https://securitylabs.datadoghq.com/rss/feed.xml https://securitylabs.datadoghq.com Datadog Security Labs is the place to read blog content about security research and tooling published by Datadog for the community. 2026-08-04T00:00:00Z https://securitylabs.datadoghq.com/articles/npm-worm-compromises-popular-npm-packages/ 2026-08-04T00:00:00Z On August 4, 2026, several popular npm packages, including 'keyv', were compromised to deliver malware. https://securitylabs.datadoghq.com/articles/coding-agent-project-trust-code-execution-before-first-prompt/ 2026-08-03T00:00:00Z Learn how trusted coding-agent projects can execute repository-controlled code before the first prompt through Codex MCP configuration and Claude Code environment settings. https://securitylabs.datadoghq.com/articles/detection-primitives-for-ebpf-rootkits/ 2026-07-27T00:00:00Z We analyze how VoidLink, LinkPro, and Atomic Arch abuse eBPF helpers to hide from defenders, and show how to detect them at load time, before they can act. https://securitylabs.datadoghq.com/articles/compromised-asyncapi-npm-packages/ 2026-07-14T00:00:00Z On July 14, 2026, four npm packages in the @asyncapi namespace, totaling over 3 million weekly downloads, were compromised to deliver credential-stealing malware. We investigate how the attack unfolded and how to know if you're affected. https://securitylabs.datadoghq.com/articles/not-so-anonymous-telemetry-injectivelabs-sdk-ts-backdoor/ 2026-07-09T00:00:00Z A malicious commit disguised as SDK telemetry briefly compromised @injectivelabs/sdk-ts, exfiltrating wallet mnemonics and private keys. https://securitylabs.datadoghq.com/articles/coordinated-github-api-enumeration/ 2026-07-08T00:00:00Z Datadog Security Research has tracked multiple coordinated campaigns enumerating GitHub organizations, repositories, and users through the public GitHub API, abusing leaked access tokens, and cloning private repositories. https://securitylabs.datadoghq.com/articles/agent-id-protect-detect-respond/ 2026-07-06T00:00:00Z This post continues and concludes our series on Agent ID, by outlining steps that an administrator or security team can take to secure blueprints and agent identities created in their local Entra ID tenant. https://securitylabs.datadoghq.com/articles/backdoors-and-breaches-new-scenarios/ 2026-07-01T00:00:00Z Sharing new scenarios and adaptations to play the Datadog expansion pack of Backdoors & Breaches. https://securitylabs.datadoghq.com/articles/guarddog-3-0-release/ 2026-06-26T00:00:00Z Release of GuardDog 3.0, an open-source tool to identify malicious packages, featuring a new YARA-based rules engine, a risk scoring engine, and built-in sandboxing. https://securitylabs.datadoghq.com/articles/behind-the-console-aws-aitm-phishing-kit-and-beyond/ 2026-06-24T00:00:00Z Datadog Security Research investigates a June 2026 adversary-in-the-middle phishing campaign that cloned the AWS console login page to harvest victim credentials and multi-factor authentication codes. https://securitylabs.datadoghq.com/articles/detecting-the-klue-supply-chain-attack-in-salesforce/ 2026-06-22T00:00:00Z We summarize the Klue supply chain attack and provide detection guidance for Salesforce environments monitored by Datadog Cloud SIEM. https://securitylabs.datadoghq.com/articles/agent-id-inside-agent-compromise/ 2026-06-18T00:00:00Z Continuing our Agent ID series, this post demonstrates how a privileged agent could be compromised through its third-party blueprint. This leads to a cross-tenant incident similar to Midnight Blizzard, since an attacker with control over an agent blueprint can authenticate as any agent associated with that blueprint. https://securitylabs.datadoghq.com/articles/mapping-out-your-unknown-threat-hunters-guide-to-salesforce/ 2026-06-16T00:00:00Z In this post, we walk through different threats to Salesforce and how to detect them. https://securitylabs.datadoghq.com/articles/azure-blob-storage-ransomware-four-methods/ 2026-06-15T00:00:00Z This post explores four vectors for threat actors to abuse Azure Storage to maliciously encrypt victim blobs, including step-by-step explanations and event codes for detection. https://securitylabs.datadoghq.com/articles/agent-id-blueprint-blast-radius/ 2026-06-11T00:00:00Z Entra Agent ID is