Return-Path: <1axbxo0fkrxfmboc9ymiw83eoqb8leqxlwgvde-alvarochf=traceseis.com@bf06.eu1.hubspotemail.net>
Delivered-To: alvarochf@traceseis.com
Received: from cs510.bluehost.com
	by cs510.bluehost.com with LMTP
	id qG3SMB9yD2pVxAEAWiBQxw
	(envelope-from <1axbxo0fkrxfmboc9ymiw83eoqb8leqxlwgvde-alvarochf=traceseis.com@bf06.eu1.hubspotemail.net>)
	for <alvarochf@traceseis.com>; Thu, 21 May 2026 14:59:11 -0600
Return-path: <1axbxo0fkrxfmboc9ymiw83eoqb8leqxlwgvde-alvarochf=traceseis.com@bf06.eu1.hubspotemail.net>
Envelope-to: alvarochf@traceseis.com
Delivery-date: Thu, 21 May 2026 14:59:11 -0600
Received: from bd77e0e.bf06.eu1.hubspotemail.net ([143.244.83.44]:59317)
	by cs510.bluehost.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.99.2)
	(envelope-from <1axbxo0fkrxfmboc9ymiw83eoqb8leqxlwgvde-alvarochf=traceseis.com@bf06.eu1.hubspotemail.net>)
	id 1wQAU2-00000000VlR-3VT8
	for alvarochf@traceseis.com;
	Thu, 21 May 2026 14:59:11 -0600
Received: by 172.16.0.13 with SMTP id a089896hoz74532cxt3su2zqkgaibarhznuwa3kxjc;
        Thu, 21 May 2026 20:58:59 GMT
DKIM-Signature: v=1; s=hs2; d=bf06.eu1.hubspotemail.net; 
        i=@bf06.eu1.hubspotemail.net; 
        h=sender:from:from:reply-to:to:to:cc:cc:subject:subject:list-unsubscribe:list-id:form-sub:feedback-id:list-unsubscribe-post; 
        a=rsa-sha256; c=relaxed/relaxed; 
        bh=lK59W3+HSJb6D0KqS3umeFI9VJuDFWf+zZxweL6JwN8=; 
        b=R3aOnG/2vIzFcySm2tk0OCbQuFaMeeZB62TsnlCG60H3GvoFBx3Es+063udQG5
         qgohdKO1pC7P4nyUGuEHtpIultO7+dcePJKRYz3QaIyk0H9CiKEq9x4ZLQpOud4
         KxHnEx7BeEYh5TifZ2PAHspiNvyu1+pAylltIU4PviuiNosAr1DSoRZzOZZkpz0
         vfh7/ONhq9WfxznPM4mrYxHt6S7nMlkxzEkom6MejD0DxBhuLP2hrT5Sqrn76OW
         nW74Ys1Ac2MGdZSUeHEky8o/msgRMCFnyOpGyVAw1h1J7AZGcb96lRfstSvI/eE
         XZNOkPOmB3RAQPCVDPKKOQkxPlyg==; q=dns/txt; t=1779397139; 
        x=1779659939;
DKIM-Signature: v=1; s=hs1-26076760; d=aikido.dev; i=@aikido.dev; 
        h=sender:from:from:reply-to:to:to:cc:cc:subject:subject:list-unsubscribe:list-id:form-sub:feedback-id:list-unsubscribe-post; 
        a=rsa-sha256; c=relaxed/relaxed; 
        bh=lK59W3+HSJb6D0KqS3umeFI9VJuDFWf+zZxweL6JwN8=; 
        b=onfWuhTazxnY7dHausag8UBk1VhSyNP7bV9MPDOrXtfzUpw/UhB5UqbVS4Ra3+
         g5I3hfqBzE/WE9EOOHh0TClJrQzlJW0MpHaM9tA9tj9t9U6esMtTBaTqZzPhqnl
         t4zwjxCFAvoCVpKY72SBxnEFwX55cXLyNWeZNpwxTs+yxjKBiUvMui8D6VZrJN8
         RXSB3bHXWfsHFGxj8j014ho3hDhOLHLj+qhqxrY+pfzehYcfrLwV5p5zBa/a6wR
         /GE+izjYE5Jd7kUFWnfmzAo1I66T4YIXmMIxkkB69rUouGQHt3VwuEG18KPiwHJ
         EGGOkTjMp9M/NEwdeNkSVSKqZSyQ==; q=dns/txt; t=1779397139; 
        x=1779659939;
X-HS-Cid: 1axe52qbgvjhtzoi976t6onqb9mqpg59sngey6
List-Unsubscribe: <mailto:1axc0jk1uvqi9km95dgc0fxpvnaty51riywp8i-alvarochf=traceseis.com@bf06.eu1.hubspotemail.net?subject=unsubscribe>, <https://hs-26076760.s.hubspotemail-eu1.net/subscription-preferences/v2/unsubscribe-all?data=aM2468cFXVpcW46Zff38JhKRCW5tXrty3fRp_FW94K2yt12bThzW5tmkVf6p7YQgW2hh-KT7T2kKNW1mlNk-2P4hbMW3rWBsH1h-qM5W3rF6TQ3Wcpp1W222gNt76ySQbW8s5MZz8H6qlGW58JKDj76pbWff60Y7c904>
Date: Thu, 21 May 2026 22:58:59 +0200
From: Madeline from Aikido Security <newsletter@aikido.dev>
Reply-To: newsletter@aikido.dev
To: alvarochf@traceseis.com
Message-ID: <1779397138652.249bd249-b085-41f8-8fd9-0ef602989fc8@bf06.eu1.hubspotemail.net>
Subject: Aikido Intel Monthly: GitHub breach, Mini Shai-Hulud, Google API
 Keys
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_216233_1557298128.1779397139323"
X-Report-Abuse-To: abuse@hubspot.com (see
 https://policy.hubspot.com/abuse-complaints)
List-Unsubscribe-Post: List-Unsubscribe=One-Click
Feedback-ID: aeps68q:aicjif3x:aipuz:HubSpot
X-Spam-Status: No, score=1.6
X-Spam-Score: 16
X-Spam-Bar: +
X-Spam-Flag: NO

------=_Part_216233_1557298128.1779397139323
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

In this first edition, we're going to look at a supply chain worm that keep=
s coming back with more friends each time, a Google API token behavior that=
 may cost developers six figures in unexpected bills, and how the loose sec=
urity of VS Code Extensions led to the large GitHub breach this week.

BlackLogo (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR=
2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DyR3lcq-W69sMD-6lZ3nmW6rWYf_46rzzpV71Hd=
l1v947HVk8QF34QydSgW4Y_Sss99DTX3V3vY6g5vl8YTVtn8bF1CHyv1Vj_j7C7J5th-W1k8Jd6=
50QgqRW3pbf8b6Db-gkVmGk_k5zh9nWW58n4V74-BYtNW3r1pzr2pds9SW6PYks15_Yjt7M40_q=
qKqx78N1ltPFWy-S9nW2QF6Qd5SvpDJW193f2n6b20GkW7QpGSz7LbDhtW2ZcRMQ6_KCsCW6hz7=
Ln3cFFLGf6lZWKn04 )

Login (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl=
_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DyR3lcq-W69sMD-6lZ3mNW5jDh0F8K3NBrW4jshXy2s=
FR2jW2VLZPx6r8QQhW6fDLYr1jG88-V7Rn7K4v1FHMW4w5lSt8Cjb28W5XcSQ_16QDRJW1VYFK-=
5N4vDyW3cqVVC2chy5jW6L7c392g1_HvVyKWTW8qk2RpW5WdDS54WnkQCW5-tX4Q8TBR8cVPGBK=
S7b9nKlW6JkSLT65X2gwW7mTHW_76qVJ5W4HRgcC50z91_W8BndGp4wNYMQW1yvGDs86W8sjW5w=
bghY99GK2Gf792Y-C04 )

Aikido Intel Monthly

Hey there,

Yes, we started a newsletter. We know what you=E2=80=99re thinking: a newsl=
etter, in this economy?! It=E2=80=99s brave, bold, and completely original.

No, we aren=E2=80=99t sliding into your inbox with marketing fluff or AI sl=
op. This is a curated monthly digest of breaking supply chain threat resear=
ch, hot takes, and a sprinkle of "here's a checklist we made because we kee=
p seeing people make the same mistake." We promise you=E2=80=99ll either le=
arn or laugh, ideally both.

In this first edition, we're going to look at a supply chain worm that keep=
s coming back with more friends each time, a Google API token behavior that=
 may cost developers six figures in unexpected bills, and how the loose sec=
urity of VS Code Extensions led to the large GitHub breach this week.

The general vibe of May 2026 is =E2=80=9CI Wake Up=E2=80=A6 There=E2=80=99s=
 Another Supply Chain Attack.=E2=80=9D

So let=E2=80=99s get into it. Glad you're here.

=F0=9F=91=BE  The latest malware and vulnerabilities

Mini Shai-Hulud strikes again=E2=80=A6 again! (https://d33CF-04.eu1.hubspot=
links.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DB0=
3lcq-W8wLKSR6lZ3pTW3QhfhB5pq1YcW4JCzfr1gSfGWW2pMNP138VyBxW2ldHck1rYqQsW8cZG=
RK2f2R-CN9lJX1CcBHNyW5-27wg1-2yPYW2ZD0D77CsG7wMSjGCy6bC8RN3_FPfvDYLp6W2tfZp=
12Gc4fLW8SZYd-7HL8DNW2QYLw96v4L2qW85c2bC1PVFvRW6m_CqN2Y20kKW24LqhN7JHYTqN7F=
BTtS-cJrPV9yBs31ppP2KW5wSDN-7fXbVnN4Wjgw4W6nP1W9j3MFy18PqbyW1mQDx41jP2LzW3H=
Dlzl2gtgYfW2xmlJW5WFGFSW3y8B0M4BqbBHW122nZJ8hXnXvN7HkZB6vtJqKVTbrR52tH_T-f3=
yDWn004 )

Mini Shai-Hulud started as a targeted hit on SAP npm packages in late April=
, then PyTorch Lightning on PyPI was hit. Last week, it came back and attac=
ked over 100 packages, including TanStack, Mistral, and UiPath. And, this w=
eek? It hit again! Developer Advocate Mackenzie Jackson sat down with our S=
ecurity Researcher, Charlie Eriksen, the day of the TanStack attack to walk=
 us through what happened (sleep-deprived, mid-incident, the whole thing). =
We have blog posts covering the Shai Hulud recent attacks, including the IO=
Cs and what to rotate if you were affected.

- TanStack and Mistral attack (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK=
+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3lcq-W7Y8-PT6lZ3=
lcW10LX_81c-PyJN9kRcbWFFZLjMdgb23qRY_cV2BRkD8_JnXJW68BjMm3WgFLLW4nDL_p3VVgT=
DVjJXtm62S34qW3P0FQ16NwDwJW6c4Cq76jrJTRW8D0VPZ76fwxCN5sZTWQmBRs_N2Fcxj9pnfs=
nW2f0RSP55thx-W6FdpWD1D5Z0XN7blgMVbwDDrVTdYVP9j3C5JVDK2sc5yNvVjW1GTxZf39Mx6=
rW8qS2BW1T204nW2kk3d-6BDBsdW79yLrN50szPJW3ygvG98PVpB6W7MlSz61LyYmmW2BmrQn5Q=
mXvnN93XmMyLX0m7W32prZ07BhhZydq6Hxs04 )
- antv attack (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VV=
FlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3lcq-W7Y8-PT6lZ3m5W3XP1H56PB_vfW=
6BLHfY6HS6PxVwzP_68q_7C9N502p-NhQJ2MW1gWcVk7HzdwtW1HJp4J5wrrBjW1L1nY_69fH2L=
N8Mz_6zkRhJJW5lNjtr1CwfDGW947t4T3yfpLLN3BC-95xFhkdW4XvdJn5xS1TWW72ts4V6--BF=
TW7lPR3644DWKJMRZBzS-y3KTMg6fYn9CjttW1h0n5m50fr8zW88CF301NgvDZN90wjRHVb8qdW=
69hDmG3Rr-rQW5_6D0k69RrHLN2SJ7_WmD-L_W2ZW81b4XKwSSW1Fhjlj1VqpCcW6GYq_q2BBRP=
qVkBT5L78bzHcf16yF1b04 )
- durabletask attack (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33C=
F-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3lcq-W7Y8-PT6lZ3p6W32wgLt=
6_M6r8W47v5Xv6B1cGzW7mlxh36NQ32vW1G5XMb7h2-5vW3HrSh-5lDJF3W2JZC4P96ZXYjW81-=
yld6hz4z5W4Cc78t7Rp3d-W5jLg9Q4WmRdKW818Qp71ZFwCzW3h9fzM5K74P8W86B8Pl4Mln_7W=
6VLls-1kb0mWN2y6GHZNvVt0W6W4bv_1mr2bHW2bhPNQ5kLNR6W4HCnL28r4rB_W1dp1nl5q1r_=
rW3DV7-71M6JrlW3lzvJr9jPD40N6gJ-PGLx-JPW6Sh5KC1mwDDDW7lcTLr5c0XNxW3h_TNx8--=
pfgW8dCvhM38F_h0W83xPDs1Dkltlf60Y-f204 )

Quick PSA: Aikido has tools to protect your device and applications from su=
pply chain attacks like these (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK=
+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW6lZ3=
lVW2HVwhg4jqQz6VPG1ZB2NNsm0W1_qfk16T1ggLW8yBDTs97sg-6W10fMCV7bGGZkW4HSftr13=
3r6wW95hr8-1Dt-h7W695S5p3fSLm1W5fG7vZ4x34P_W4qK16n67gjx_W2GnYmV601lXqW3Jtgf=
-3sX-B7W1Z_CRd6j-PQRW4S-znN3Yv_hnN3y9WPPJ-K31W5bhBmy6m_gqsW5Yh8Vr3CH5QGW7Xc=
LsZ8K4Yv9W3YKtXH5QRnWQW2zj5Yj8DQmQ5W5mtdTY8FzRmCMZ4YxwjPxV3W8Nhxzl4pwcDgW3M=
3SlF5Lj10gf5fCtY004 ) .

