The Exploit articles categorized as In The News
-

Autonomous Supply-Chain Worm Compromises Postman, PostHog, Zapier, and 26k Others
By Ryan Chaplin Operating fully autonomously, this new supply-chain malware has compromised Postman, PostHog, Zapier and 26k others. Learn what your organization should do now. December 10, 2025 -

CrowdStrike Fires Insider Who Shared Screens Externally
By Andrew Trexler Though hacker groups claimed to have access to internal systems, CrowdStrike announced they fired an insider who shared external screens with the attackers. December 1, 2025 -

Raxis Chief Technology Officer Brian Tant Featured on WSB-TV Atlanta
By Mark Puckett When WSB-TV Atlanta reached out to for help warning about a scam targeting Atlanta residents in DeKalb County, Raxis CTO Brian Tant jumped to help. November 21, 2025 -

OWASP Top 10 for 2025: What’s New in Web Application Security
By Raxis Research Team The OWASP Top 10 2025 for web applications release candidate was released last week. Take a look at which categories have moved as well as one new category. November 20, 2025 -

The @ctrl/tinycolor NPM Attack: The Brutal Anatomy of a Cascading Supply Chain Breach
By Brian Tant Over 40 major packages were exploited in this malware campaign. Learn what happened and what your organization should do if you have been affected. November 6, 2025 -

Windows Kills Common Offline/Account-less Install Method
By Ryan Chaplin Microsoft Windows recently announced the removal of local-only installs on Windows 11. Raxis’ Ryan Chaplin looks at concerns and possible options. October 17, 2025