an extension of Entra's application model that provides identities for AI agents. Unlike applications, the agent identity model allows linking a single app registration (blueprint) to multiple identities and their associated privileges, increasing the potential blast radius of a compromised agent. https://securitylabs.datadoghq.com/articles/case-for-github-actions-security/ 2026-06-02T00:00:00Z GitHub Actions workflows are vulnerable to pwn requests, script injection, and compromised credentials. Here's what's going wrong and what's changing. https://securitylabs.datadoghq.com/articles/cve-2026-31431-copy-fail-exploit-detection-with-agents/ 2026-05-28T00:00:00Z CVE-2026-31431 (Copy Fail) lets any unprivileged user corrupt the Linux page cache via AF_ALG sockets to escalate privileges. This post covers the exploit mechanics and how Datadog Security Research used coding agents to ship a detection content pack in a single session. https://securitylabs.datadoghq.com/articles/unpatchable-kubernetes-vulnerabilities-cve-2021-25740/ 2026-05-21T00:00:00Z A look at how Kubernetes CVE-2021-25740 allows users with EndpointSlice access to redirect traffic via shared ingress and load balancer services. https://securitylabs.datadoghq.com/articles/introducing-pathfinding-labs/ 2026-05-18T00:00:00Z Introducing Pathfinding Labs, a collection of intentionally vulnerable AWS environments for red teamers and blue teamers to deploy, exploit, and use for detection validation. https://securitylabs.datadoghq.com/articles/node-ipc-npm-malware-analysis/ 2026-05-14T00:00:00Z An analysis of backdoored node-ipc npm releases that add an obfuscated credential collection and DNS exfiltration payload to the CommonJS entrypoint. https://securitylabs.datadoghq.com/articles/backdoored-cemu-release-teampcp-supply-chain-campaign/ 2026-05-14T00:00:00Z We investigate how a coordinated supply chain campaign that compromised npm and PyPI packages also backdoored the official Cemu Nintendo Wii U emulator GitHub release, reaching nearly 20,000 Linux users. https://securitylabs.datadoghq.com/articles/shai-hulud-open-source-framework-static-analysis/ 2026-05-13T00:00:00Z A static analysis of the open-sourced Shai-Hulud offensive framework attributed to TeamPCP, covering its credential harvesting, supply chain poisoning, and exfiltration capabilities. https://securitylabs.datadoghq.com/articles/malicious-skills-supply-chain-risks-in-coding-agents-with-dynamic-context/ 2026-05-11T00:00:00Z Learn how malicious Claude Code skills can abuse dynamic context commands to execute before model-level prompt injection defenses can intervene. https://securitylabs.datadoghq.com/articles/kubernetes-security-fundamentals-part-8/ 2026-05-08T00:00:00Z A look at how to secure Kubernetes secrets https://securitylabs.datadoghq.com/articles/dependency-cooldowns/ 2026-04-16T00:00:00Z Understanding npm and the importance of dependency cooldowns. https://securitylabs.datadoghq.com/articles/unpatchable-kubernetes-vulnerabilities-cve-2020-8562/ 2026-04-09T00:00:00Z A look at how Kubernetes CVE-2020-8562 allows attackers to bypass API server proxy protections using DNS rebinding https://securitylabs.datadoghq.com/articles/axios-npm-supply-chain-compromise/ 2026-03-31T00:00:00Z An attacker hijacked an axios maintainer's npm account to publish malicious releases that deliver a cross-platform RAT. https://securitylabs.datadoghq.com/articles/unpatchable-kubernetes-vulnerabilities-cve-2020-8561/ 2026-03-27T00:00:00Z A look at how Kubernetes CVE-2020-8561 works https://securitylabs.datadoghq.com/articles/litellm-compromised-pypi-teampcp-supply-chain-campaign/ 2026-03-24T00:00:00Z On March 24 and 27, 2026, malicious PyPI releases of LiteLLM and Telnyx were published as part of the TeamPCP supply chain campaign. We trace the full campaign from Trivy through npm, Checkmarx, and into PyPI. https://securitylabs.datadoghq.com/articles/copilot-studio-logging-gaps/ 2026-03-10T00:00:00Z During research, we sometimes encounter scenarios that remind us that it's a good idea to trust but verify. In September 2025, we noticed that certain Microsoft Copilot Studio agent settings did not log certain administrative actions related to sharing, authentication, logging, and publication of Copilot Studio agents.