Akira Ransomware Threat Actors Observed Targeting Cisco ASA SSL VPNs with Credential Stuffing Attacks

UltraViolet Cyber's TIDE Team analyzes the May 2026 TanStack supply chain attack: how TeamPCP compromised 42 npm packages using chained GitHub Actions exploits, bypassed SLSA provenance verification, and spread a credential-stealing worm to 172 packages in five hours. Get the full breakdown and response guidance.

A new advisory from UltraViolet TIDE exposes CVE-2025-2783, a Chrome zero-day used in an espionage campaign to deploy commercial spyware. Learn how attackers bypassed sandbox protections and how to defend against similar browser-based threats.

A CPUID software compromise delivered STX RAT through trusted tools like CPU-Z and HWMonitor, highlighting the growing risk of software supply chain attacks.