research hub

Security research,
plainly explained

New analyses every week — vulnerabilities, exploits, and the attack patterns that matter. What the bug is, who's exposed, what to do about it before Monday.

Shai-Hulud closes the loop: how the worm reached intercom-client in 24 hours
May 4, 2026 Threat intel
Shai-Hulud closes the loop: how the worm reached intercom-client in 24 hours
The Bun runtime is becoming the malware delivery vehicle of 2026
April 30, 2026 Threat intel
The Bun runtime is becoming the malware delivery vehicle of 2026
Team PCP: tracking a six-week supply-chain campaign through Trivy, Checkmarx, Bitwarden, and beyond
April 30, 2026 Threat intel
Team PCP: tracking a six-week supply-chain campaign through Trivy, Checkmarx, Bitwarden, and beyond
Vercel's April 2026 incident: an OAuth-app supply chain in three hops
April 30, 2026 Threat intel
Vercel's April 2026 incident: an OAuth-app supply chain in three hops
The AI agent as confused deputy: a 2026 attack class
April 29, 2026 Analysis
The AI agent as confused deputy: a 2026 attack class
Where AI-IDE threats actually live: telemetry beyond the dark web
April 29, 2026 Analysis
Where AI-IDE threats actually live: telemetry beyond the dark web

Application security research.

ops@keepsecure.io

Quick Links
About ResearchHub Contact
Elsewhere
GitHubLinkedInX / Twitter
RSS

© 2026 keepsecure labs