VS Code Extension Marketplace is the Wild West, and GitHub was the latest v=
ictim (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl=
_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW6lZ3lXW4xphfy2J852VW23k-tK4Q=
Nt7pW5xmQnt1RPDBnW98QrfJ5bvLzNW2q2qv86XJPQZW2jrxn98hvGcVW5dvfCK6jVPjLW6q729=
l14HYLBW7FRHx87-NMsKN2YqLGFMRP2FW7dK4dT2Bdb5jN3qdslYP5LFNW1KXfhl8ZL1dcW81Yx=
Yq8bk2WRN2wnLRWn7FLKW6C5vxT1M5qQSW87pkww1kGtPNN4_ZxpW9lb69W5PDBJf7Y0qTsW111=
dxK1dNcjYW33Zl1z8M8TbFW3zHJX97jLRqKVXhV3k4sBJlGW8yk4rz1FR08jf4v35kg04 )

GitHub suffered a major breach this week. The internet was wondering if it =
was from a super-powered Mythos attacker, but in fact, it=E2=80=99s another=
 developer device getting hacked by a compromised extension. We keep seeing=
 malware end up in the VS marketplace because there are limited to no secur=
ity guardrails. GitHub is not the first victim, nor will it be the last.

Google API keys still work after you delete them for over 20 minutes (https=
://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_p=
vbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW6lZ3pCW8Y4GDR5GN4cRVMh5Pj2t5vZ-VfYhYx2NZ=
B-wVLL5Hx6rYj8ZW3lhP6G98mQXfN4GDyCH3rGl6W88lT-k6PYQ07W3hvLn94S-Zq7W40S5y16v=
VrPdW2KrVKZ7JKqf0W2RZKcP8bBbFCW2_YnwL1cqpJWW5cvYPg2g0KwkW21xLmd1SDmp_N3WtMb=
15dkDjW48_8z_8wp1ZbW57C9ry5Ff4PNN5Zb2z8LZnNdW3yS2jz2Hf6djW7YJbtz7q6Gy_N8Jgs=
rBTVXk5W4gwtxh7gTDckW7NYmPy91DhJyVwrs4K6ZP5z8f7dsSCd04 )

When you delete an API key, surely you expect it to stop working immediatel=
y. You know, for security reasons. But, as our Security Researcher Joe Leon=
 discovered, it takes up to 23 minutes for a Google API key to stop working=
 after you delete it. Users have actually been burned by stolen tokens, wit=
h developers being hit with bills ranging from $15,000 to $128,000 from com=
promised Google API keys (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/=
d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dyd5jMY8W50kH_H6lZ3mPN76=
2C6dvPDrPW7rxj802t5Y_fV5DR107kkyTvW8qL_ck6DRjy2W33Csgc6yHJQ9W5X5zyb7lMxJ8W6=
lk89z4mZpWvW5TG0Pw5xZyqpN1RwmSdPnGvKW4JjH5z6B09bYN8fH8J4kBBTbW7rhVK43wx5K1W=
9kXkX-4Ty8d-W6TNXM97bq73rW61pBb66R19bpW6t6yVm46tX__W7q478M2NlZJXW4Tgq0s2cPn=
3CW5M-vw-3Xns34W403BDd4vN9Q6W2Ps5SD1LKGyNVlXn1y6PX-7PW5y9q7t2RYjW8W2BwG1z17=
DzH0W8H3jRQ2Nld2jW6wbLcm6r-1csVTM2bX8zZ8v-W6PTgHQ5qVN5xW6zjZmK5C5ynsW21X2rp=
4wHtjxN24wpkXn82p3Vy62M14RP06jdPVlrq04 ) being used to hammer Gemini endpoi=
nts. This might be a problem even if your key is deleted, and Joe=E2=80=99s=
 research explains why.

=F0=9F=92=A1  What we've been thinking about lately

Is bug bounty dead? =F0=9F=92=80 (https://d33CF-04.eu1.hubspotlinks.com/Ctc=
/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW6=
lZ3kMW6ydXGJ1Pz45nW2_FnP325CqvPW8M9qPc3JmKCLW4RHz8Z5PLzl6VrzxSt6WY3k3W5GfF8=
93wjhb_W97Mb91882g62W7mH1bx9jzyvYW3K2wN884PnvGW1ryYtK6RRkqfW8GFpZ-2mBthjW8M=
fdhw12rrRJW3K_3p42kQZ75VBPRql2Y4HcZW1yDgLM2GtxrHVcvM776g1qWQW7tpcbg3H3VLDW3=
Sc0lz2SqQ0qW7s8rrY1g3vBmW35zQ8S1gvtsxMpRNCzptpQcN1fyRGkS2fJbW8SK-1b1CZ044Vn=
KwjV204gNnf6SGBB204 )

Bug bounty programs are having a bit of a moment, and it=E2=80=99s not enti=
rely a good one. Aikido=E2=80=99s Mackenzie Jackson, sat down with Casey El=
lis, co-founder of Bugcrowd (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+1=
13/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63lcq-W6N1vHY6lZ3ph=
W78p3Q03YRTygW8nFgWg1KJFYrW6GcQRT34BPmYV4PW8d7zhHSSW5cwdX-4dd45MW1lD68F3plp=
M_W8nQWgM33sPk2W1TTzjc17ltsmW4TWJSW3PNvrBW3LnHwS3VnVgjW34_qTf3YHlBNW7l25cl5=
4Cdk_V3xF4M489sQWW2S5nlD2mjtXPW34DmB847xzFMW4b3s4n4Dc8RbW1ccwfw4CHh2jW7lkj0=
l2kRhT_W8PdFPn7GxL6zW7N0KVC91k9PGW3lXbZN1qqHkkW2tnKg28--vvWf58wnLg04 ) , wh=
o believes that the problem isn't new, the math has just gotten worse. So, =
is bug bounty dead or not? (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+11=
3/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW6lZ3pdW=
6Gg0TZ6h6kLKW7DDDS26RDhDmN2LY8l3TjlhJW2j36XB580Zh6W86_B3N4F28j4W5PQRyx6njFf=
pW6bg1V574NJjjW7NY6jN6PWPGqW7LVM-k62V8HtW2GN09R6DryQ4W2-7b5G647xXJW2tXXfx27=
RF6_W36Sqpk8GFbqHVpVKTG3Vx3XRW1t1nxC25pgxqW8VFKmB72QzmJW99XljQ5k53RXV_tSpg6=
-QndmN8gP6s5tb0_JW6BD-sp34StywW5km5y822zglBW63ZXb36KxvWFW7vSMh46Z76VjW4DTzG=
W1GCT11f6V4nYn04 )

Shadow AI bans don't work (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113=
/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW6lZ3nYV9=
Rh5j7BdwTdW3nHKLV4CfN4zW1xycQH3sVt4GN6mbhNf_n2NLW9dhXB33hXzDTW4s4lLw6pc1ldW=
2cq7qx4Br5tyW5zr5Y47qbk3NW2dxgLV94s1KYW33NZ_D6q5MQ0VT20P92LRGzZW2PR4k91ZR7N=
fW8LtTPV63s4lpW4gYt7R5tz2ZWW1fV2Wp9j-3H7VtJpF74y918BW7Q5-Bl3y4WCQW6dJrXR2Mn=
cMlW5k7TsB5kTrppW1zc8H24g2_6FM6gSNCQc4GSW5MtKR53jyXXGW571vkT2VB862W6hmPjc8K=
vdllf8v9ftT04 )

AI tools at work are definitely a security issue, but outright banning all =
AI doesn=E2=80=99t produce great results. People tend to find a way around =
bans, especially when they=E2=80=99re motivated (See prohibition: an entire=
 style of bars (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/V=
VFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63lcq-W6N1vHY6lZ3m6W4567Zb74_0gt=
Mz8bqgP_gZRW1c80RF3m1J4wW81Gqdr2tl0XVW5Bkd-y6ngD02W2-M4fD2DR98bW98gMWr3gQjQ=
VW2ptcqq1HRjC8W7m-G_J6NbvB5W4pBpCh45qwdfW836VRR1J15JFVx27hC1q4kNmW1lZv0k5lY=
z3hW533kwG6Mqr3_W7Ks7726Y6Q6pW6zwdm68QwSW7W6Pk8Tn2B08QXW1KGD8p3MMp3vW5r_XK-=
3Xm5TtW7Bfybf6jSP8XW53ZZnf20ww__W8cmz2358W9CJf7tFNpT04 ) was born). Learn a=
bout what Noora Ahmed-Moshe has to say about the problem and better ways to=
 solve it (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR=
2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DB03lcq-W8wLKSR6lZ3m6W15jMyt3Ykfj8W4SDf=
PJ39R04tW4mSlTS8YbPsJW56V65Y3dJrB2W1W-6M_40gj2dMC26XQfF63kW9jltmQ1j11jsW4Ym=
cKw6TKXNlW8GPw6b6G9LKlW2mdwpD5tvm4fW37j1m25YrCLGW7kNXJn7Kb3zSW5yL8Zg5kydnXW=
3zqjKF1TGcc4W7p8z8Q5tK1MvW7RRq-z7m2M-WN14rkglVWChxW7CV5TG4jDfJfW2YkgrP2W4GT=
-VsLZrb2PKp3RMstVKtzWFyHW35SbLH56rmxwW5Y10QH3qcLW_W1GQPs96J2xcXW2l8HPK5lSKL=
vW7WvbCK7fb_PqW8g_DXL3_58XLW2_TNRN1LZjbwdglb2x04 ) .

Browser extensions are a supply chain vector (https://d33CF-04.eu1.hubspotl=
inks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3=
lcq-W7Y8-PT6lZ3n3W1PVY5j7V3dslW8RMd4G5M2CjyW8hB_cG5m10DCW94DDhL6FZFt5W5ZwnZ=
g1xssv5W2Rz6RH8CmgvbW6_WS7k4hxfvHW5RHwNS7fPdn5W5rpsbG3V7fqwW3D4bXc3WDLSpW22=
46F165CmChW2z2RyM9b4z5DW4WKkP11ShFlZVLS3lb98CKx4W4fZyKF409WJrW3F039f2K45rSW=
6D6y8s6vKMZKW3hsJFT7lmWX7Vc6PqD2Pj2VjN5R30ZMbs6RbW8_PMM9232zGFW6s_H-C8JDpBY=
W5K-9vC43R8TDW4m3q8b7bmGWYW27_qSG1RTctPW1-2QMP2qffHpf448vz404 )

And speaking of shadow AI, remember the Vercel attack (https://d33CF-04.eu1=
.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56=
WN824DBj3lcq-W95jsWP6lZ3n4W95lzDm7vvJHhW20YcYX9jw_xcW5VryVP1xmylkW37mkf04yR=
ldVW5fvtfR5QksrZN1t28KbDL4CYW4_rJRd7jj4PHVKMy2Y8042DcW5X7CV02Wj-N5VnjSMP2mN=
zZsW5y-8xM1yz-HsW4g1z_N4pFRVrW6kZNyS7-VnzZW7ZwP2l4CddfqW6DrfKP6sStBPW4rZTsr=
65-m99VRCZ_V79xrp8W2fnt9l2bldlLW1hzR7w57T509M-DtVZVfJTWW9llJ5P7R1Gq_W7_hHYP=
2c2scJW7TBlKW7Q-H44VckQF36Q4KPcW6c09N_7jcHZlW4ZXspK5T8Hv_W59rr_P6BHWjdW30H5=
G319txrlW1L9yC58vHytWW3zdL_M2zsDPff8VcJMH04 ) last month? The entry point w=
as a browser extension that wasn't approved=E2=80=A6 but wasn't banned eith=
er. Browser extensions run with real privileges, update silently, and most =
security teams have no visibility into what's installed across developer ma=
chines. The same thinking we apply to npm packages needs to apply here too.

