[LIVE WEBINAR] The MCP Backdoor: How Malware Slips In Through Developer Tools
Register now

Filter by

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Koi Research

PromptJacking: The Critical RCEs in Claude Desktop That Turn Questions Into Exploits

Oren Yomtov

,

,

November 5, 2025

Koi Research

PhantomRaven: NPM Malware Hidden in Invisible Dependencies

Oren Yomtov

,

,

October 29, 2025

Koi Research

GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace

Idan Dardikman

,

,

October 18, 2025

Koi Research

TigerJack's Extensions Continue to Rob Developers Blind Across Different Marketplaces

Tuval Admoni

,

,

October 13, 2025

Koi Research

Command Injection Flaw in Framelink Figma MCP Server Puts Nearly 1 Million Downloads at Risk

Lotan Sery

,

Idan Dardikman

,

October 10, 2025

Company News

Embracing a New Domain Name: koi.ai 🪩

Amit Assaraf

,

,

October 4, 2025

Koi Research

MCP Malware Wave Continues: A Remote Shell in Disguise

Tuval Admoni

,

,

September 30, 2025

Koi Research

First Malicious MCP in the Wild: The Postmark Backdoor That's Stealing Your Emails

Idan Dardikman

,

,

September 25, 2025

Koi Research

WhiteCobra's Playbook Exposed: Critical Mistake Reveals 24-Extension Campaign Targeting VS Code and Cursor

Yuval Ronen

,

,

September 13, 2025

Koi Research
Security Insights

Live Updates: Shai-Hulud, The Most Dangerous NPM Breach In History Affecting CrowdStrike and Hundreds of Popular Packages

Idan Dardikman

,

Yuval Ronen

,

September 16, 2025