Security research on AI-enabled attacks, cloud-enabled attacks, web threats, and malware.https://threatlabs.netskope.com/en-ushttps://threatlabs.netskope.com/reports/2026/threat-labs-report-asia-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-asia-2026/This report analyzes the primary cybersecurity risk trends impacting organizations in Asia. It addresses the growing adoption of generative AI (AI) tools and their associated data security challenges. Furthermore, it illustrates the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and AI platforms.Mon, 05 Oct 2026 01:00:00 GMTNetskope Threat LabsThreat Protectionhttps://threatlabs.netskope.com/blog/2026/09/underground-crypto-drain-operation/https://threatlabs.netskope.com/blog/2026/09/underground-crypto-drain-operation/A Vidar-class stealer injected into dllhost.exe takes its commands from rotating Cloudflare-fronted /api/machine gates, automatically drains crypto-exchange accounts, and rewrites the withdrawal confirmation email in the victim's webmail.Thu, 01 Oct 2026 00:00:00 GMTVini EgerlandMalwareCredential TheftCryptohttps://threatlabs.netskope.com/reports/2026/threat-labs-report-france-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-france-2026/This report analyzes the primary cybersecurity risk trends impacting organizations in France. It addresses the growing adoption of generative AI (AI) tools and their associated data security challenges. Furthermore, it illustrates the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and AI platforms.Tue, 29 Sep 2026 08:00:00 GMTNetskope Threat LabsThreat Protectionhttps://threatlabs.netskope.com/reports/2026/threat-labs-report-retail-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-retail-2026/This report analyzes the primary cybersecurity risk trends impacting retail organizations. It covers the growing adoption of AI tools and the data security problems that come with them, and tracks the rise in data policy violations as sensitive information leaves the organization through unauthorized cloud services, personal apps, and AI platforms.Tue, 22 Sep 2026 17:00:00 GMTNetskope Threat LabsThreat ProtectionRetailhttps://threatlabs.netskope.com/blog/2026/09/a-fake-security-locker-delivered-by-google-ads/https://threatlabs.netskope.com/blog/2026/09/a-fake-security-locker-delivered-by-google-ads/A cloud-hosted tech-support-scam kit shows a working online store to crawlers and sandboxes, but decrypts a hidden C2 and an OS-tailored fake security locker in the browser only after a real mouse moves.Mon, 14 Sep 2026 18:00:00 GMTJohn Carlo MarquezSocial EngineeringCloudhttps://threatlabs.netskope.com/reports/2026/threat-labs-report-australia-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-australia-2026/This report analyzes the primary cybersecurity risk trends impacting ANZn organizations. It addresses the growing adoption of generative AI (AI) tools and their associated data security challenges. Furthermore, it illustrates the growing number of data policy violations, in which sensitive information is increasingly leaked through unauthorized cloud services, personal applications, and AI platforms.Tue, 08 Sep 2026 22:00:00 GMTNetskope Threat LabsThreat Protectionhttps://threatlabs.netskope.com/blog/2026/09/malware-on-the-blockchain-an-ongoing-campaigns-new-webrtc-twist/https://threatlabs.netskope.com/blog/2026/09/malware-on-the-blockchain-an-ongoing-campaigns-new-webrtc-twist/EtherHiding, a technique that uses BNB Smart Chain (BSC) testnet as takedown-resistant payload storage, has been seen across more than 5,400 compromised websites in the last few months.Mon, 31 Aug 2026 18:00:00 GMTJohn Carlo MarquezMalwareCommand and ControlSocial Engineeringhttps://threatlabs.netskope.com/blog/2026/08/python-nodestealer/https://threatlabs.netskope.com/blog/2026/08/python-nodestealer/Since 2023, Netskope Threat Labs has been tracking the Python-based NodeStealer, an infostealer targeting sensitive browser data and Facebook user, and Ads Manager accountsWed, 26 Aug 2026 00:00:00 GMTJan Michael AlcantaraMalwareAICredential