=F0=9F=93=96  Guides and best practices

Mythos-ready Checklist (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d3=
3CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3lcq-W7Y8-PT6lZ3lQW6tq-=
YW7WKwtmW76ltpw95pG8cW2yRxfV7C1WhRW3Dw6mS2gzhnyN7KkQZW9crkQW4J5bJX19LgJPW9j=
ybBn124CXzVbJ19D7JWKhCW7dTMGG41j5v8N1MS4mVjryB_VSqQ0Z7BhpmPW2CSXqS3yvzvVW8c=
Zmrk5fFsbsW3-d_-45bLl4KW6d8G_88MsXwQVQmCsr9hjjghW2T39Hr2Z68qhW8HJSMQ3W6SQXW=
5xHFBS8YNmFRW1S6yB86DBx11W5wd_D45D__KHW221xTn1MlzJ8W2rC-966WHSGdW6FKwL01C9s=
JGVfxpJG9gRTxsW8fH_NB73KXMmf5HDqyl04 )

By now you've read at least three takes on Mythos. The conversation has ran=
ged from "AI bugocalypse" to "calm down, older models could already do this=
." If we=E2=80=99re being real, the hysteria is overblown, but advancing AI=
 models can pose real risk. Defenders still have the advantage, and we buil=
t a checklist around this belief. Practical stuff, not vibes.

Github Actions Security Checklist (https://d33CF-04.eu1.hubspotlinks.com/Ct=
c/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW=
6lZ3myW1z1xFJ5Jc8slV7Xxl25fNR4gW3l2vfx4-36GTW32Tb1L7LyHSvV8Z6KY5-bLLxW5nvwk=
f2gTcr1VL2XHW58VCBLW1TX8wv9c4XGbW4Dglb23ssC1vW4WTqHq7by9NPW6gmgRb4pkd78W72V=
_9C2RsWfQW7v-ytM4y9T9TW1x_xMn3Q64XhW1xvXm-8yhjdNVPDFcJ48gk6HN1Nb57tHpsvDW3y=
5htS3CxjkDW8C-j3423_JJ8W2wyNxL59ljDSN6qrS9xQ3yy2W1K5r1D7lF83-W58bJ-15F-jcxV=
3sLTf2BNvwgf2cCjR804 )

Are you using GitHub Actions for your CI/CD? We keep seeing misconfigured G=
HA workflows being the entry point for a lot of malware attacks (see the Mi=
ni Shai-Hulud attack), so we created a security checklist just for GHA. Eve=
n if you don=E2=80=99t use GHA, it=E2=80=99s still an interesting read. The=
 checklist connects a lot of our malware research over the last year and ta=
lks about the different attack vectors.

=F0=9F=93=85  Let's meet up IRL

Want to meet up out and about in the world? You can find us at these upcomi=
ng events:

June 1-3: Gartner Security & Risk Management Summit, National Harbor, MD, U=
SA (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W=
94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3lcq-W7Y8-PT6lZ3kQW4jMTWv1LdbKgW1h4mXP2C54C=
JW3yS09N4NZmNnW76N_w_5H-nW6V6_X5H6qccQGW9fynHV7Vf0XVW4wf7n74x1mFQV9bXPr913z=
qfW2GKc1f8t708CW1x6LhP74dpqGW3kQFYk9bT9jBW21Q1mS2vkJ7YW96Q0H98FVNgJVyzjCd8b=
-qJ_W99chH02-bryrW36VXFy3mryJZW5rPxrD8rf5-NW7_V7sN8_lzSZW4-rLjV5k3TQ0W23tbB=
W6T4VvLW6QHsqw8t4-8fW7f9vjK1wHRvXW7nYPvR6tKYwNW93YSJz2YxxhJW1Sg1NC4zBVvfW2P=
vLQ45T9mtsf5JJYNP04 )

June 17-20: VivaTech, Paris (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+1=
13/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DyR3lcq-W69sMD-6lZ3mk=
W41cnlh33-BLzW23dd9S7xxZ2CW8cfQyR3Zx44yW6fWHLm767wcMV4TFL69g8xjLW8ccXcB3qzw=
cbW8Szr0r2G1LmLW589Twy62RH1CW6NYFCb5r9jQnW64SR1N5PmDhNW39_SBq3X6L0PW4zTm2r4=
hXJmkW35Mlcs7FZykpW4qKTW73GLPjGW4bGC5g95-16TW6KkhkY2YDRh2W7wPBpK6PW1hMW8Qtw=
g_3qWG7RW8dLX2W8vHG6-W6HhFLJ6bhC63f7Cnb2R04 )

June 24: OWASP Happy Hour hosted by Aikido in Vienna (https://d33CF-04.eu1.=
hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56W=
N824Dz63lcq-W6N1vHY6lZ3mFW40h8Tm6bXb2vW6Y3FMS1gFGKvW53VqbF84K-1GW7qcz1L5tLn=
GZW1P1Gtq7BNVJhW189fN78wQNtRW2Gfq7x86glpbW5KKj_469h1CWW8njNtp1NMblZW9kYWxS9=
blFY3W23bkyb95LWDrW1_B8k57bFnvqW6qtc4n2BkpV2N80hYjfdKZb6W5GpxsM7DBfJMW985Nh=
-6wHF57W5CfRHL4pflJNW6B8gtJ8Q-4LnW2Mt88j5m_VLsW7FzLKV4tzvp0N1s7DMpMB2CDW3V2=
bBM4cWVH4f4ywYMW04 )

June 25-26: OWASP Global AppSec EU, Vienna (https://d33CF-04.eu1.hubspotlin=
ks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DB03lc=
q-W8wLKSR6lZ3mCW45HP3Z65XJ_SN4WByC-7rDJNW5NGzt14C9fD_W6KWRXG13-X4FW2RpmbG6X=
2s1lW53bt6R3pk0MYW8dbW2N3GB847W2p2jSC4jrDG9W3Td02L21qjQyW1CY_PK8dqg_nW1QTCf=
H9fFBVCW8HKpCL4C1Z2CW4X3b0g47mvyHW7M9LPq710Dn1W8MSLXg5B1l5vW5-Y0RP3jmqfXW7m=
Nk408FykHwN64gk9BnblYbW3C1Wqm6yNjqzW3v5mNP8mpLfCW5YPbl44X8T1FVKBkGY3D1xVYW7=
dzxdH6vm02ZW6TSKby4PyXDGW3BS3fx63tSSFW8tX_fq2_yPdJW2s7Rqn8gwpLQW7wDDGG7Q7XL=
Hd2zRwT04 )

June 29-July 2: AI Engineer World's Fair, San Francisco (https://d33CF-04.e=
u1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl=
56WN824Dz63lcq-W6N1vHY6lZ3nBV2wlfw3WgZmsW1CrcT72ccBkSW3zts1F5hV76SW6nmTh-2F=
8QXRW5036Rp7dnK0cW58DsDH1X-jmGW7FMtGP3Hb4pPW8yzb-M2gVvZcVSy9J923t9svW4_4wH8=
8mL0t9W5s1X-67bpJgDW6jfpVF73fsp-W1Q4cVs7k2LqyW53bl013WP6XjW1gJXq14wGZWXW5sW=
hnc5xVqKqW9bzk8c77clmtW5jWLHh7b4LJVW6nFJwx6P7fncN2fTcPBKyvhQN51wxwQRDx-jW2B=
GmV26JZthCf84vcVv04 )

=F0=9F=93=A1  Misc

An AI discovered an NGINX vulnerability (https://d33CF-04.eu1.hubspotlinks.=
com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W=
7lCdLW6lZ3mNW2D0rFp5Hh0jkW81W0Xl5ByxWPVxNWr25BfLL8W8q3rfB3Zg-67Vm6jvv8-fK15=
W6LXhns8Jh2_-W5-8sY02g0yCkW6VkyJY5YZPbBW8WjrRq9fk8JZW7YyB5B3d1B-FW1GX5Jd3hw=
1DBW1Yttdp5L3FjFW2qVkG86QTJBPW2CM9l12BwS9QW6lG_vD6vRVBGW6WDR8Z5DjKd6W4Jt-rx=
9gXc9_W2f9Cqd6q3QSTW1HBLXq8r4l1MW7hfLNT2mmxlQW2mmmMQ6fPqDYW36fYrl2CYSJGW2Kj=
zr21DyVvBW5kQVRc4XBVTHf6TXcg804 ) that=E2=80=99s been around long enough to=
 legally vote.

OpenClaw security is still chaos. (https://d33CF-04.eu1.hubspotlinks.com/Ct=
c/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW=
6lZ3mCW13k29H8bs8NtW2PPbyk7XrssJW1gWK3R1z_J9-W7ddgdZ25NS0mW49t_WT60mNsWW7S9=
qdx4jTZg7W3bJ8MY7SX0_KVRXnYq1P_LxmW6c630z4cC5bZN24-hQHRW1mwW2zvYbx2RccNVW5Z=
YVWc6f0pWzW2NPR4F3YQKx1W2nV5Pl5GHryFW56_JL37LKC3dW49GjTD837W3LVVRcfK3N9H0GW=
69LTg08JkL6pW5PnTqH5H7PfZW5l3B373DJm4wW5f1sbN71yXv-W6Cw7zY4xSN3ZW6GtJpY5XYL=
4sW1Tlncb2lRGXSdDGJ_604 )  Watch your downloads if you use the lobster.

We love you npm, (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04=
/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3lcq-W7lCdLW6lZ3lLW4bp5HN1SNc=
6wW2CGW9W2BFG8-W9cy7Kg24_H0YW2H9VCd8qL949W1j40f95PQrcnW62hqMD7p08t3W2ZqR1w5=
Rp-CfN2lBmdqrBDb-W6mxSbW5mKC7JN2BxRsr1Jg9vW7cGl3F2_fdtYW1NbwrF3yh_9fV45ztH1=
7LptFW29w89C2zXx32W5BtdSZ7jXY7YW189j5f4kvRwrW8r9_Xx32DW_QW3WQJ_J1h4YScW3gMX=
zC1n1LzjW7ZMXMd3HsJcYVZ2gSw8nBcvjW2sGmRR4ZnWl7W3Skzfw3jb4nYVw_w0X5mBgG3f4kl=
qmK04 ) even in these trying times

And finally...

My latest hobby is finding unhinged cyber stock photos. Here=E2=80=99s my t=
op pick for May.

The smoke? The gloves?! This DIVA.

Have questions, feedback, or topics you=E2=80=99d love to see covered? Repl=
y with your comments or tweet me (https://d33CF-04.eu1.hubspotlinks.com/Ctc=
/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DyR3lcq-W69sMD-6=
lZ3kJN8hb8_s5HlbhW6_cdM-6vcKY7W6sRwTL1VZq5LW1cP2Mq9g2_S0W5m5D2X8WmmmvW5dw26=
s7C_G-FW7XCmYG3g3ltVW5g9KzX4RRZXfW3LG-Fk8C_cR0W34knWj131t2zW7VGCSl4mkVWdW7V=
JCfQ56Gd8qW52q7348d0LcjW4HqlV-12HX16W8_VzNf8RfPKhW7-GWYG8jJ8PWN89GDrxJWdbgW=
8fczN-4bLSqNW2Fl25P5wxblzW4yZZW34vJvsNf3_3D1T04 ) (if you dare).

If you found this newsletter useful and know other people who might too, pl=
ease send it their way.

Thanks for reading, and I=E2=80=99ll catch you next time.

