Expel reports ChainDrop npm worm compromising keyv and cacheable
Attackers hijacked a maintainer's GitHub account, pushed malicious code to keyv and cacheable, and stole npm, GitHub, cloud, and CI/CD credentials via a hidden preinstall script.
See the latest news and media coverage for Expel. We track all announcements, press releases, and industry mentions in real time, all in one place.
Managed detection and response provider
expel.comLast updated
In short: Expel launched the first MDR for the full AI attack surface, introduced its Ruxie AI engine, and debuted a Managed SIEM service.
Attackers hijacked a maintainer's GitHub account, pushed malicious code to keyv and cacheable, and stole npm, GitHub, cloud, and CI/CD credentials via a hidden preinstall script.
Coverage extends to attackers using AI, employees misusing it, and exposure in AI systems, with detections mapped to 13 MITRE ATLAS tactics.
The group accessed a support member's device at DigiCert to steal certificates intended for customers.
It highlights three zero-day vulnerabilities and recommends prioritizing patching for them.
Expel, the human-led, AI-accelerated security provider, today launched Expel Managed SIEM—a co-managed service that puts Expel's expert detection engineers directly inside customers' Microsoft ...
Iran's Revolutionary Guards say any Arab or European country that expels the ambassadors of Israel and the US from its territory will have full authority...
Expel, the leading managed detection and response (MDR) provider, today announced its integration with Google SecOps, Google's cloud-native security operations platform. The integration enables Expel...
Sergei Beliachkov, lead of the cybersecurity department’s team at a fintech company, prevented $2M i...
Track Expel and your other target companies to get real-time alerts and weekly summaries delivered straight to your inbox.
Browse news for competitors to Expel and other trending companies.