TheftCloudhttps://threatlabs.netskope.com/blog/2026/08/etherhiding-in-the-browser-clickfix-chain-ends-in-amatera/https://threatlabs.netskope.com/blog/2026/08/etherhiding-in-the-browser-clickfix-chain-ends-in-amatera/A WordPress mass-compromise campaign runs a malicious Service Worker that strips Content-Security-Policy and resolves its ClickFix payload from a Base smart contract, the first convergence of Service Worker delivery and blockchain dead-drop C2 that Netskope Threat Labs has observed. The decoded chain runs through an MP3/HTA polyglot, a fileless PowerShell stage, the Emmenhtal loader, and a steganographic image on a legitimate CDN, ending at the Amatera password stealer.Tue, 25 Aug 2026 00:00:00 GMTVini EgerlandMalwareSocial EngineeringCredential TheftCryptoCommand and Controlhttps://threatlabs.netskope.com/blog/2026/08/blockchain-dead-drop-resolvers-explained/https://threatlabs.netskope.com/blog/2026/08/blockchain-dead-drop-resolvers-explained/A practitioner primer on blockchain dead drop resolvers - how eight unrelated malware families across Ethereum, Solana, and TON use public smart contracts to fetch C2 addresses at runtime, and how to detect them.Tue, 18 Aug 2026 11:00:00 GMTVini EgerlandMalwareCommand and Controlhttps://threatlabs.netskope.com/blog/2026/08/ai-sidebar-extension-monetizes-its-own-updates/https://threatlabs.netskope.com/blog/2026/08/ai-sidebar-extension-monetizes-its-own-updates/The Chrome extension "AI Sidebar with DeepSeek AI" that Google removed from the Chrome Web Store in January 2026 for stealing AI conversation content resumed shipping code to enterprise endpoints in July 2026. The extension released a benign update removing the data theft code and acknowledged its wrongdoing. After 2 weeks it pulled the rug again with a new update. Netskope Threat Labs analyzed the new build. While it no longer contains the conversation-exfiltration code, it now contains a monetization payload that opens an affiliate link in a foreground browser tab every single time the extension updates and uninstalls. Additionally, it suppresses the redirection of DeepSeek users to ChatGPT.Tue, 11 Aug 2026 00:00:00 GMTVini EgerlandMalwareAIhttps://threatlabs.netskope.com/blog/2026/08/fake-captcha-real-business-traffic-distribution-for-hire/https://threatlabs.netskope.com/blog/2026/08/fake-captcha-real-business-traffic-distribution-for-hire/A single PDF factory has stamped out more than 12,700 structurally similar FakeCaptcha documents and parked them on Webflow's content delivery network, where Google indexes them as ordinary "upgrade g…Tue, 04 Aug 2026 00:00:00 GMTVini EgerlandSocial EngineeringMalwareCloudhttps://threatlabs.netskope.com/blog/2026/08/npm-stealer-reads-its-c2-from-an-ethereum-contract/https://threatlabs.netskope.com/blog/2026/08/npm-stealer-reads-its-c2-from-an-ethereum-contract/Netskope Threat Labs identified and analyzed 28 malicious npm package versions published across four unrelated enterprise namespaces (@servicetitan, @or-sdk, @onereach, and @umacloud) on 2026-08-04. T…Tue, 04 Aug 2026 00:00:00 GMTGianpietro CutoloSocial EngineeringMalwareCloudhttps://threatlabs.netskope.com/blog/2026/08/developers-in-the-crosshairs-fake-ai-tools-deliver-infostealer/https://threatlabs.netskope.com/blog/2026/08/developers-in-the-crosshairs-fake-ai-tools-deliver-infostealer/In April 2026, Netskope Threat Labs exposed a Malware-as-a-Service (MaaS) NodeJS infostealer delivered through the ClickFix social engineering technique. As we tracked this infostealer, we uncovered o…Mon, 03 Aug 2026 00:00:00 GMTJan Michael AlcantaraMalwareCredential TheftSupply ChainAIhttps://threatlabs.netskope.com/blog/2026/07/beyond-shadow-ai-the-netskope-ai-report/https://threatlabs.netskope.com/blog/2026/07/beyond-shadow-ai-the-netskope-ai-report/Future-proof your enterprise against agentic AI vectors and supply chain attacks. Read the Netskope AI Report 2026 to protect downstream data.Mon, 27 Jul 2026 00:00:00 GMTRaymond CanzaneseAIhttps://threatlabs.netskope.com/reports/2026/netskope-ai-report-2026/https://threatlabs.netskope.com/reports/2026/netskope-ai-report-2026/The 2026 threat landscape has moved beyond shadow AI discovery into a phase of bidirectional, agentic risk. We are no longer just monitoring the prompts employees