- Madeline from Aikido

laughing at my own jokes @madelinelawren (X) (https://d33CF-04.eu1.hubspotl=
inks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63=
lcq-W6N1vHY6lZ3kRW8Vq7tT7Y1dVnVr11NJ167kjbW6KW3ly5x-g94W4cwsvz953pBbN4RnxLz=
ZyMnfW6tFv6d51G85MW2GsMQ96kS369W2Kn80g28mzJ7W57VmQ042kB7gW4WfM6H6Rl06cW8SXD=
sF6MkGYnVVjBNY4dLFpQW39HJhF8NGHCPW3wfhss2v5Nm_V3QDrG5JzWtkW86s27B9fY2NJW7qY=
Jq738Qp54M2JF_XrK3VzW81wXWW56j7cFN86Z2DH5zDxbW2rlqxL97NK2-N8lCMK_lhQn9f70zJ=
b004 )

shaking hands @linkedIn (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d=
33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63lcq-W6N1vHY6lZ3mhW3p0=
Wp02xBWXPN3Z3bn1sMD35W5HW6HX85RsrTW57Vpzz2zb4YsVmCWrn6Y-S8cW3DhcWw1ylVw7W6J=
z41_1fcfC3W5VKGWc8DX225W7b4xCb53YGtXW6jB-Tr67nWTpW1cH4nc46fq_CW2q2jfs8-WD0x=
W1KB5PR6Qlr2hW1hM203911J2sW512tTJ2m9v_7N3kdTT3QY1HCW7KPw0y8fGRXRW1QT5586gcf=
vbW4G2vW_26QrL2W1MJ-vC1GK6jDV1G8Gv59dXdMW5Z1_wv7JbqhHf37hpfq04 )

Documentation (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VV=
FlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DyR3lcq-W69sMD-6lZ3mfW3lZ_0t2vN9bjW=
8qR1ZD98f3XqW7B8sVk95-hz3W6KcYSq427vvhVK0ynG1hc2B1W37TT315K2R1KN8JQTsGJRL9V=
VcNkjL6342MQTk1V42zqr05W373Cq3836LY2W71jSzS7fDmYkVmjGzh8Yk-4sN1TpL3dPcrDqVY=
NDzN2169yfVfB8bX8YBzRNW39HVlf2cbjHjW9ldHwh5NQz9QW3Rt-DJ1h-hz0W6GlSC16Rh5PPV=
HDZ3T61wDpKf6PNj4W04 )    Integrations (https://d33CF-04.eu1.hubspotlinks.c=
om/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63lcq-W6=
N1vHY6lZ3mVW7fKsZD4hJ5k-N4vB7TxBl2YFN79KsNHSXZgRW5Fv4qW10WsMkVYQ50T6B29hxVg=
L6nK8RWVwMW86pByv4z3QR5W7G5cl52VmYYCW6Png8S3WPp_DVKVSyH7XXWB0W7mwpSR26mCnmW=
8gmJZV4vSy4xW5g_Sdv8lf92GVHVn_733d_DgN2FCXPgZg6b9W3BMW1p1szdQ6W25gHLY8xY8Gw=
W1R_JJy5VHsvxW8M6Vj11cdmjsN6NQBNZhJ4ZfW2xGh1N2CxzzkN22D85zp7XHgf14Txb404 ) =
   Trust Center (https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/=
VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63lcq-W6N1vHY6lZ3n8W1zpGN512VM7=
ZW5pJnHt7mFbGFW6974812-3kr0W87FxHc7wBk8LW8cjKzP1YdpZdMCvgwsRBXs-N93RHlHM8x-=
CW4ZfvFf33Dc9TW82m8c53zmR9jW633DQt2Cwv5NW14wg5s4D6K-YN4Cq3N1gC1l6VzFnN-2sYv=
7tW4BYKKj2rlLzyW6x58z28QbVQwVy9ldr8R_46zW9590w11kywJfW570V1t2b0y61W39W5kq6_=
GLlSVzM8XK4JXV1lW9b3kwp6mvZ3PW1K-2-M7B6VN5f10vCv-04 )    Our Blog (https://=
d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbm=
W7jDgJ35Pl56WN824DyR3lcq-W69sMD-6lZ3pJW2-79pw5WyQTwW4z2PrF5swl-DW3ct-Mt1hlw=
M_W9m1h4W8DbbvNW6Z-bFz9bgM_JW5_Z8G62LWPP3W8vKSXD756WD9W2VxM6-49dn2sW2qGCXV2=
rfZ9xW7pjqMm64KsCHW70GfqN5cx2LMW1z8q1f3NqLn0VqvjCx1tscDRV8JWRS8CPKFSW9kjkw9=
4z70b6W6pGKd31d5j_sW4GDrcd76Yqj4W3n28yp6Mn5RgN8D9s1N5hg0nW14jvdN6zCj7HdNY4m=
T04 )

