent strings. The breach was publicly disclosed on January 30, 2026, prompting a temporary shutdown of the site for investigation and remediation. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/nationstates-confirms-data-breach-shuts-down-game-site/?utm_source=openai)) This incident underscores the risks associated with inadequate input sanitization and the use of outdated cryptographic practices, such as MD5 for password hashing. It highlights the necessity for organizations to implement robust security measures, including regular code audits, modern encryption standards, and strict access controls, to prevent similar breaches.
6 months ago
Kill Chain
Panera Bread's 2026 Data Breach: A Cautionary Tale of Vishing Attacks
In January 2026, Panera Bread experienced a significant data breach orchestrated by the cybercriminal group ShinyHunters. The attackers employed sophisticated voice phishing (vishing) techniques to deceive employees into divulging single sign-on (SSO) credentials, granting unauthorized access to Panera's systems. This breach led to the exposure of 14 million records, including personally identifiable information (PII) such as full names, email addresses, phone numbers, and physical addresses of approximately 5.1 million unique accounts. Following Panera's refusal to comply with extortion demands, ShinyHunters publicly released the stolen data on the dark web. ([cyberinsider.com](https://cyberinsider.com/panera-bread-data-breach-exposed-personal-info-of-5-1-million-customers/?utm_source=openai)) This incident underscores a troubling trend in cyber threats, where attackers increasingly leverage social engineering tactics to bypass traditional security measures like multi-factor authentication (MFA). The Panera Bread breach highlights the critical need for organizations to enhance employee awareness and training to recognize and resist such deceptive tactics, as well as to implement robust security protocols to safeguard sensitive customer information.
6 months ago
Kill Chain
Notepad++ 2025 Supply Chain Attack: Lessons in Software Security
In June 2025, Chinese state-sponsored hackers compromised the update infrastructure of Notepad++, a widely used text editor, by infiltrating its hosting provider. This allowed them to intercept and selectively redirect update requests from targeted users to malicious servers, delivering tampered update manifests. The attackers exploited vulnerabilities in older versions of Notepad++'s WinGUp update tool, which lacked sufficient verification controls. The breach persisted until December 2, 2025, when the hosting provider detected the intrusion and terminated the attackers' access. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/notepad-plus-plus-update-feature-hijacked-by-chinese-state-hackers-for-months/?utm_source=openai))This incident underscores the critical importance of securing software supply chains, as state-sponsored actors increasingly target update mechanisms to distribute malware. Organizations must implement robust verification processes and regularly audit their infrastructure to prevent similar attacks. ([arstechnica.com](https://arstechnica.com/security/2026/02/notepad-updater-was-compromised-for-6-months-in-supply-chain-attack/?utm_source=openai))
6 months ago
Kill Chain
OpenClaw 2026: Malicious Skills Distribute Password-Stealing Malware
Between January 27 and February 1, 2026, over 230 malicious 'skills' were uploaded to OpenClaw's official registry and GitHub repositories. These skills, masquerading as legitimate utilities, contained malware designed to steal sensitive information such as API keys, wallet private keys, SSH credentials, and browser passwords. The attackers exploited OpenClaw's plugin system to distribute these malicious packages, leading to significant data breaches for users who installed them. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/malicious-moltbot-skills-used-to-push-password-stealing-malware/?utm_source=openai)) This incident underscores the growing trend of supply chain attacks targeting open-source platforms. The ease of publishing and distributing plugins or extensions in such ecosystems presents a lucrative vector for cybercriminals. Organizations must exercise heightened vigilance when integrating third-party tools, ensuring thorough vetting processes to mitigate potential security risks.
6 months ago
Kill Chain
Security Research & Insights
Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs
OpenAI Lost Control of Its Models. Then Anthropic Did Too. That Is Not a Coincidence.
Attackers Learned to Use AI. Now They Built Tools to Destroy It.
Living-off-the-Agent: How AI Tool Misuse Became the Insider Threat Nobody Provisioned
Market Perspectives
Market Perspectives offering expert commentary and select breach analysis from industry leaders
What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust
The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures
HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data
How CNSF Protects Cloud Workloads
Cloud attackers don’t rely on a single exploit — they rely on paths.
Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.
Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.
With CNSF, enterprises can:
- Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
- Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
- Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
- Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.
See Your Attack Paths. Close the Gaps with CNSF.
Blast radius starts where your enforcement stops.
Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.
Your assessment delivers:
The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.
The threat landscape has changed.
Has your question changed with it?
In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.
This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.
Contain the Blast Radius
See the attack paths already present in your environment — and where CNSF containment controls would break them.