send to third-party models; we are now governing the integrity of the AI-driven supply chain. The rapid integration of the Model Context Protocol (MCP) effectively bridges our internal data stores with external agents, while the surge in autonomous coding tools like Cursor and Claude Code has drastically lowered the barrier for automated, malicious code execution. For security teams, this mandates a pivot from simple data to bidirectional inspection. We need to treat every agentic interaction as a potential execution vector, not just a data request.Mon, 27 Jul 2026 00:00:00 GMTNetskope Threat Labshttps://threatlabs.netskope.com/blog/2026/07/world-cup-retrospective-analyzing-the-surge-in-cyber-threats/https://threatlabs.netskope.com/blog/2026/07/world-cup-retrospective-analyzing-the-surge-in-cyber-threats/High-profile events consistently attract opportunistic attackers, and the 2026 FIFA World Cup was a prime example of this trend. Because the tournament generated massive global interest and traffic, i…Wed, 22 Jul 2026 00:00:00 GMTJohn Carlo MarquezMalwarePhishinghttps://threatlabs.netskope.com/reports/2026/threat-labs-report-india-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-india-2026/This report analyzes the primary cybersecurity risk trends impacting Indian organizations. It addresses the growing adoption of generative AI (AI) tools and their associated data security challenges. Furthermore, it illustrates the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and AI platforms.Mon, 13 Jul 2026 00:00:00 GMTNetskope Threat Labshttps://threatlabs.netskope.com/blog/2026/06/macos-clickfix-lures-deploy-applescript-stealer-persistent-rat/https://threatlabs.netskope.com/blog/2026/06/macos-clickfix-lures-deploy-applescript-stealer-persistent-rat/In April 2026, Netskope Threat Labs reported a ClickFix campaign delivering an AppleScript-based infostealer to macOS users, pilfering sensitive data through a persistent fake system dialog. Through o…Wed, 17 Jun 2026 00:00:00 GMTJan Michael AlcantaraMalwareCredential TheftCryptohttps://threatlabs.netskope.com/blog/2026/06/ai-agents-and-the-oauth-trust-problem-at-scale/https://threatlabs.netskope.com/blog/2026/06/ai-agents-and-the-oauth-trust-problem-at-scale/At Infosecurity Europe 2026, Netskope Threat Labs presented research on how OAuth authorization abuse has evolved from third-party supply chain breaches into a structural crisis for the agentic era. T…Thu, 11 Jun 2026 00:00:00 GMTRaymond CanzaneseAIhttps://threatlabs.netskope.com/reports/2026/threat-labs-report-europe-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-europe-2026/This report analyzes the primary cybersecurity risk trends impacting European organizations. It addresses the increasing adoption of generative AI (AI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and AI platforms.Mon, 25 May 2026 00:00:00 GMTNetskope Threat LabsThreat Protectionhttps://threatlabs.netskope.com/blog/2026/05/shai-hulud-style-npm-worm-hits-tanstack/https://threatlabs.netskope.com/blog/2026/05/shai-hulud-style-npm-worm-hits-tanstack/The npm packages @tanstack/history (1.161.9, 1.161.12) and more than 50 other packages across the @tanstack, @mistralai, @uipath, @squawk, and safe-action namespaces have been compromised and use a cl…Tue, 12 May 2026 00:00:00 GMTGianpietro CutoloMalwareSupply ChainCredential TheftCloudhttps://threatlabs.netskope.com/reports/2026/threat-labs-report-brazil-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-brazil-2026/This report analyzes the primary cybersecurity risk trends impacting Brazilian organizations. It addresses the increasing adoption of generative AI (genAI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and genAI platforms.Mon, 11 May 2026 00:00:00 GMTNetskope Threat LabsThreat Protectionhttps://threatlabs.netskope.com/blog/2026/05/dirtyfrag-two-kernel-bugs-give-root-on-all-major-linux-distros/https://threatlabs.netskope.com/blog/2026/05/dirtyfrag-two-kernel-bugs-give-root-on-all-major-linux-distros/DirtyFrag is a Linux local privilege escalation disclosed on May 7, 2026, exploiting two kernel page-cache write vulnerabilities–CVE-2026-43284 (xfrm-ESP, patched in mainline