Aikido Security, Keizer Karelstraat 15, Ghent, Belgium 9000, Belgium

Manage preferences (https://hs-26076760.s.hubspotemail-eu1.net/hs/preferenc=
es-center/en/page?data=3DW2nVjwf3Y2x9bW4pK3Jj1VpHx-W2qLjtG4pygLrW2KGBJr3LNJ=
LvW2zv0cp45wJ3bW3zdTQ63VYvY5W25d5sy2RxgdWW3VQ2LL2nXX3dW2qXCg343N_09W3jsmFZ3=
LV8QyW3CfwLW3JVn79W4fftb83NR1KxW308ZnZ41S8jWW2s_f0r4kmK_sW38dkfQ1QbrhRW2Wgw=
YH2r2HrzW30BqCk2MDFdbW3R4lJX4rDMvNW4twJ6J2-rKMbW3DNxbC22VX9pW3V_sl-1BN_RRW3=
H6Xyy1_jRZDW3ZJ9CS4hHxvdW32CV8G3gbmCxW1QDGGw1NCH6SW1VqXZd3bdw8JW3dcTj9385-f=
lW3y_-hs2sTy6bW45G9Cc2C-qKMW25488P4rh04mW3gsvl53DVmR3W36v7Yv43qNRGW32m7T13X=
MJxsW45lY6G3HfxYFW49xqlx2WwnKhW1Bv6x-1VxL_qW2TKXxN1S2G_mW3jx4g245k9pjW1ZqRq=
33y_6-FW2PC9Ll38D4QbW2MyT2q1ZnPGZW3ZXF-G2zGy58W2-kV291V75zHW3ZG4DS1NBTcPW2P=
nx5N4kCghGW4rksd52t7480W3GRh5h49n9CpW34mQ2g43XRHMW2YqHn_1L7RfcW1Zvy-v3ZPCNn=
W3R5J7f4pBPQFW21bNdq3SDg97W32xcWR1X6rntW3blky64txZl2W30t-2w217y37W2MH9-T2CG=
KjsW3JSg_z2qDVkMW4ctmpd4hFXdLW1BnMt_4ftyv0f2zxnF104&_hsenc=3Dp2ANqtz-8nrNO4=
eJpaIWvQueEwnSQDPVnKxdgHqqG23MaYV3tGr7GPOCLGRrFug8l-hIkm9XToSDvmS442kg-WC59=
YYqLhy3VXWg&_hsmi=3D136429691 )
------=_Part_216233_1557298128.1779397139323
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional //EN" "http://www=
.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns=3D"http://www.w3=
.org/1999/xhtml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:=
v=3D"urn:schemas-microsoft-com:vml" lang=3D"en"><head><!--[if !mso]><!--><l=
ink rel=3D"stylesheet" type=3D"text/css" hs-webfonts=3D"true" href=3D"https=
://fonts.googleapis.com/css?family=3DLato|Lato:i,b,bi&amp;display=3Dswap"><=
!--<![endif]-->
    <title>Aikido Intel Monthly: GitHub breach, Mini Shai-Hulud, Google API=
 Keys</title>
    <meta property=3D"og:title" content=3D"Aikido Intel Monthly: GitHub bre=
ach, Mini Shai-Hulud, Google API Keys">
    <meta name=3D"twitter:title" content=3D"Aikido Intel Monthly: GitHub br=
each, Mini Shai-Hulud, Google API Keys">
   =20
   =20
   =20
<meta name=3D"x-apple-disable-message-reformatting">
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=3D1.=
0">
<style>
a.cta_button{-moz-box-sizing:content-box !important;-webkit-box-sizing:cont=
ent-box !important;box-sizing:content-box !important;vertical-align:middle}=
.hs-breadcrumb-menu{list-style-type:none;margin:0px 0px 0px 0px;padding:0px=
 0px 0px 0px}.hs-breadcrumb-menu-item{float:left;padding:10px 0px 10px 10px=
}.hs-breadcrumb-menu-divider:before{content:'=E2=80=BA';padding-left:10px}.=
hs-featured-image-link{border:0}.hs-featured-image{float:right;margin:0 0 2=
0px 20px;max-width:50%}@media (max-width: 568px){.hs-featured-image{float:n=
one;margin:0;width:100%;max-width:100%}}.hs-screen-reader-text{clip:rect(1p=
x, 1px, 1px, 1px);height:1px;overflow:hidden;position:absolute !important;w=
idth:1px}
</style>
<!-- $$__SECOND_PASS_CSS_HEAD__$$ -->
    <!--[if gte mso 9]>
  <xml>
    <o:OfficeDocumentSettings>
      <o:AllowPNG/>
      <o:PixelsPerInch>96</o:PixelsPerInch>
    </o:OfficeDocumentSettings>
    <w:WordDocument xmlns:w=3D"urn:schemas-microsoft-com:office:word">
      <w:DontUseAdvancedTypographyReadingMail/>
    </w:WordDocument>
  </xml>
 =20
  <style>
    ul > li {
      text-indent: -1em;
    }
  </style>
<![endif]-->
<!--[if mso]>
<style type=3D"text/css">
 body, td {font-family: Arial, Helvetica, sans-serif;}
 .hse-body-wrapper-table {background-color: #ffffff;}
</style>
<![endif]-->
<!--[if mso | IE]>
  <style type=3D"text/css">
    .hse-column-container { border: none !important; padding: 0 !important;=
 }
  </style>
<![endif]-->
   =20
     =20
 =20
 =20
   =20
  <meta name=3D"generator" content=3D"HubSpot"><meta property=3D"og:url" co=
ntent=3D"http://26076760.hs-sites-eu1.com/-temporary-slug-61643523-0db4-428=
6-bae3-cd7524817dc6"><meta name=3D"robots" content=3D"noindex,follow"><!--[=
if !((mso)|(IE))]><!-- --><style type=3D"text/css">@media only screen and (=
max-width:639px){img.stretch-on-mobile,.hs_rss_email_entries_table img,.hs-=
stretch-cta .hs-cta-img{height:auto !important;width:100% !important}
.display_block_on_small_screens{display:block}.hs_padded{padding-left:20px =
!important;padding-right:20px !important}
.hs-hm,table.hs-hm{display:none}.hs-hd{display:block !important}table.hs-hd=
{display:table !important}
}@media only screen and (max-width:639px){.hse-border-m{border-left:1px sol=
id #eaf0f6 !important;border-right:1px solid #eaf0f6 !important;box-sizing:=
border-box}
.hse-border-bottom-m{border-bottom:1px solid #eaf0f6 !important}.hse-border=
-top-m{border-top:1px solid #eaf0f6 !important}
.hse-border-top-hm{border-top:none !important}.hse-border-bottom-hm{border-=
bottom:none !important}
}.moz-text-html .hse-column-container{max-width:600px !important;width:600p=
x !important}
.moz-text-html .hse-column{display:table-cell;vertical-align:top}.moz-text-=
html .hse-section .hse-size-6{max-width:300px !important;width:300px !impor=
tant}
.moz-text-html .hse-section .hse-size-12{max-width:600px !important;width:6=
00px !important}
@media only screen and (min-width:640px){.hse-column-container{max-width:60=
0px !important;width:600px !important}
.hse-column{display:table-cell;vertical-align:top}.hse-section .hse-size-6{=
max-width:300px !important;width:300px !important}
.hse-section .hse-size-12{max-width:600px !important;width:600px !important=
} }@media only screen and (max-width:639px){.hse-body-wrapper-td{padding-to=
p:20px !important}
#section-0 .hse-column-container{background-color:#fff !important} }@media =
only screen and (max-width:639px){ #section-3 .hse-column-container{padding=
-top:0px !important;padding-bottom:0px !important}
#section-3 .hse-column-container{background-color:#fff !important} }@media =
only screen and (max-width:639px){ #section-6 .hse-column-container{padding=
-top:0px !important;padding-bottom:0px !important}
#section-6 .hse-column-container{background-color:#fff !important} }@media =
only screen and (max-width:639px){ #section-9 .hse-column-container{padding=
-top:0px !important;padding-bottom:0px !important}
#section-9 .hse-column-container{background-color:#fff !important} }@media =
only screen and (max-width:639px){ #section-27 .hse-column-container{paddin=
g-top:0px !important;padding-bottom:0px !important}
#section-27 .hse-column-container{background-color:#fff !important} }@media=
 only screen and (max-width:639px){ #section-32 .hse-column-container{paddi=
ng-top:0px !important;padding-bottom:0px !important}
#section-32 .hse-column-container{background-color:#fff !important} }@media=
 only screen and (max-width:639px){ #section-33 .hse-column-container{paddi=
ng-top:0px !important;padding-bottom:0px !important}
#section-33 .hse-column-container{background-color:#fff !important} }@media=
 only screen and (max-width:639px){ #section-34 .hse-column-container{paddi=
ng-top:0px !important;padding-bottom:0px !important}
#section-34 .hse-column-container{background-color:#fff !important} }@media=
 only screen and (max-width:639px){.hse-body-wrapper-td{padding-bottom:20px=
 !important}
#section-35 .hse-column-container{padding-top:20px !important;padding-botto=
m:20px !important;background-color:transparent !important}
#section-35 .hse-column-container{background-color:transparent !important} =
}</style><!--<![endif]--><style type=3D"text/css">#hs_body #hs_cos_wrapper_=
main a[x-apple-data-detectors]{color:inherit !important;text-decoration:non=
e !important;font-size:inherit !important;font-family:inherit !important;fo=
nt-weight:inherit !important;line-height:inherit !important}
a{text-decoration:underline}p{margin:0}body{-ms-text-size-adjust:100%;-webk=
it-text-size-adjust:100%;-webkit-font-smoothing:antialiased;moz-osx-font-sm=
oothing:grayscale}
table{border-spacing:0;mso-table-lspace:0;mso-table-rspace:0}table,td{borde=
r-collapse:collapse}
img{-ms-interpolation-mode:bicubic}p,a,li,td,blockquote{mso-line-height-rul=
e:exactly}
.ShadowHTML p,.sh-modified-inline p{margin:0}</style></head>
  <body id=3D"hs_body" bgcolor=3D"#ffffff" style=3D"margin:0 !important; pa=
dding:0 !important; font-family:Helvetica, Arial, sans-serif; font-size:16p=
x; color:#565656; word-break:break-word">
    <div id=3D"preview_text" style=3D"display:none;font-size:1px;color:#fff=
fff;line-height:1px;max-height:0px;max-width:0px;opacity:0;overflow:hidden;=
" lang=3D"en">In this first edition, we're going to look at a supply chain =
worm that keeps coming back with more friends each time, a Google API token=
 behavior that may cost developers six figures in unexpected bills, and how=
 the loose security of VS Code Extensions led to the large GitHub breach th=
is week.=E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=
=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=
=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=
=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =
=E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=
=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=
=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=
=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=
=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =
=E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=
=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=
=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=
=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=
=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =
=E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=
=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=
=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=
=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=
=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =
=E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=
=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=
=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=
=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=
=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =
=E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=
=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=
=80=87=CD=8F =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD=
 =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =
=C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =
=C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =
=C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =
=C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =
=C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =
=C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =
=C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =
=C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=
=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD =C2=AD &nbsp;
</div>
   =20
<!--[if gte mso 9]>
<v:background xmlns:v=3D"urn:schemas-microsoft-com:vml" fill=3D"t">
    <v:fill type=3D"tile" size=3D"100%,100%" color=3D"#ffffff"/>
</v:background>
<![endif]-->
    <div class=3D"hse-body-background" lang=3D"en" style=3D"background-colo=
r:#ffffff" bgcolor=3D"#ffffff">
      <table role=3D"presentation" class=3D"hse-body-wrapper-table" cellpad=
ding=3D"0" cellspacing=3D"0" style=3D"margin:0; padding:0; width:100% !impo=
rtant; min-width:320px !important; height:100% !important" width=3D"100%" h=
eight=3D"100%">
        <tbody><tr>
          <td class=3D"hse-body-wrapper-td" valign=3D"top" style=3D"font-fa=
mily:Helvetica, Arial, sans-serif; font-size:16px; color:#565656; word-brea=
k:break-word; padding-top:20px; padding-bottom:20px">
            <div id=3D"hs_cos_wrapper_main" class=3D"hs_cos_wrapper hs_cos_=
wrapper_widget hs_cos_wrapper_type_dnd_area" style=3D"color: inherit; font-=
size: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" d=
ata-hs-cos-type=3D"dnd_area">  <div id=3D"section-0" class=3D"hse-section h=
se-section-first" style=3D"padding-left:10px; padding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container hse-no-stack-row" style=3D"min-wid=
th:280px; max-width:600px; margin:0 auto; border-collapse:separate; display=
:table; width:100%; background-color:#ffffff; padding-bottom:40px" bgcolor=
=3D"#ffffff">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation" class=3D"hse-no-stack-row" width=3D"600=
" bgcolor=3D"#ffffff">
      <tr style=3D"background-color:#ffffff;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:300px;padding-bottom:40px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"300" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:300px">
<![endif]-->
