Latest posts

Research, advisories, detections, and mitigation notes

Info

SecOpsAI Daily Intelligence Brief — 2026-10-31

Verified intelligence and defensive updates for 2026-10-31.

Onyedika Christopher Agada 12 min read 2026-10-31
Threat Intelligence
 Info

Measuring a malicious-package funnel: from 13% to 39% recall at under 0.5% false positives

Public signatures caught 13% of 3,055 confirmed malicious packages. SecOpsAI behaviour rules, built from what they missed, raised that to 39% while flagging under 0.5% of popular packages.

SecOpsAI Threat Research 3 min read 2026-10-10
Original Research Detection Engineering Supply Chain
 Info

Anatomy of a false positive: clearing a critical npm alert in twenty minutes

SecOpsAI scored a benign desktop-assistant release 100/100. A release diff, install-hook review and rule-by-rule explanation cleared it, and exposed two scoring flaws we have now fixed.

SecOpsAI Research 3 min read 2026-10-09
Original Research Detection Engineering Supply Chain
 Critical

Mini Shai-Hulud crosses npm and PyPI: advisory protection for removed artifacts

Mini Shai-Hulud affected npm and PyPI packages, including removed artifacts that now receive source-backed SecOpsAI advisory detections.

SecOpsAI Threat Research 4 min read 2026-05-12
Supply Chain Advisories Detection Engineering Mitigation