only) and CVE-2…Fri, 08 May 2026 00:00:00 GMTVini EgerlandVulnerabilityMalwarehttps://threatlabs.netskope.com/blog/2026/05/openclaw-hologram-fake-installer-ships-rust-infostealer/https://threatlabs.netskope.com/blog/2026/05/openclaw-hologram-fake-installer-ships-rust-infostealer/Netskope Threat Labs has found a fake OpenClaw installer delivering red-team-grade capabilities—all pointed at stealing credentials from over 250 crypto wallet and password manager extensions. The dro…Thu, 07 May 2026 00:00:00 GMTVini EgerlandMalwareCredential TheftCryptohttps://threatlabs.netskope.com/blog/2026/04/shai-hulud-intercom-client-7-0-4/https://threatlabs.netskope.com/blog/2026/04/shai-hulud-intercom-client-7-0-4/The Intercom TypeScript Library intercom-client@7.0.4 (published at 2026-04-30 at 14:41:04.098Z) has been compromised and uses a classic drop-and-execute attack pattern to run an infostealer…Thu, 30 Apr 2026 00:00:00 GMTGianpietro CutoloMalwareSupply ChainCredential Thefthttps://threatlabs.netskope.com/blog/2026/04/macos-clickfix-campaign-applescript-stealers-new-terminal-protections/https://threatlabs.netskope.com/blog/2026/04/macos-clickfix-campaign-applescript-stealers-new-terminal-protections/Netskope Threat Labs is continuing its coverage of a ClickFix campaign targeting both Windows and macOS users. While our previous post focused on a modular NodeJS-based remote access trojan …Mon, 20 Apr 2026 00:00:00 GMTJan Michael AlcantaraMalwareCredential TheftCryptohttps://threatlabs.netskope.com/blog/2026/04/from-clickfix-to-maas-exposing-a-modular-windows-rat-and-its-admin-panel/https://threatlabs.netskope.com/blog/2026/04/from-clickfix-to-maas-exposing-a-modular-windows-rat-and-its-admin-panel/Netskope Threat Labs is tracking a new ClickFix campaign that targets Windows users. ClickFix became a prominent delivery vector in early 2025 for delivering malware like LegionLoader and Lu…Mon, 06 Apr 2026 00:00:00 GMTJan Michael AlcantaraMalwareCryptohttps://threatlabs.netskope.com/reports/2026/threat-labs-report-financial-services-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-financial-services-2026/This report analyzes the primary cybersecurity risk trends impacting organizations within the financial services sector. It addresses the increasing adoption of generative AI (genAI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and genAI platforms.Mon, 06 Apr 2026 00:00:00 GMTNetskope Threat LabsFinancial Service & Insurancehttps://threatlabs.netskope.com/blog/2026/03/openclaw-trap-ai-assisted-lure-factory-targets-developers-gamers/https://threatlabs.netskope.com/blog/2026/03/openclaw-trap-ai-assisted-lure-factory-targets-developers-gamers/Netskope Threat Labs identified a link to a malware campaign operating across at multiple GitHub repositories, spanning over 300 delivery packages, including an OpenClaw deployment, an AI developer to…Mon, 23 Mar 2026 00:00:00 GMTVini EgerlandMalwareSupply ChainCredential TheftAIhttps://threatlabs.netskope.com/reports/2026/threat-labs-report-healthcare-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-healthcare-2026/This report analyzes the primary cybersecurity risk trends impacting organizations within the Healthcare sector. It addresses the increasing adoption of generative AI (genAI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and genAI platforms.Mon, 02 Mar 2026 00:00:00 GMTNetskope Threat LabsThreat ProtectionHealthcare & Life Scienceshttps://threatlabs.netskope.com/blog/2026/02/attackers-weaponize-signed-rmm-tools-via-zoom-meet-teams-lures/https://threatlabs.netskope.com/blog/2026/02/attackers-weaponize-signed-rmm-tools-via-zoom-meet-teams-lures/Netskope Threat Labs is tracking several phishing campaigns that weaponize fake meeting invites for various video conference applications, including Zoom, Microsoft Teams, and Google Meet. T…Thu, 12 Feb 2026 00:00:00 GMTJan Michael AlcantaraPhishingMalwarehttps://threatlabs.netskope.com/blog/2026/02/malicious-bing-ads-lead-to-widespread-azure-tech-support-scams/https://threatlabs.netskope.com/blog/2026/02/malicious-bing-ads-lead-to-widespread-azure-tech-support-scams/Starting on February 2 at around 16:00 UTC, Netskope Threat Labs was