Datadog Security Labs (@securitylabs.datadoghq.com)

Datadog Security Labs

@securitylabs.datadoghq.com

Read our Security Labs blog: https://securitylabs.datadoghq.com Subscribe to our monthly newsletter: https://securitylabs.datadoghq.com/newsletters/

637 followers 36 following74 posts

Datadog Security Labs

@securitylabs.datadoghq.com

Jev as a judge: How counterfeit policy steers Jev securitylabs.datadoghq.com/articles/jev... by @frichetten.com and Feras Al-Kassar

securitylabs.datadoghq.comJev as a judge: How counterfeit policy steers Jev | Datadog Security LabsWe evaluate Jev's prompt injection detection and show how counterfeit classification policies can steer its decisions and bypass LangChain's tool-risk gating.

Datadog Security Labs

@securitylabs.datadoghq.com

Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access securitylabs.datadoghq.com/articles/bey... By Martin McCloskey

securitylabs.datadoghq.comBeyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access | Datadog Security LabsIn this post, we share LLM-specific validation patterns that attackers use to test exposed AWS credentials for Amazon Bedrock access.

Datadog Security Labs

@securitylabs.datadoghq.com

Guarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals securitylabs.datadoghq.com/articles/kub... by Rory McCune (@mccune.org.uk)

securitylabs.datadoghq.comGuarding the gates: Assessing dangerous permissions granted to Kubernetes built-in principals | Datadog Security LabsWe analyzed RBAC bindings across over 65,000 Kubernetes clusters to find dangerous permissions granted to system:anonymous, system:unauthenticated, and system:authenticated.

Datadog Security Labs

@securitylabs.datadoghq.com

Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4) securitylabs.datadoghq.com/articles/ope...

securitylabs.datadoghq.comDiscovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4) | Datadog Security LabsDatadog Security Labs discovered GHSA-632h-h47v-g4x4, a vulnerability in OpenCode's upgrade endpoint that, under certain conditions, allowed malicious webpages to execute code on developers' machines.

Datadog Security Labs

@securitylabs.datadoghq.com

16 Sept

Mapping out your unknown: A threat hunter’s guide to GitHub securitylabs.datadoghq.com/articles/map...

securitylabs.datadoghq.comMapping out your unknown: A threat hunter’s guide to GitHub | Datadog Security LabsIn this post, we walk through different threats to GitHub and how to detect them.

Datadog Security Labs

@securitylabs.datadoghq.com

4 Aug

An npm worm has spread, compromising hundreds of popular npm packages to spread malware. Read our analysis and the list of compromised packages: securitylabs.datadoghq.com/articles/npm...

securitylabs.datadoghq.comWorm compromises hundreds of popular npm packages | Datadog Security LabsOn August 4, 2026, several popular npm packages, including 'keyv', were compromised to deliver malware.

Datadog Security Labs

@securitylabs.datadoghq.com

14 July

Compromised AsyncAPI npm packages: inside a CI supply-chain attack securitylabs.datadoghq.com/articles/com...

securitylabs.datadoghq.comCompromised AsyncAPI npm packages: inside a CI supply-chain attack | Datadog Security LabsOn July 14, 2026, four npm packages in the @asyncapi namespace, totaling over 3 million weekly downloads, were compromised to deliver credential-stealing malware. We investigate how the attack unfolde...

Datadog Security Labs

@securitylabs.datadoghq.com

10 July

Not-so-anonymous telemetry: The @injectivelabs/sdk-ts backdoor securitylabs.datadoghq.com/articles/not...

securitylabs.datadoghq.comNot-so-anonymous telemetry: The @injectivelabs/sdk-ts backdoor | Datadog Security LabsA malicious commit disguised as SDK telemetry briefly compromised @injectivelabs/sdk-ts, exfiltrating wallet mnemonics and private keys.

Datadog Security Labs

@securitylabs.datadoghq.com

8 July

Coordinated GitHub API enumeration and access token abuse securitylabs.datadoghq.com/articles/coo...

securitylabs.datadoghq.comCoordinated GitHub API enumeration and access token abuse | Datadog Security LabsDatadog Security Research has tracked multiple coordinated campaigns enumerating GitHub organizations, repositories, and users through the public GitHub API, abusing leaked access tokens, and cloning ...

