The Shai-Hulud-linked ChainDrop campaign compromised npm package versions including keyv and flat-cache. See affected versions and steps to protect workstations, runners and secrets.
Resources
Blog
Insights, field notes, and practical guidance on off-cloud security.
Google Cloud’s H1 2026 report explains why accounts, SaaS tokens, API keys and configuration secrets must be protected as entry points into cloud systems.
What IBM Trusteer documented about UnregStealer, the Brazilian banking sites it targeted, the data it collected and the response required after browser-session theft.
Dropbox: Lenovo flaw enabled passwordless access
Soclyde Team
The Dropbox–Lenovo incident shows how a spoofed email address and over-trusted identity federation can bypass a cloud account's password.
A password-spraying campaign compromised 78 Microsoft 365 accounts. What ROPC means and which MFA controls small businesses should check.
Dashlane attack: encrypted vaults downloaded
Soclyde Team
Fewer than 20 encrypted Dashlane vaults were downloaded in a brute-force attack. What users and small businesses need to know.
Pass-ta-key attacks on Google-synced passkeys
Soclyde Team
Unit 42 describes three attacks on Google Password Manager synced passkeys in Chrome on Windows, following compromise of the device.
How infostealers bypass Chrome’s ABE protection
Soclyde Editorial Team
VoidStealer and Vidar targeted Chrome’s ABE key using different techniques. What the research establishes and what to do after a suspected infection.
CVE-2026-62911 shows how a mailbox can be hijacked through an authentication flaw, without cracking the user's password.
Passkeys and passwordless authentication reduce phishing risk, but protecting devices and remaining credentials is still essential.
AWS Root Accounts Targeted by Password Spraying
Soclyde Team
Datadog observed password-spraying attempts against AWS root accounts at more than 150 organizations, with no successful login identified.
McKesson has narrowed the scope of its cyber incident and described data potentially involved. Confirmed facts, attacker claims and practical precautions.
Take the next step
Build a calmer password strategy
Have a question about off-cloud security or Soclyde? Let’s talk directly.