alerted to a spike of users across 48 different organizations clicking on tech support scam links hosted in Azure Blob St…Thu, 05 Feb 2026 00:00:00 GMTRaymond CanzanesePhishingCloudhttps://threatlabs.netskope.com/reports/2026/threat-labs-report-japan-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-japan-2026/This report analyzes the primary cybersecurity risk trends impacting organizations within the Japan region. It addresses the increasing adoption of generative AI (genAI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and genAI platforms.Mon, 02 Feb 2026 00:00:00 GMTNetskope Threat LabsThreat Protectionhttps://threatlabs.netskope.com/blog/2026/01/moltbot-clawdbot-the-risky-personal-ai-agent-and-netskope-protection/https://threatlabs.netskope.com/blog/2026/01/moltbot-clawdbot-the-risky-personal-ai-agent-and-netskope-protection/Update 2026-01-30 (18:00Z): Following its second rename this week, ClawdBot is now known as OpenClaw. We have updated the paths in this guide to match the latest changes. Background OpenClaw, prev…Wed, 28 Jan 2026 00:00:00 GMTGianpietro CutoloAIhttps://threatlabs.netskope.com/reports/2026/threat-labs-report-canada-2026/https://threatlabs.netskope.com/reports/2026/threat-labs-report-canada-2026/This report analyzes the primary cybersecurity risk trends impacting organizations within Canada. It addresses the increasing adoption of generative AI (genAI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and genAI platforms.Tue, 27 Jan 2026 00:00:00 GMTNetskope Threat LabsThreat Protectionhttps://threatlabs.netskope.com/reports/2026/cloud-and-threat-report-2026/https://threatlabs.netskope.com/reports/2026/cloud-and-threat-report-2026/This report analyzes the primary cybersecurity risk trends impacting organizations worldwide. It addresses the increasing adoption of generative AI (genAI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and genAI platforms.Mon, 05 Jan 2026 00:00:00 GMTNetskope Threat LabsGenerative AIThreat Protectionhttps://threatlabs.netskope.com/blog/2025/11/shai-hulud-2-0-aggressive-automated-one-of-fastest-spreading-npm-supply-chain-attacks-ever-observed/https://threatlabs.netskope.com/blog/2025/11/shai-hulud-2-0-aggressive-automated-one-of-fastest-spreading-npm-supply-chain-attacks-ever-observed/Shai-Hulud 2.0 is an aggressive, automated NPM supply chain attack. Get the full analysis on credential theft, GitHub backdoors, and IOCs.Wed, 26 Nov 2025 00:00:00 GMTGianpietro CutoloMalwareSupply ChainCredential Thefthttps://threatlabs.netskope.com/blog/2025/11/the-future-of-malware-is-llm-powered/https://threatlabs.netskope.com/blog/2025/11/the-future-of-malware-is-llm-powered/Large language models (LLMs) have rapidly transformed industries, becoming invaluable tools for automation, coding assistance, and research. However, their widespread adoption raises several…Thu, 20 Nov 2025 00:00:00 GMTJan Michael AlcantaraAIMalwarehttps://threatlabs.netskope.com/reports/2025/threat-labs-report-manufacturing-2025/https://threatlabs.netskope.com/reports/2025/threat-labs-report-manufacturing-2025/The 2025 Netskope Threat Labs Manufacturing report details the increasing adoption of generative AI, trends in data policy violations, and malware distribution via cloud applications observed over the last year.Tue, 04 Nov 2025 00:00:00 GMTNetskope Threat LabsThreat ProtectionManufacturinghttps://threatlabs.netskope.com/blog/2025/10/redtiger-new-red-teaming-tool-in-the-wild-targeting-gamers-and-discord-accounts/https://threatlabs.netskope.com/blog/2025/10/redtiger-new-red-teaming-tool-in-the-wild-targeting-gamers-and-discord-accounts/Gamers are a hot target for infostealers these days. This blog post is the second we have published this month about an infostealer targeting gamers, with the previous one describing a Pytho…Thu, 23 Oct 2025 00:00:00 GMTJan Michael AlcantaraMalwareCredential Thefthttps://threatlabs.netskope.com/blog/2025/10/new-python-rat-targets-gamers-via-minecraft/https://threatlabs.netskope.com/blog/2025/10/new-python-rat-targets-gamers-via-minecraft/During threat hunting activities, Netskope discovered a new, multi-function Python RAT that leverages the Telegram Bot API as