Datadog Security Labs

@securitylabs.datadoghq.com

26 June

Introducing GuardDog 3.0: A new rules engine, transparent sandboxing, and more securitylabs.datadoghq.com/articles/gua...

Datadog Security Labs

@securitylabs.datadoghq.com

24 June

Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond securitylabs.datadoghq.com/articles/beh...

securitylabs.datadoghq.comBehind the console: An AiTM phishing kit harvesting AWS console credentials and beyond | Datadog Security LabsDatadog Security Research investigates a June 2026 adversary-in-the-middle phishing campaign that cloned the AWS console login page to harvest victim credentials and multi-factor authentication codes.

Datadog Security Labs reposted

Hacking the Cloud

@hackingthe.cloud

17 June

One Entra Agent ID blueprint can authenticate every agent identity tied to it. If that blueprint credential leaks, the blast radius can span agents, users, permissions, and even tenants. securitylabs.datadoghq.com/articles/age...

Datadog Security Labs

@securitylabs.datadoghq.com

24 June

Mapping out your unknown: A threat hunter’s guide to Salesforce securitylabs.datadoghq.com/articles/map...

securitylabs.datadoghq.comMapping out your unknown: A threat hunter’s guide to Salesforce | Datadog Security LabsIn this post, we walk through different threats to Salesforce and how to detect them.

Datadog Security Labs

@securitylabs.datadoghq.com

23 June

Detecting the Klue supply chain attack in Salesforce instances securitylabs.datadoghq.com/articles/det...

securitylabs.datadoghq.comDetecting the Klue supply chain attack in Salesforce instances | Datadog Security LabsWe summarize the Klue supply chain attack and provide detection guidance for Salesforce environments monitored by Datadog Cloud SIEM.

Datadog Security Labs

@securitylabs.datadoghq.com

18 June

Entra Agent ID: Inside a cross-tenant agent compromise securitylabs.datadoghq.com/articles/age... by @siigil.bsky.social

securitylabs.datadoghq.comEntra Agent ID: Inside a cross-tenant agent compromise | Datadog Security LabsContinuing our Agent ID series, this post demonstrates how a privileged agent could be compromised through its third-party blueprint. This leads to a cross-tenant incident similar to Midnight Blizzard...

Datadog Security Labs

@securitylabs.datadoghq.com

17 June

Holding blobs for ransom: Four methods for Azure Storage ransomware securitylabs.datadoghq.com/articles/azu...

securitylabs.datadoghq.comHolding blobs for ransom: Four methods for Azure Storage ransomware | Datadog Security LabsThis post explores four vectors for threat actors to abuse Azure Storage to maliciously encrypt victim blobs, including step-by-step explanations and event codes for detection.

Datadog Security Labs

@securitylabs.datadoghq.com

11 June

Entra Agent ID: The blueprint blast radius securitylabs.datadoghq.com/articles/age... by @siigil.bsky.social

securitylabs.datadoghq.comEntra Agent ID: The blueprint blast radius | Datadog Security LabsEntra Agent ID is an extension of Entra's application model that provides identities for AI agents. Unlike applications, the agent identity model allows linking a single app registration (blueprint) t...

Datadog Security Labs

@securitylabs.datadoghq.com

2 June

Freshly out on the Datadog Engineering blog! From single pull requests to full software packages: Detecting malicious code at scale www.datadoghq.com/blog/enginee...

datadoghq.comScaling malicious code detection from pull requests to the software supply chain | DatadogDatadog scaled malicious code detection from pull requests to dependency packages using stacked LLM evaluations and agentic investigation.

Datadog Security Labs

@securitylabs.datadoghq.com

1 June

The May edition of the Datadog Security Digest is out, with some great content from the community on cloud security, AI security and supply chain security! securitylabs.datadoghq.com/newsletters/...

securitylabs.datadoghq.comMalicious AI skills, compromised npm packages, and 100+ intentionally vulnerable AWS environments | Datadog Security LabsThis month's edition covers supply-chain attacks on npm packages and GitHub repositories, the release of Pathfinding Labs (100+ intentionally vulnerable AWS environments), and research on malicious AI...