<div id=3D"column-0-0" class=3D"hse-column hse-size-6 hse-no-stack" style=
=3D"display:table-cell; vertical-align:top; max-width:300px; width:50%">
  <div id=3D"hs_cos_wrapper_module-0-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;table-layout:fixed" data-hs-cos-general-typ=
e=3D"widget" data-hs-cos-type=3D"module"><table class=3D"hse-image-wrapper"=
 role=3D"presentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0">
  <tbody>
    <tr>
      <td align=3D"left" valign=3D"top" style=3D"font-family:Helvetica, Ari=
al, sans-serif; color:#565656; word-break:break-word; text-align:left; padd=
ing:0px; font-size:0px">
        <a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-0=
4/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m2nnW6N1vHY6lZ3n0W61rMLs242=
V2PW75xLpt4Vn72yW8xfmNQ83Xl--W28bVv54k8G1tW7qTh2s8sYBz_W2RL5cR39F3XMW3CHsHl=
77vhFhW8qYp-J4tt2bSW1Plp8M7gVTJ0W8_fszB29fxX-W7fcDP14Rt_GpW3YVrgc96mQ1sW8PL=
GKH7Tlg6yW55Gy5g569Z1jW2gZFWx80ScTdVMLZ7S4N7DrkVKf7bD4kqxx4VhKxBw43cl4RW8Pk=
HT_7g6_TrW88NxJk1FkhGtW4NyDpv8kBd60W3wW5-618rnk3f56F8cz04" target=3D"_blank=
" style=3D"color:#00a4bd" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"314hG=
jRk">
        <img alt=3D"BlackLogo" src=3D"https://hs-26076760.f.hubspotemail-eu=
1.net/hub/26076760/hubfs/BlackLogo.png?width=3D200&amp;upscale=3Dtrue&amp;n=
ame=3DBlackLogo.png" style=3D"outline:none; text-decoration:none; border:no=
ne; max-width:100%; font-size:16px" width=3D"100" align=3D"middle">
        </a>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
<!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:300px;padding-bottom:40px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"300" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:300px">
<![endif]-->
<div id=3D"column-0-1" class=3D"hse-column hse-size-6 hse-no-stack" style=
=3D"display:table-cell; vertical-align:top; max-width:300px; width:50%">
  <div id=3D"hs_cos_wrapper_module-0-1-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;table-layout:fixed" data-hs-cos-general-typ=
e=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-0=
-1-0_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_ri=
ch_text" style=3D"color: inherit; font-size: inherit; line-height: inherit;=
" data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"rich_text"><p sty=
le=3D"line-height:175%; text-align:right" align=3D"right"><span style=3D"co=
lor: #24104f;"><span style=3D"color: #6551f3;"><span style=3D"color: #00000=
0;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VV=
FlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m2nnW6N1vHY6lZ3nsW3Zldzs6cWBglN=
4-0YbXvFdjjW3q-H9R5jkMJ4W1n2wXl2Y2p3zW3m97wF9b6cBFW4Y6ZK_2n6qd3VpVzpL7kJSZj=
W4v5clK6LjrqnW6DZ91w1MncjQW3pyVWQ7xcpGsW8WF4JH39F2Q7W6Zmny73GJZprW27RpgB1k0=
5ZfN6JHK2b8tzLzW29RW3q85K4-kW37c3Yx5lFBxjW2QmwL11tylbNW6BCngK1G0hVXW4PKMSx2=
Lr4VhN8M6nVJmTvZFW2NY31S9c3SCxW48ljtc1-2kDzf3QsWQz04" style=3D"color:#00000=
0; text-decoration:underline" rel=3D"noopener" data-hs-link-id=3D"0" data-h=
s-link-id-v2=3D"H/jjf4+w" target=3D"_blank"><span style=3D"font-size: 14px;=
 font-family: Helvetica, Arial, sans-serif;">Login</span></a></span></span>=
</span></p></div></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-3" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container hse-no-stack-row" style=3D"min-wid=
th:280px; max-width:600px; margin:0 auto; border-collapse:separate; display=
:table; width:100%; background-color:#ffffff" bgcolor=3D"#ffffff">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation" class=3D"hse-no-stack-row" width=3D"600=
" bgcolor=3D"#ffffff">
      <tr style=3D"background-color:#ffffff;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:600px">
<![endif]-->
<div id=3D"column-3-0" class=3D"hse-column hse-size-12 hse-no-stack" style=
=3D"display:table-cell; vertical-align:top; max-width:600px; width:100%">
  <div id=3D"hs_cos_wrapper_module-3-0-2" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;table-layout:fixed" data-hs-cos-general-typ=
e=3D"widget" data-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-3=
-0-2_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_ri=
ch_text" style=3D"color: inherit; font-size: inherit; line-height: inherit;=
" data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"rich_text"><h1 st=
yle=3D"margin:0; font-family:Helvetica, Arial, sans-serif; color:#000000; f=
ont-size:24px; line-height:175%"><span style=3D"color: #000000; font-family=
: Helvetica, Arial, sans-serif;">Aikido Intel Monthly</span></h1>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;"><br>Hey there,</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">Yes, we started a newsletter. We know what yo=
u=E2=80=99re thinking: a newsletter, <em>in this economy</em>?! It=E2=80=99=
s brave, bold, and completely original.&nbsp;</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">No, we aren=E2=80=99t sliding into your inbox=
 with marketing fluff or AI slop. This is a curated monthly digest of break=
ing <em>supply chain threat research, hot takes,</em> and a sprinkle of<em>=
 "here's a checklist we made because we keep seeing people make the same mi=
stake." </em>We promise you=E2=80=99ll either learn or laugh, ideally both.=
</span><br><br><span style=3D"font-family: Helvetica, Arial, sans-serif; co=
lor: #333333;">In this first edition, we're going to look at a supply chain=
 worm that keeps coming back with more friends each time, a Google API toke=
n behavior that may cost developers six figures in unexpected bills, and ho=
w the loose security of VS Code Extensions led to the large GitHub breach t=
his week.</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">The general vibe of May 2026 is<strong><em> =
=E2=80=9CI Wake Up=E2=80=A6 There=E2=80=99s Another Supply Chain Attack.=E2=
=80=9D</em></strong></span></p></div></div>
<div id=3D"hs_cos_wrapper_module_17793017707251" class=3D"hs_cos_wrapper hs=
_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; fo=
nt-size: inherit; line-height: inherit;table-layout:fixed" data-hs-cos-gene=
ral-type=3D"widget" data-hs-cos-type=3D"module"><table class=3D"hse-image-w=
rapper" role=3D"presentation" width=3D"100%" cellpadding=3D"0" cellspacing=
=3D"0">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"font-family:Helvetica, A=
rial, sans-serif; color:#565656; word-break:break-word; text-align:center; =
padding:10px 0px; font-size:0px">
        <img alt=3D"Text, with arrows pointing back to each to imply a cycl=
e: I wake up -> there's a reposted supply-chain attack meme. There's a cat =
in the middle." src=3D"https://hs-26076760.f.hubspotemail-eu1.net/hub/26076=
760/hubfs/Screenshot%202026-05-20%20at%2012.14.48%20PM.png?width=3D1200&amp=
;upscale=3Dtrue&amp;name=3DScreenshot%202026-05-20%20at%2012.14.48%20PM.png=
" style=3D"outline:none; text-decoration:none; max-width:100%; font-size:16=
px" width=3D"600" align=3D"middle">
      </td>
    </tr>
  </tbody>
</table></div>
  <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D=
"100%" class=3D"" style=3D"table-layout:fixed"><tbody><tr><td style=3D"font=
-family:Helvetica, Arial, sans-serif; font-size:16px; color:#565656; word-b=
reak:break-word; padding:10px 0px"><div id=3D"hs_cos_wrapper_module_1779301=
7792022" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_=
module" style=3D"color: inherit; font-size: inherit; line-height: inherit;"=
 data-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"module"><div id=3D=
"hs_cos_wrapper_module_17793017792022_" class=3D"hs_cos_wrapper hs_cos_wrap=
per_widget hs_cos_wrapper_type_rich_text" style=3D"color: inherit; font-siz=
e: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data=
-hs-cos-type=3D"rich_text"><h2 style=3D"margin:0; font-family:Helvetica, Ar=
ial, sans-serif; color:#000000; font-size:16px; line-height:175%; font-weig=
ht:normal"><span style=3D"font-family: Helvetica, Arial, sans-serif;">So le=
t=E2=80=99s get into it. Glad you're here.</span></h2>
<ul style=3D"line-height:175%"></ul></div></div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-6" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container" style=3D"min-width:280px; max-wid=
th:600px; margin:0 auto; background-color:#ffffff" bgcolor=3D"#ffffff">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation" width=3D"600" bgcolor=3D"#ffffff">
      <tr style=3D"background-color:#ffffff;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:600px">
<![endif]-->
<div id=3D"column-6-0" class=3D"hse-column hse-size-12">
    <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=
=3D"100%" class=3D"" style=3D""><tbody><tr><td style=3D"font-family:Helveti=
ca, Arial, sans-serif; font-size:16px; color:#565656; word-break:break-word=
; padding:20px 0px"><div id=3D"hs_cos_wrapper_module-6-0-0" class=3D"hs_cos=
_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color: =
inherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-typ=
e=3D"widget" data-hs-cos-type=3D"module"><table role=3D"none" border=3D"0" =
cellpadding=3D"0" cellspacing=3D"0" style=3D"vertical-align:top" width=3D"1=
00%">
  <tbody><tr>
    <td align=3D"center" style=3D"font-family:Helvetica, Arial, sans-serif;=
 color:#565656; font-size:0; word-break:break-word">
      <p style=3D"font-size:1px;border-top:1px solid #EEEEEE;width:100%;mar=
gin:0 auto;"></p>
      <!--[if mso]>
        <table role=3D"none" align=3D"center" border=3D"0" cellpadding=3D"0=
" cellspacing=3D"0" style=3D"font-size:1px;border-top:1px solid #EEEEEE;wid=
th:600px;">
          <tr>
            <td style=3D"height:0;line-height:0">&nbsp;</td>
          </tr>
        </table>
      <![endif]-->
    </td>
  </tr>
</tbody></table></div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-9" class=3D"hse-section" style=3D"padding-left:10px; p=
adding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container" style=3D"min-width:280px; max-wid=
th:600px; margin:0 auto; background-color:#ffffff" bgcolor=3D"#ffffff">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation" width=3D"600" bgcolor=3D"#ffffff">
      <tr style=3D"background-color:#ffffff;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:600px">
<![endif]-->
<div id=3D"column-9-0" class=3D"hse-column hse-size-12">
  <div id=3D"hs_cos_wrapper_module-9-0-0" class=3D"hs_cos_wrapper hs_cos_wr=
apper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size=
: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-=
hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-9-0-0_" class=3D"hs=
_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" style=3D"=
color: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-gene=
ral-type=3D"widget" data-hs-cos-type=3D"rich_text"><p style=3D"line-height:=
175%; font-weight:bold"><span style=3D"color: #010024; font-family: Helveti=
ca, Arial, sans-serif;"><span style=3D"color: #000000;"><span style=3D"colo=
r: #010024;"><span style=3D"font-size: 20px;">=F0=9F=91=BE&nbsp; <span styl=
e=3D"font-family: Helvetica, Arial, sans-serif; color: #000000;">The latest=
 malware and vulnerabilities</span></span></span></span></span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"color: #010024; font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"color: #000000;"><a href=3D"ht=
tps://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-=
8_pvbmW7jDgJ35Pl56WN824DBj3m2nnW95jsWP6lZ3kqN42ZFLpbMkQQW4S8tcS1SM1GbN2fvvy=
fzTZzsW6wkgPn63HtXkVytRcl8rkV7zW9dbWWB6YjGysW7NGKr81b9pRYVRKHK_26PsYgW74-2j=
q2zsYm-N1cC7zr6YTBcW5C9qC94stRzBW89PfKF5vtQrCVYqKch8gkRyPW51m8Lb1Tyc7pW2dCy=
-J1YJ_-5W3TsJjw2FpJknW8DHG2S3QTDqtW6NTZKg5-NkhbW8lxkk443KDK9W7DZtZX3cBsf6W9=
1Vv9q2gP42mW3KVFfQ584Y1CW3VDsBm6pdS9JW8Rvr_m1DQ9hVW16t-7K8mWZdWW5cR0pz6l8Vh=
_W8myn278DGkS_N19NYT45Jx5JW8_krk_1NBzp2W3pTZrg751SMSf1mFXgM04" style=3D"col=
or:#000000; font-weight:bold" rel=3D"noopener" data-hs-link-id=3D"0" data-h=
s-link-id-v2=3D"twVl7sYi" target=3D"_blank">Mini Shai-Hulud strikes again=
=E2=80=A6 again!</a></span><br></span></p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">Mini Shai-Hulud started as a targeted hit on =
SAP npm packages in late April, then PyTorch Lightning on PyPI was hit. Las=
t week, it came back and attacked over 100 packages, including TanStack, Mi=
stral, and UiPath. And, this week? It hit again! Developer Advocate Mackenz=
ie Jackson sat down with our Security Researcher, Charlie Eriksen, the day =
of the TanStack attack to walk us through what happened (sleep-deprived, mi=
d-incident, the whole thing). We have blog posts covering the Shai Hulud re=