a command and control (C2) channel, allowing attackers to exfilt…Wed, 22 Oct 2025 00:00:00 GMTNikhil HegdeCloudhttps://threatlabs.netskope.com/reports/2025/threat-labs-report-asia-2025/https://threatlabs.netskope.com/reports/2025/threat-labs-report-asia-2025/This report analyzes the primary cybersecurity risk trends impacting organizations within the Asia region. It addresses the increasing adoption of generative AI (genAI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and genAI platforms.Sun, 19 Oct 2025 00:00:00 GMTNetskope Threat LabsCloud SecurityGenerative AIhttps://threatlabs.netskope.com/blog/2025/09/securing-llm-superpowers-the-invisible-backdoors-in-mcp/https://threatlabs.netskope.com/blog/2025/09/securing-llm-superpowers-the-invisible-backdoors-in-mcp/In the first two parts (1, 2) of this series, we broke down how the Model Context Protocol (MCP) works and explored attacks like tool poisoning and cross-server tool shadowing. In this pos…Wed, 24 Sep 2025 00:00:00 GMTGianpietro CutoloAIhttps://threatlabs.netskope.com/reports/2025/threat-labs-report-retail-2025/https://threatlabs.netskope.com/reports/2025/threat-labs-report-retail-2025/This report analyzes the primary cybersecurity risk trends impacting organizations within the Retail sector. It addresses the increasing adoption of generative AI (genAI) tools and their associated data security challenges. Furthermore, it highlights the growing number of data policy violations, where sensitive information is increasingly being leaked through unauthorized cloud services, personal applications, and genAI platforms.Tue, 23 Sep 2025 00:00:00 GMTNetskope Threat LabsThreat ProtectionRetail & Hospitalityhttps://threatlabs.netskope.com/blog/2025/09/securing-llm-superpowers-when-tools-turn-hostile-in-mcp/https://threatlabs.netskope.com/blog/2025/09/securing-llm-superpowers-when-tools-turn-hostile-in-mcp/In Part 1 of this blog series, we explored the architecture, capabilities, and risks of the Model Context Protocol (MCP). In this post, we will focus on two attack vectors in the MCP ecosyst…Wed, 03 Sep 2025 00:00:00 GMTGianpietro CutoloAIhttps://threatlabs.netskope.com/blog/2025/08/dns-tunneling-the-blind-spot-in-your-network-security-strategy/https://threatlabs.netskope.com/blog/2025/08/dns-tunneling-the-blind-spot-in-your-network-security-strategy/The Domain Name System (DNS) is a critical component of internet infrastructure, responsible for translating human-readable domain names into IP addresses. However, the ubiquitous nature and…Tue, 26 Aug 2025 00:00:00 GMTHubert LinMalwarehttps://threatlabs.netskope.com/reports/2025/threat-labs-report-australia-2025/https://threatlabs.netskope.com/reports/2025/threat-labs-report-australia-2025/This report examines the major cybersecurity risk trends affecting organizations across Australia. It covers the growing adoption of genAI tools and the data security challenges that accompany them, as well as the rising data policy violations involving sensitive data that is increasingly leaked through unapproved cloud services, personal apps, and genAI platforms. Additionally, it highlights the rise of phishing and the distribution of malware via cloud applications.Mon, 25 Aug 2025 00:00:00 GMTNetskope Threat LabsThreat Protectionhttps://threatlabs.netskope.com/blog/2025/08/securing-llm-superpowers-navigating-the-wild-west-of-mcp/https://threatlabs.netskope.com/blog/2025/08/securing-llm-superpowers-navigating-the-wild-west-of-mcp/The Model Context Protocol (MCP) is a standardized framework that enables large language models (LLMs) to interact with external tools, APIs, and data sources. While MCP offers powerful inte…Wed, 13 Aug 2025 00:00:00 GMTGianpietro CutoloMalwareAISupply Chainhttps://threatlabs.netskope.com/blog/2025/08/netskope-beam-open-source-detector-for-supply-chain-compromise/https://threatlabs.netskope.com/blog/2025/08/netskope-beam-open-source-detector-for-supply-chain-compromise/Netskope Threat Labs is pleased to announce the release of a new open-source tool that detects supply chain attacks. Our new tool, Behavioral Evaluation of Application Metrics (BEAM), requires no endp…Thu, 07 Aug 2025 00:00:00 GMTColin EstepAI