Datadog Security Labs

@securitylabs.datadoghq.com

13 May

IDE-Shepherd is now on the VS Code Marketplace and Open VSX. Real-time protection against malicious extensions and supply chain attacks in VS Code and Cursor. github.com/DataDog/IDE-...

github.comGitHub - DataDog/IDE-SHEPHERD-extension: A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDEA VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE - DataDog/IDE-SHEPHERD-extension

Datadog Security Labs

@securitylabs.datadoghq.com

31 Mar

Compromised axios npm package delivers cross-platform RAT securitylabs.datadoghq.com/articles/axi...

securitylabs.datadoghq.comCompromised axios npm package delivers cross-platform RAT | Datadog Security LabsAn attacker hijacked an axios maintainer's npm account to publish malicious releases that deliver a cross-platform RAT.

Datadog Security Labs

@securitylabs.datadoghq.com

25 Mar

LiteLLM compromised on PyPI: Tracing the March 2026 TeamPCP supply chain campaign securitylabs.datadoghq.com/articles/lit...

Datadog Security Labs

@securitylabs.datadoghq.com

11 Mar

When an AI agent came knocking: Catching malicious contributions in Datadog’s open source repos www.datadoghq.com/blog/enginee...

datadoghq.comWhen an AI agent came knocking: Catching malicious contributions in Datadog’s open source repos | DatadogLearn how Datadog detected and resolved issues from hackerbot-claw, an AI-powered automated attack campaign.

Datadog Security Labs

@securitylabs.datadoghq.com

9 Mar

Behind the console: Active phishing campaign targeting AWS console credentials securitylabs.datadoghq.com/articles/beh...

securitylabs.datadoghq.comBehind the console: Active phishing campaign targeting AWS console credentials | Datadog Security LabsDatadog Security Research identified an active adversary-in-the-middle (AiTM) phishing campaign targeting AWS Console credentials via typosquatted domains that mimic AWS infrastructure.

Datadog Security Labs

@securitylabs.datadoghq.com

27 Feb

Hook, line, and vault: A technical deep dive into the 1Phish kit targeting 1Password users securitylabs.datadoghq.com/articles/hoo...

securitylabs.datadoghq.comHook, line, and vault: A technical deep dive into the 1Phish kit | Datadog Security LabsWe analyze the evolution of the 1Phish phishing kit from a basic credential harvester into an MFA-aware, multi-stage phishing kit targeting 1Password users.

Datadog Security Labs

@securitylabs.datadoghq.com

11 Feb

Tech impersonators: ClickFix and MacOS infostealers securitylabs.datadoghq.com/articles/tec...

Datadog Security Labs

@securitylabs.datadoghq.com

10 Feb

Tech impersonators: ClickFix and MacOS infostealers securitylabs.datadoghq.com/articles/tec...

securitylabs.datadoghq.comTech impersonators: ClickFix and MacOS infostealers | Datadog Security LabsDatadog identified an active campaign employing fake GitHub repositories impersonating software companies and leveraging the ClickFix initial access technique to deliver macOS infostealers.

Datadog Security Labs

@securitylabs.datadoghq.com

26 Jan

IDE-SHEPHERD is a new open source project to identify malicious VSCode and Cursor extensions at runtime Announcement: securitylabs.datadoghq.com/articles/ide... GitHub: github.com/DataDog/IDE-...

securitylabs.datadoghq.comIntroducing IDE-SHEPHERD: Your shield against threat actors lurking in your IDE | Datadog Security LabsIDE-SHEPHERD is an open-source IDE security extension that provides real-time monitoring and protection for VS Code and Cursor. It intercepts malicious process executions, monitors network activity, a...

Datadog Security Labs

@securitylabs.datadoghq.com

9 Jan

Decoding the GitHub recommendations for npm maintainers securitylabs.datadoghq.com/articles/dec... by @phrawzty.com

securitylabs.datadoghq.comDecoding the GitHub recommendations for npm maintainers | Datadog Security LabsThis blog post explores the rationale and implementation behind GitHub's security recommendations for npm maintainers following numerous high-profile supply-chain incidents. It details how hardening p...