cent attacks, including the IOCs and what to rotate if you were affected.</=
span></p>
<ul style=3D"line-height:175%">
<li aria-level=3D"1"><span style=3D"color: #000000; font-family: Helvetica,=
 Arial, sans-serif;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/R=
K+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DB03m2nnW8wLKSR6lZ=
3p3W5jN0FL1wWw-hW33WN-33VcNLmN8WW3wVKFfC2MzpV1_v9pMNW7Z1jXF7hLMj_W7wXx714x-=
YqKN4H29JR6N5z0W4R1fhd6KRhZVW3nZGn418jsGMN6yMFtwllx2cW1GJ3HX9hzf8ZW8BLLyd5P=
bGB6W5MtDJf1jv7xPW7J3wWZ296V9hW2TWyN21-x8qFW50-kMZ81Y6pmN79SSqMV_rqcW8Fkfrl=
3w-4_SW2-ysPt5jBP2MW7v6K9V3-RMgQVX29DF55JyJ9W6HjXqZ92rcg9W13tnn62NRpylW5wPk=
-26h7NTkW28kX0k95BCxmW5qv3Kx6mpbXmW2tb0Tw5ZVJYBW78784g68fKQzdFQCX204" style=
=3D"color:#000000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"id4WmYCN" ta=
rget=3D"_blank">TanStack and Mistral attack</a>&nbsp;</span></li>
<li aria-level=3D"1"><span style=3D"color: #000000; font-family: Helvetica,=
 Arial, sans-serif;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/R=
K+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DB03m2nnW8wLKSR6lZ=
3kHW1qLmjP8ZTT7bW21ZvGS2rfTRVVWHx871fKbK-W4v4Vvl6WnQM9W5lzsG882qgCYW7f2Jh-6=
RwB6RV_-Hjm47xyHbW18-bpL6_6jkqW7770yh27KrsZVL0kXl9068MYW65PtMs7vhKFbW7XK1Dl=
42HnZZVNx2W87QT-N5W6WTWYk167PV1VJ-JN46J-XgnW5_n6Wj3_1Qy2W7GBrTx8ps66cW8H1PS=
S597xptW6lMVt445C9szW5Nrvf42y8T6PVjLgNj8ZLMrTW1dSHlG7lCHCyW5bZ9Xk8SZqrlW8-s=
7Zn3d3CTWW6NSPLv3Y1NTSW4784sl111GRGW43sJSR6XkwW4W2Xrn7p4b_8b4f95vFpP04" sty=
le=3D"color:#000000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"DI35LfQj" =
target=3D"_blank">antv attack</a></span></li>
<li aria-level=3D"1"><span style=3D"color: #000000; font-family: Helvetica,=
 Arial, sans-serif;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/R=
K+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DB03m2nnW8wLKSR6lZ=
3pGW2fJd-356M0fSMR-XdGTnLG-W3NS0jV47rPdCW2Q3x5J1FSm4hW3Dp9421ZQl6WN49BzGZZj=
ns2N3MS3wn3jGvrW94497q63C_n2W3hRTQt5KZj6XN50K-djTM-ClW618cjy1n38sWW2SnyZB2-=
r8N6W2cCT9_3kzWmGVPRtBZ5MYZl6W27YT_-1jXjLwW92Jphm1WyWzwW4vNX0X2jl9PpN8ZBw-9=
FLvGhW6vwlG715CLhbW2tlXs56gFNQzW3KR3_H7WSdYZN4wM_04h29l-W8jqNNJ70WYZrW2p4FR=
p453y4yW5xCd5T5cW7l5W8xbYtr2N6yDxW8w91wQ3qGXhKW57scnj7p-NP3f6cFp3b04" style=
=3D"color:#000000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"jBKdYLUR" ta=
rget=3D"_blank">durabletask attack</a></span></li>
</ul>
<p style=3D"line-height:175%; font-size:18px"><span style=3D"color: #010024=
; font-family: Helvetica, Arial, sans-serif;"><span style=3D"color: #000000=
;"><span style=3D"font-size: 16px;"><a href=3D"https://d33CF-04.eu1.hubspot=
links.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK=
3m2nnW7Y8-PT6lZ3ndW7c51D62pbf2_W7g49QS6G4BlMVbMfq93D9nzhW6LBLj33W4F4hW5KLRd=
05s_-dTW6Gtslp4sy5G9W7bPkv838LNXWW1NwhdK7GYVfQW7CXQF67YxM3JW20Dltk7mxZtQW4g=
Y6W13lJ7JHW56KRcx1gQ1pRW7ThQtD1KTK7HW7-STml77kDvYW45BDGl54zVx5W91Q9WW3S76PC=
W8hS-vf4L9tq8W1VqbCt1Rb0MNW4XLF4t824b31W1W-PGt9l_2sMW4Jg8lX4vz3nFN8z_kh8-7M=
dFW8Sq-fX7Y5W4BW2jpfrP5FTq18W729Q7y2jTv3fW4rWWnc7LwV4bf7QRHMj04" style=3D"c=
olor:#000000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"Av+YU4R8" target=
=3D"_blank">Quick PSA: Aikido has tools to protect your device and applicat=
ions from supply chain attacks like these</a></span>.</span><br></span></p>
<p style=3D"line-height:175%; font-size:18px">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif;"><span style=3D"color: #000000;"><a href=3D"https://d33CF-04.e=
u1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl=
56WN824DzK3m2nnW7Y8-PT6lZ3n4W2F-Pc-36KhMjW64NXz85JqC8ZW7J79qZ1t8JkFW4lhnpJ8=
4SW77W4Pk35R1bpSNvW2_gptF9gnvHnW86rkyZ4B45K2Vv01Lq4kVnH9N3WND2M6qbdhVyDqCq8=
NB7VwW3h2d7Y4q3mn_W2l2dKr5QPmSwW6fP-3K2f6t4zW659gdn441TTgW4GB1L23V2NhLW6wnC=
-P2wH4wLW776vDG33HctVW3Dw8G72VLDZgN3_GrL9n2m3NW89x_l07p5fgWW6fvZnh164XJgW26=
PgXQ1wGNSnW1-gFDZ65zz-mW41TD547JQ6kzW1_vsF82tmJ27N21HR06hk2-wf3DSg-M04" sty=
le=3D"color:#000000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"tV82l6ed" =
target=3D"_blank"><strong>VS Code Extension Marketplace is the Wild West, a=
nd GitHub was the latest victim</strong></a></span></span></p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">GitHub suffered a major breach this week. The=
 internet was wondering if it was from a super-powered Mythos attacker, but=
 in fact, it=E2=80=99s another developer device getting hacked by a comprom=
ised extension. We keep seeing malware end up in the VS marketplace because=
 there are limited to no security guardrails. GitHub is not the first victi=
m, nor will it be the last.</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; font-size: 16px; color: #000000;"><a href=3D"https://d33CF-04.=
eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35P=
l56WN824DzK3m2nnW7Y8-PT6lZ3l4W8bK5Mb4VBTjDW17Lbyx43ZfY1N81YdydlpZLGW8JWK5P2=
2_WF9W5nJPD499gLJ-VpwxZm8WSxD7VpC28m8D1bRqW42fn5d45rDTkW3ybybR1dYdsZW8dWZ36=
155yRRW3Z7xcf966b1TW3fX-xM7kQHWZW8NvRLV8vhPCbW64HQww1DXln_VygPLM5_Wzt6W3TmK=
sC8CKm1TW7QrrSc574Q3yW1PkD2N1Q0fmHW7Gg18T6PfY42W665JCm48H6DMW4qPwsK45TPKXW5=
WNbrJ3992DYN5f7kwRMzLN8W5spTjB60Yz-fN94TksnrY0_CN83_8r69cj-Wf3mcSxR04" styl=
e=3D"color:#000000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"Aa2f6FUQ" t=
arget=3D"_blank"><strong>Google API keys still work after you delete them f=
or over 20 minutes</strong></a></span></p>
<p style=3D"line-height:175%; font-weight:normal; font-size:16px"><span sty=
le=3D"font-family: Helvetica, Arial, sans-serif; color: #333333;">When you =
delete an API key, surely you expect it to stop working immediately. You kn=
ow, for security reasons. But, as our Security Researcher Joe Leon discover=
ed, it takes up to 23 minutes for a Google API key to stop working after yo=
u delete it. Users have actually been burned by stolen tokens, with develop=
ers being hit with <span style=3D"color: #000000;"><a href=3D"https://d33CF=
-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDg=
J35Pl56WN824Dyx5kBVzW5BWr2F6lZ3lKW4mwYzG3Kr-zCW4kjpgj2jZTSjW93K-hc7Z8XbJW3J=
k_Qf1qffVZVbRzPt7dg478W6MVJfT8DPyZgW2CRGf1641N9PW8hVtLY7KV3r0W6_gJ-D5PK7D3W=
8Ssvjd7XFfhDW2gFB4d7Qr5y2V1VKW95c85GXN6yphTJtX97YW5rMGtX8nGJvPW56HRzz5YKlPR=
W1dK6SS7y-zDDW7qfjX859hjqTW4x7sGy79hJRbW3dcrfs1sF1kDW6kchz28Wd-kZW66x1H91wC=
RY0N74M_0w9qYzdW7NHs542g7h9HW2LvWj815zDLCW37JDtn47RlJnW5jKTtD39Yg8-W1pdZQh4=
90m8gN20LQPQ-cX2SW7jz6bZ277tXrW3WpDSs7557FQW1T-Qwd1PVRglW45639D1DnZQkN5lHC6=
jTG7XJW7P_qZD2bcvsdf7xPbHW04" style=3D"color:#000000" rel=3D"noopener" data=
-hs-link-id=3D"0" data-hs-link-id-v2=3D"h1oUkxGY" target=3D"_blank">bills r=
anging from $15,000 to $128,000 from compromised Google API keys</a> </span=
>being used to hammer Gemini endpoints. This might be a problem even if you=
r key is deleted, and Joe=E2=80=99s research explains why.&nbsp;</span></p>
<p style=3D"line-height:175%; font-weight:normal; font-size:16px">&nbsp;</p=
>
<p style=3D"line-height:175%; font-weight:normal; font-size:16px">&nbsp;</p=
>
<p style=3D"line-height:175%; font-size:16px; font-weight:bold"><span style=
=3D"font-family: Helvetica, Arial, sans-serif; color: #333333;"><span style=
=3D"color: #010024;"><span style=3D"font-size: 20px;">=F0=9F=92=A1&nbsp;<sp=
an style=3D"color: #000000;"> <span style=3D"font-family: Helvetica, Arial,=
 sans-serif;">What we've been thinking about lately</span></span></span></s=
pan></span></p>
<p style=3D"line-height:175%; font-size:16px; font-weight:bold">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-size: 16px; font-family: =
Helvetica, Arial, sans-serif;"><span style=3D"color: #000000;"><a href=3D"h=
ttps://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN=
-8_pvbmW7jDgJ35Pl56WN824Dzq3m2nnW7lCdLW6lZ3pdVG0mfT1NfZwkW4yHF_M7C89DlN6kR4=
d2cBWftW1fN59B7glRP9W70ZJds7kHNyLW3PXjQM7-23h-W8_LGBr7dNx_-VkcR7t3p9ygjW8qC=
tTP1vPMRyW5jL1zr3rz1pdW5M0k5G3W-kSBVzWJD25l_w3kW8LVw0J6VtSHZN3b5H3QxMzLYN66=
TbCmWVcbcW6xG3M91CSprNW4LJGmg3wVVgQVfMhXc74GnLLW53NxQp5_p_ymW3P7b5G2PbhzyW2=
t48CB23Nn-XN1Xz067M7Lz2Vg6b0W68m4-vN8x3Dr0D645Kf37khlW04" style=3D"color:#0=
00000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"QR8fwU2f" target=3D"_bla=
nk"><strong>Is bug bounty dead? =F0=9F=92=80</strong></a></span></span></p>
<p style=3D"line-height:175%; font-size:16px"><span style=3D"font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"color: #000000;">Bug bounty pr=
ograms are having a bit of a moment, and it=E2=80=99s not entirely a good o=
ne. Aikido=E2=80=99s Mackenzie Jackson, sat down with <a href=3D"https://d3=
3CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7=
jDgJ35Pl56WN824Dzq3m2nnW7lCdLW6lZ3nnN6yXz2KRyMy1W4DWyj21wVs7dW6X1X0T78BR1nW=
1mT1p03gkVX2W4pPDKQ2ybB7LW2cSmS644JpQcW7TQ-cr5hHz5yW5Rpz201nyQg9W7y3D8q1GTD=
6tW4WWHtN2QP515W3LZ46z1sdjhYW6M6JtR28h1VRW82Z9yG48f1BQW7NRW_k1SjRSDV4Drg24t=
C7T6W310xss5QqB9qW3NyHLl9cvCK5W1JGSDd471NKCVxbGlQ4pfM4kW7sV_w54YnrvHW1_b7pL=
3gQSXRN3LTL_SQKwtQW5QmcDv38TYyGW30_k5w8HnSh7f658ynH04" style=3D"font-size:1=
6px; color:#000000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"pK+TjFXm" t=
arget=3D"_blank">Casey Ellis, co-founder of Bugcrowd</a>,</span><span style=
=3D"color: #000000;">&nbsp;who believes that the problem isn't new, the mat=
h has just gotten worse. <a href=3D"https://d33CF-04.eu1.hubspotlinks.com/C=
tc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3m2nnW7lCdL=
W6lZ3lMW5YDHDc3tvqbDW6Wllp47xy9bNVWRWZN3lvpxnVDg9g_5mrS6cW3f_bH_9ffqhmVRjWh=
M4CcykPW7j_4vB90S0w0N47klt-pPdq1W2nvzM74NBT62VqP4TJ1Z5JJHW7lJBHD7Jxy_LW8P9D=
Yx7K-XHvN7drPRGBlHfYW4nQWCL8MwD5LW8Xfyj856MWBcW7RhV3H2M2JPsW1-25Th4Znky-W2J=
hCj737HL8WW1vkf0N5m-rBbN6FcXYWljxGXW2-LM-q5wcGTJW2wKwWB1hPwnRW8Yyd5G2V4fFKW=
8BNbMn34PRcSf2XYvX204" style=3D"font-size:16px; color:#000000" data-hs-link=
-id=3D"0" data-hs-link-id-v2=3D"ExxQzeW9" target=3D"_blank">So, is bug boun=
ty dead or not?</a></span><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/=
Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3m2nnW7lCd=
LW6lZ3lfW2hgVRl1dF3MfW1ry_h66ps4b1W74vSsk5sJ5ZfW11hRhR70DHXpW6PR3Fj1clDH6W7=
6pwps1m42fNW8sgj6F8zg35WW2xg3yc80N55pW26vcBf2RmXVSW9cNtM57zKGPgW7hR9Vq60jZk=
fW6zrssl8VQZbzW8rlfqf88PhH7W3CL6fs7qHVd5W2g4RMN6kXScKW94rMXk776k5xN88bkgd_p=
3XLW2pnprD8rc8W6W7tDKQF8Znx8lW288kZq55K3KKW4XrS0f4WhkxTW5G580r70f6sJW2qBk4R=
5DS_xgW4ffcxd3Lt8QPf4Pj5zs04" style=3D"font-size:12px; color:#000000" data-=
hs-link-id=3D"1" data-hs-link-id-v2=3D"+w2Iueda" target=3D"_blank"> </a></s=
pan></p>
<p style=3D"line-height:175%; font-size:16px">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.=
com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3m2nnW=
7lCdLW6lZ3l7W6DW9vQ6Xqdw4VCYwB93HNkZrW2hqR5B6zpvMJW97_Hnd96tYcXW352TB-7nCqb=
WN5MDG3xv9FRMW6-QVpd4ZlLM3W1rBvz05p59pSW6QDd9x44PtTWW78vn669fcQ9nW6Lv0wX80H=
ppQV33NJM1cxm9MW2LnSj93dVWM0W29wdB-8cv3HdW8LNXyT25jTn5W3CqwJF3z1H-nW5NmxpS8=
dYhT1W2yWT4n7Mlm96W89TFQ84wq6TQW2TGwls1KhLKBW2V_wSl87BVN3MXYv0FcHgYmW6jvK7T=
3b30tRW2xsddW1jl18jf1nZdx004" style=3D"color:#000000; font-weight:bold" rel=
=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"Wmpel4uL" target=
=3D"_blank">Shadow AI bans don't work</a></span></p>
<p style=3D"line-height:175%"><span style=3D"color: #141031; font-family: H=
elvetica, Arial, sans-serif;">AI tools at work are definitely a security is=
sue, but outright banning all AI doesn=E2=80=99t produce great results. Peo=
ple tend to find a way around bans, especially when they=E2=80=99re motivat=
ed (See prohibition: an <span style=3D"color: #000000;"><a href=3D"https://=
d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbm=
W7jDgJ35Pl56WN824Dzq3m2nnW7lCdLW6lZ3kwW2ylNTT8_T8LcVK66537Csp5SW6chHF39hP99=
HN3PzVyHGn6pKW54YSgz4Wt918N196YpJPZg0JW4wgLwG525DrdW3frvG51FSgrGW3h3cl68Gqp=
xKW77zj057q725DW91rgSC3Y94qjW4fRSp72-hZkqN4GRSC2fZBRFW3-3fqX9dD34vW6gfLK14-=
2jp9W58g-J971z61mVvp24p81xJ21W4Rwrtm17STqNW5sMTZd7DpYwBW3BVtq55_2WSTW43vXfV=
6x0LcZN268fP5YZhZvW1kwFC398J8h9W1GNN0x4vrznzf7mprsR04" style=3D"color:#0000=
00" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"eYWzXsPE" =
target=3D"_blank">entire style of bars</a><span style=3D"color: #333333;"> =
</span></span><span style=3D"color: #333333;">was born). Learn about what N=
oora Ahmed-Moshe has to say about the problem and </span><span style=3D"col=
or: #000000;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d=
33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DBj3m2nnW95jsWP6lZ3nkW87P=
CDG6sd_K-W8jP4-w2fpxXNW4YLt6s748mNQW553yD949Wv2YW2_Q3g84dqSwKW4jqBbh2_BhYmW=
8jFlYW95nyCDW28kK3j4lN7GtN5cm86VX_mFxW6y7SYg7CtHYdVBHbDd7dG1ZzW5FkRgh6vfR2n=
W8k8ZLN8mDc2rW4nJwNv6kZ_4DW5HfGlp2MPgQxN5ZMk3jgndZMW3W0nD05RvJ5xW76JZrp8wJL=