Datadog Security Labs

@securitylabs.datadoghq.com

17 Dec 2025

Introducing Pathfinding.cloud, a library of privilege escalation paths in AWS securitylabs.datadoghq.com/articles/int... by @sethsec.bsky.social

Datadog Security Labs

@securitylabs.datadoghq.com

10 Dec 2025

Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users securitylabs.datadoghq.com/articles/inv...

Datadog Security Labs

@securitylabs.datadoghq.com

4 Dec 2025

CVE-2025-55182 (React2Shell): Remote code execution in React Server Components and Next.js securitylabs.datadoghq.com/articles/cve...

Datadog Security Labs

@securitylabs.datadoghq.com

4 Dec 2025

Update: A PoC was made available on GitHub by a security engineer. Our post was updated to reflect this new information, along with an illustration of how the exploit works.

Datadog Security Labs

@securitylabs.datadoghq.com

26 Nov 2025

The November Datadog Security Digest is out! • A 2025 look at real-world Kubernetes version adoption by @mccune.org.uk • Datadog threat roundup: Top insights for Q3 2025 • Analyzing network traffic from coding agents ... and more! securitylabs.datadoghq.com/newsletters/...

securitylabs.datadoghq.com2025 threat reports, Kubernetes version adoption, and how attackers use AI | Datadog Security LabsThis edition covers 2025 threat reports, Kubernetes version adoption, and how attackers use AI

Datadog Security Labs

@securitylabs.datadoghq.com

26 Nov 2025

A few days ago, a new piece of malware started spreading in npm, compromising and backdooring hundreds of legitimate npm packages and GitHub users. Read the analysis from our security research team: securitylabs.datadoghq.com/articles/sha...

Datadog Security Labs

@securitylabs.datadoghq.com

6 Nov 2025

MUT-4831: Trojanized npm packages deliver Vidar infostealer malware securitylabs.datadoghq.com/articles/mut...

securitylabs.datadoghq.comMUT-4831: Trojanized npm packages deliver Vidar infostealer malware | Datadog Security LabsAnalysis of a threat actor campaign targeting Windows users with Vidar infostealer malware via malicious npm packages

Datadog Security Labs

@securitylabs.datadoghq.com

5 Nov 2025

A runtime security approach to detecting supply chain attacks securitylabs.datadoghq.com/articles/sup... by Lorenzo Susini, Detection Engineer

securitylabs.datadoghq.comA runtime security approach to detecting supply chain attacks | Datadog Security LabsDetecting software supply chain attacks through runtime security.

Datadog Security Labs

@securitylabs.datadoghq.com

5 Nov 2025

In this post, Lorenzo Susini demonstrates that runtime security can be valuable to identify software supply chain attacks. As an example, this is the process tree of a malicious npm package harvesting credentials

Datadog Security Labs

@securitylabs.datadoghq.com

3 Nov 2025

Datadog threat roundup: Top insights for Q3 2025 securitylabs.datadoghq.com/articles/202...

securitylabs.datadoghq.comDatadog threat roundup: Top insights for Q3 2025 | Datadog Security LabsThreat insights from Datadog Security Labs for Q3 2025.

Datadog Security Labs

@securitylabs.datadoghq.com

30 Oct 2025

Learnings from recent npm supply chain compromises securitylabs.datadoghq.com/articles/lea...

securitylabs.datadoghq.comLearnings from recent npm supply chain compromises | Datadog Security LabsA look at recent npm supply chain compromises and how we can learn from them to better prepare for future incidents.

Datadog Security Labs

@securitylabs.datadoghq.com

30 Oct 2025

The October edition of the Datadog Security Digest is out! securitylabs.datadoghq.com/newsletters/...

securitylabs.datadoghq.comThe State of Cloud Security, MCP Risks, and Azure vulnerabilities | Datadog Security LabsThis edition covers The State of Cloud Security, MCP Risks, and Azure vulnerabilities

Datadog Security Labs

@securitylabs.datadoghq.com

28 Oct 2025

CoPhish: Using Microsoft Copilot Studio as a wrapper for OAuth phishing securitylabs.datadoghq.com/articles/cop... by @siigil.bsky.social

securitylabs.datadoghq.comCoPhish: Using Microsoft Copilot Studio as a wrapper for OAuth phishing | Datadog Security LabsCopilot Studio links look benign, but they can host content to redirect users to arbitrary URLs. In this post, we document a method by which a Copilot Studio agent's login settings can redirect a user...

Datadog Security Labs

@securitylabs.datadoghq.com

8 Oct 2025

Our State of Cloud Security 2025 study is out! www.datadoghq.com/state-of-clo... • On AWS, 40% of organizations leverage data perimeters • 11% of Google Cloud GKE and 23% of Google Cloud VMs are overprivileged • On Azure, 1.3% of storage containers are public, 58% proactively block public access

datadoghq.comState of Cloud Security | DatadogFor our 2025 report, we analyzed AWS, Google Cloud, and Azure data from thousands of organizations to understand the latest trends in cloud security posture.

Datadog Security Labs

@securitylabs.datadoghq.com

2 Oct 2025

The September edition of the Datadog Security Digest is out: securitylabs.datadoghq.com/newsletters/...

securitylabs.datadoghq.comnpm supply chain attacks, Amazon Bedrock security, and MCP vulnerabilities | Datadog Security LabsThis edition covers three major supply chain attacks targeting npm, two MCP security vulnerabilities, and multiple posts related to the Amazon Bedrock service.

Datadog Security Labs

@securitylabs.datadoghq.com

5 Sept 2025

In case you missed it, the August edition of the Datadog Security Digest went out last week! securitylabs.datadoghq.com/newsletters/...

securitylabs.datadoghq.comQ2 threat report, prompt injection, and fwd:cloudsec Europe | Datadog Security LabsThis edition covers Datadog's Q2 threat report, new cloud security research, AI security vulnerabilities, application security findings, and upcoming community events

Datadog Security Labs

@securitylabs.datadoghq.com

26 Aug 2025

CVE-2025-52882: WebSocket authentication bypass in Claude Code extensions (patched) securitylabs.datadoghq.com/articles/cla... Zander Mackie

securitylabs.datadoghq.comCVE-2025-52882: WebSocket authentication bypass in Claude Code extensions | Datadog Security LabsA critical vulnerability in older versions of the Claude Code for Visual Studio Code (VS Code) and other IDE extensions allowed malicious websites to connect to unauthenticated local WebSocket servers...

Datadog Security Labs

@securitylabs.datadoghq.com

21 Aug 2025

MCP vulnerability case study: SQL injection in the Postgres MCP server. Comes with a full reproducible proof-of-concept securitylabs.datadoghq.com/articles/mcp... by Santiago Mola

securitylabs.datadoghq.comMCP vulnerability case study: SQL injection in the Postgres MCP server | Datadog Security LabsLearn how vulnerability in Anthropic's reference Postgres MCP server allowed us to bypass teh read-only restriction and execute arbitrary SQL statements.

Datadog Security Labs

@securitylabs.datadoghq.com

20 Aug 2025

Enumerating AWS the quiet way: CloudTrail-free discovery with Resource Explorer by @frichetten.com securitylabs.datadoghq.com/articles/enu...

securitylabs.datadoghq.comEnumerating AWS the quiet way: CloudTrail-free discovery with Resource Explorer | Datadog Security LabsDiscover how attackers could quietly enumerate AWS resources via Resource Explorer, and how Datadog and AWS worked together to close the visibility gap.

Datadog Security Labs

@securitylabs.datadoghq.com

31 July 2025

The July edition of the Datadog Security Digest is out! securitylabs.datadoghq.com/newsletters/... • Cloud image investigator by @sethsec.bsky.social • Our top picks for Black Hat / DEF CON • A benchmark for LLM coding accuracy and security • Malicious Homebrew installation campaign .. and more

securitylabs.datadoghq.comPreparing for Hacker Summer Camp and a new cloud image investigator | Datadog Security LabsThis month’s digest covers Hacker Summer Camp prep, a new cloud image investigator, and supply-chain vulnerabilities associated with the Open VSX Registry.

Datadog Security Labs

@securitylabs.datadoghq.com

29 July 2025

Datadog guide to Hacker Summer Camp 2025, amd the top 50 talks we're excited about securitylabs.datadoghq.com/articles/hac...

securitylabs.datadoghq.comDatadog guide to Hacker Summer Camp 2025 | Datadog Security LabsGet ready to take on Hacker Summer Camp with our guide on planning, prepping, and schedules for Datadog events.