1rW1GK1lz2HwWbXW8X-3CT2h6c_9W8BKJfT1VMzZTN6KplKqmF28VW8TPjyt3G0RQnW6yD2ql72=
0pDbW7G2Lrx40QyzVW3w2hMD2Cx8YNW6Kj0Dx1QpPPxW25vkJQ6zVPGJW8wG3HZ6cF8R8W4KHDz=
64WNV02f8jnqGK04" style=3D"color:#000000" rel=3D"noopener" data-hs-link-id=
=3D"0" data-hs-link-id-v2=3D"W4CzLd4G" target=3D"_blank">better ways to sol=
ve it</a></span>.</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:150%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.=
com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3m2nnW=
7Y8-PT6lZ3kYW86g8wp2DMcb2W3yB4Mv24JlTQW4PmTCp3Rqs_jW5NTxlq8RTMQWW3pfYhY3ngS=
FqW66Mfyz6htHNZW7kJQL22QPXncVNHwY26kKqj9W8BXtsk2H2PxrN8DySc72lXrSW3NWxWh2yt=
6DQW3RXC1J9d14N6W7kBY1T6XZBP1W6tB9qV145QyGVbc14Y9cF-R0W3pP2M93DDxX8W69Wz1S1=
JTFVWW5ttLH31bFQ8hW6kngNM4jNyFtW3cZ4726tnxLfW4jXGLS5DBdGSW2gjFsV7wJDhgN1vFk=
29-cKwHW5bQSg61X5yTZW48m54w2Vpr7mW1q9SXH3ZDbkWf21K_fT04" style=3D"color:#00=
0000; font-weight:bold" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link=
-id-v2=3D"Pkk7+97u" target=3D"_blank">Browser extensions are a supply chain=
 vector</a></span></p>
<p style=3D"line-height:175%"><span style=3D"color: #333333; font-family: H=
elvetica, Arial, sans-serif;">And speaking of shadow AI, remember <span sty=
le=3D"color: #000000;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc=
/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DBj3m2nnW95jsWP6=
lZ3lbW33TjKV8F2tqNW2LcGN67vr0YhW5GgNFm7XPl0yW85d69836W_0TW1Dn2bY8QB6fGW6tFs=
sJ6SyFXyN6C0pxqM1hTxW6yKsg546N5TPW3b3F307TbXrBW2SCKlF4j7NZjW3xBdPf5XR_BZW2c=
N3643q87LzW4WkMVs6ff7btW63g0b441WVsxVWj3ds4PYgNwW93nH5Q1c0hnKW44PnWl61W4_VW=
8-G8Tb31Yqj8W63gHgF3K77QsN5jwFydjM-__VnB5kB646ZSJW73Ft0B2hrTp2VM6w4f7zvhp0W=
5DDR1y4vf0VYW69lXy19fBm9xW2BY2pY2sNJSxN3472mD3xMRsW1kV1RQ5yb9fjW6HkTgW3Wvh2=
XW38wrLR16H7Zgf2x13bC04" style=3D"color:#000000" rel=3D"noopener" data-hs-l=
ink-id=3D"0" data-hs-link-id-v2=3D"rOt+wqgg" target=3D"_blank">the Vercel a=
ttack</a></span> last month? The entry point was a browser extension that w=
asn't approved=E2=80=A6 but wasn't banned either. Browser extensions run wi=
th real privileges, update silently, and most security teams have no visibi=
lity into what's installed across developer machines. The same thinking we =
apply to npm packages needs to apply here too.</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%; font-weight:bold"><span style=3D"color: #3333=
33; font-family: Helvetica, Arial, sans-serif;"><span style=3D"color: #0100=
24;"><span style=3D"font-size: 20px;">=F0=9F=93=96&nbsp; <span style=3D"fon=
t-family: Helvetica, Arial, sans-serif; color: #000000;">Guides and best pr=
actices</span></span></span></span></p>
<p style=3D"line-height:175%; font-weight:bold">&nbsp;</p>
<p style=3D"line-height:150%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.=
com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3m2nnW=
7Y8-PT6lZ3mDN2K_xTNglc_dVRtJpb6862GWN6s-2d0Mx7DtW1pKt6k4-NZ_tN7nDywQL1G3qW7=
grqSy4dK5nRVKHR1x6M-NK6W5RKxbR38J-WSW5q_X2b3G15XtN3S5P9xf4qqRW579FQh6sW8_1N=
5NxLNnD8frYN7Glt9KGp2kHW1Mk4nx139hdCW2Z5F1X6bVGl7N3S5znYw3Y0XW8D6z5W2zTNjdW=
8J_9bd5_cbkFW1VTjJk41p-M-W8N9MYd662rxjW73NTH83j5pXhW1KDsk54x9z7TV6Dm6_9dmPW=
_N4ZzZxNCh30QW6hJtfm1hBcXQN6vsb0ky6Nn6dTYt7Y04" style=3D"color:#000000; fon=
t-weight:bold" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D=
"03fhcULT" target=3D"_blank">Mythos-ready Checklist</a></span></p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">By now you've read at least three takes on My=
thos. The conversation has ranged from "AI bugocalypse" to "calm down, olde=
r models could already do this." If we=E2=80=99re being real, the hysteria =
is overblown, but advancing AI models can pose real risk. Defenders still h=
ave the advantage, and we built a checklist around this belief. Practical s=
tuff, not vibes.</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.=
com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3m2nnW=
7Y8-PT6lZ3mlW6_wl3k3Y__1fW1WXDGQ3xjGg8W67LBpx73sRDLW24f8H98KWH4TW9l3BcW3qwP=
8ZW8b3FDl4Yc1CpW3L0snR4TQvyrW48BBfk5-gB8WVk56ng7917cGW3tgc0B43YXmDN6WnlT45D=
VTjN8RXb9P2DyKHN6ZsLk6m9MYzVMwCrj5Fv_1TN2wt3JkCDvr4N2h-xgJYnv48W6p-fwQ5pBnl=
-Vfwygx3K4fsCW2yyk_H4pf6WnW31NZ258Q6_JTW3YWVWv6wFGpSW4ByJmb5BM9d9W5hSr6Y89G=
tCXW1nPPVf6KlJLPW2LJrns8BC9KSW621jMb9hXLmqf2S6tgM04" style=3D"color:#000000=
; font-weight:bold" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-=
v2=3D"PiS9kP7G" target=3D"_blank">Github Actions Security Checklist</a></sp=
an></p>
<p style=3D"line-height:175%; font-weight:normal"><span style=3D"color: #33=
3333; font-family: Helvetica, Arial, sans-serif;">Are you using GitHub Acti=
ons for your CI/CD? We keep seeing misconfigured GHA workflows being the en=
try point for a lot of malware attacks (see the Mini Shai-Hulud attack), so=
 we created a security checklist just for GHA. Even if you don=E2=80=99t us=
e GHA, it=E2=80=99s still an interesting read. The checklist connects a lot=
 of our malware research over the last year and talks about the different a=
ttack vectors.</span></p>
<p style=3D"line-height:175%; font-weight:normal">&nbsp;</p>
<p style=3D"line-height:175%; font-weight:normal">&nbsp;</p>
<p style=3D"line-height:175%; font-weight:bold"><span style=3D"color: #3333=
33; font-family: Helvetica, Arial, sans-serif;"><span style=3D"color: #0100=
24;"><span style=3D"font-size: 20px;">=F0=9F=93=85&nbsp; <span style=3D"fon=
t-family: Helvetica, Arial, sans-serif; color: #000000;">Let's meet up IRL<=
/span></span></span></span></p>
<p style=3D"line-height:175%"><span style=3D"color: #222222; font-family: H=
elvetica, Arial, sans-serif;">Want to meet up out and about in the world? Y=
ou can find us at these upcoming events:</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"font-weight: bold;">June 1-3:<=
/span> <span style=3D"color: #222222;"><span style=3D"color: #333333;"><a h=
ref=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl=
_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DB03m2nnW8wLKSR6lZ3pxW4dfpmB93fnr8W5WnN_B2X=
0DQPN7H7pdmxsH1BW2jXLhT647BDpW3cVlNv50BFB2W3jWHBW7JS8m6W5PYpd17GgFxpW1Xq7_9=
8FV1xYW4dCNf87T5yZfW3Lth5j8cG6kGW4lxjSJ2pb0xxW1-byy55W0mstW7h1jCN4gJnZPW6rT=
yvj5m6q01W8vFNsj2sD2XsW7CZGJF3CSrghW8k11bl40T7RqW61NSGq96fD4WW20tSmx67VrFcW=
7CMf6j8f10V9V4YT2G41g1XjW3bTLtH4s-8r7W7cfBv51vSmw8M1sC63Dsc3BW5zPYqv4g7bVMN=
5hMtTJCLmQ-W3GJ7MK3RTC03W3DJK7R2nCS6NdFJ9wY04" style=3D"color:#333333" rel=
=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"4jnKD4K+" target=
=3D"_blank">Gartner Security &amp; Risk Management Summit, National Harbor,=
 MD, USA</a></span></span></span></p>
<p style=3D"line-height:175%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"font-weight: bold;">June 17-20=
: </span><span style=3D"color: #222222;"><span style=3D"color: #333333;"><a=
 href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2J=
pl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m2nnW6N1vHY6lZ3pPW3f00Y-7HvpVnW5C-HTD=
5f3cTvW1hNZXq8vwWvCW7W-3Sc92lDY-W4yjfPx4d6RTnV9jTXy3YtmfhW42m_d93TZ0wpW7cyp=
cK6fcCDxW2T9Dmd60CTJZW8nnKcd2Q309kW5zxrcT7dZX-8W6117yg1NqssDW8Bl7_N76WLXyW7=
0Fw6g6KH6f7N13srBPYMQ6QN2jrDX2Z1xMQW19l0QP7dk3rhW6dKqYN1zP9DXW2FLNT25bGtcvN=
8YkR4Zqtb-CN57qyh5hpzLlW4L_g-m1bvwKTf8GXN_604" style=3D"color:#333333" rel=
=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"7zB7hTxK" target=
=3D"_blank">VivaTech, Paris</a></span></span></span></p>
<p style=3D"line-height:175%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"font-weight: bold;">June 24: <=
/span><span style=3D"color: #222222;"><span style=3D"color: #333333;"><a hr=
ef=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_=
3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3m2nnW7lCdLW6lZ3pqW1CBdny2B9v1gW7p3lRd2b_=
GjNVHfj8T3hJYMsW3fRVSd3tjhwMVBqrpg1fJj1MW8dr-Y44J7X-NW4QdP8h274wQVW93pg-08r=
0XXDW7pXrNF2zKzPvW2wxzng5VHVmCW3-2jjw2xnM2XW44kfXM7fBbxKW7QgrRZ3cZcxSN59BtN=
pF5WtQW6wTyMP3kmpS3W5f4SB63NtdbXW3Ymx972SqvlSW4dwWQs5YHqw2W5B9gY57hXGwzW3ll=
xRK8KYSRmW1M9ZMT1Y80YvW10zCz09hCdF0N5RnCdWtmlZkW5bZx3K6_JJg9f96_5tg04" styl=
e=3D"color:#333333" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-=
v2=3D"WxdwLEc8" target=3D"_blank">OWASP Happy Hour hosted by Aikido in Vien=
na</a></span></span></span></p>
<p style=3D"line-height:175%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"font-weight: bold;">June 25-26=
: </span><span style=3D"color: #222222;"><span style=3D"color: #333333;"><a=
 href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2J=
pl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DB03m2nnW8wLKSR6lZ3pzW8lnDqD5jzpCTW6KZ6Tr=
1_Hgg2W7QTf3-7Dls0qW8g2wRq91hj6XW8gcXpd7dvTHSW4jPMWl4_vKDsW5XVw811025f2W62t=
tqq90xqlTW8xXhYn9jnsn6W569bJ_95RlgtW5VP_2w94Vh-KW3rX1Jw3PrhqGW6qt8p_4GsVJMW=
3qLRCY2tqZw6W3mMcgP3-zH0PW8cxHM32dYzqgW8JhZqM3ycV4GW4NhCzr6rvVB2W1vkW514Grr=
20W6Q4gKm8NRTR9W4Nbsr45dSVJ2N1Z8mbKnDlXcW6BYHpd67qZ1QW1tsn1p92fH-7W6cy22v8z=
_-QqW5rfQFC3BZ4B9N2xj6XhP4-dWW1hhGtb8XCWqjf3kRq9Y04" style=3D"color:#333333=
" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"NBUR6znp" ta=
rget=3D"_blank">OWASP Global AppSec EU, Vienna</a></span></span></span></p>
<p style=3D"line-height:175%"><span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"font-weight: bold;">June 29-Ju=
ly 2: </span><span style=3D"color: #222222;"><span style=3D"color: #333333;=
"><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFl=
SR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m2nnW6N1vHY6lZ3q2W2Ngk9m7SgMwNW73=
MrnT7-BcCHW5b7VmL5vVkWHW5np7DM2WR8fQW7CczhT2LgqLdW5TS0FW5ySmz4W12Tp5X8YLy8z=
W4r17Cb4ng7-cW36nH8C7Qgbt_W39c_Zk51NzCBW20yBPq7pHkL9W7FtdV64S_gBBW2nhpYs356=
PN7W6TGHzz2SwWp5W5tRV0h8vk5KzW5JWYDs7YcDNfVvBT4k4b4ZTpW35cs-D7KXnKLW7xGnfl2=
BMtSKW9k9dk_5NBVrkW4dyMN29kqjG4W7j9SMB3QtXx9f7KqcYs04" style=3D"color:#3333=
33" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"9SHzXV9h" =
target=3D"_blank">AI Engineer World's Fair, San Francisco</a></span></span>=
</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"font-weight:bold; font-size:16px; line-height:140%; text-align:=
left" align=3D"left"><span style=3D"color: #010024;"><span style=3D"font-si=
ze: 20px;">=F0=9F=93=A1&nbsp; <span style=3D"color: #000000; font-family: H=
elvetica, Arial, sans-serif;">Misc</span></span></span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"color: #333333; font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"color: #000000;"><span style=
=3D"color: #333333;">An</span> <a  href=3D"https://d33CF-04.eu1.hubspotlink=
s.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3m2n=
nW7Y8-PT6lZ3mYW6j06N44Q207FV2XJXc7GrQncW18dGKX3khptlVtLTn22K1Y3LW8X217t3Jjz=
4TW8ggT5n4q1KfRW11CG7r37Jq1fW8Dly3W5t5H1yN5wbVBlr0C0FW8bFQqZ20SY3mW2tQP-D6V=
VQ-pW1tCQJH3Td-nTW4zLXW47-cBnLN6__g8TD9JjyW5--zTm9jJFH8W1zd0vP5ydWz5W1RBKxy=
1pl_nLW2RdWXp48Pxy7W5-jJmf2t8GnvW2dlkW54yyDXwW5JnRHr94jKzBW4pNK9K4lpl9DW69f=
tpP277wxHVGvxYV2ChBy3W967WnL9cqVP2VLxcMy6RjnBzf8G054404" style=3D"color:#00=
0000" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"sJGAExVf=
" target=3D"_blank">AI discovered an NGINX vulnerability</a> </span>that=E2=
=80=99s been around long enough to legally vote.&nbsp;</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"color: #333333; font-family: H=
elvetica, Arial, sans-serif;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.=
com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824DzK3m2nnW=
7Y8-PT6lZ3lZW74nfCg2SSPfxW36FghG5Q0b0pW770rMd5c_LTvVvg_n18zd5pHVYPrHT2kwLkg=
W2gLyS_5WpBn3W6vkK-K1F9vcYW5QtKR36JBQ57V3vSJb27X2sfW5cCN143bz_gkW5kS5rd8sVJ=
fjW8STL9v5VvjtpW91_TyJ6TTkSWW7mpgDw2FTfh5W57CJqT21KbfdW3jSq_C1vkcJRVwQy928W=
ClTKW2Vy2sN1f0_bNW8x0T9W5gftKTW8DD7nt7CtRSdW5j_VxP10gM42W4dcH8m39Pr_lW13lmc=
z5qvD-LN2s9wWxj9X5fW2bTm5H12DpfGW5KYmPQ8TK0Bsf53-ZmF04" style=3D"color:#333=
333" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"Znncq5bz"=
 target=3D"_blank"><span style=3D"color: #000000;">OpenClaw security is sti=
ll chaos.</span></a>&nbsp;Watch your downloads if you use the lobster.</spa=
n></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"color: #333333; font-family: H=
elvetica, Arial, sans-serif;"><span style=3D"color: #000000;"><a href=3D"ht=
tps://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-=
8_pvbmW7jDgJ35Pl56WN824DzK3m2nnW7Y8-PT6lZ3p_W1rjjpF7l87xnW7V1cD_1V-RdWW8j0v=
-r5Rjdg2W6Cx4KW5H4gwcW6YWVFX6_5QzZW8q1zwG94VDnGW1cyVc090vFhBW2bDlld658HCbW6=
SD01C4tJ-_KW2HW9X71RfqhCW7LW5Pt3J8Mf-W2Gt7pn5cgr6TW7f_Myl5P-TJxW5xmtlK7F1tm=
HW1501z34Yps6-W4kvYB-2j-MmnVjkkBC6PHnsmW6m9HXd6sKcWHVX3jd16mDyb3W6YbDLB4BZK=
3pW5tg4Zd6f6Bd-W3lRRvb1B91VYW52BVtk53bX4CW1DT2BQ183M7pV3-P5D1kn50JW7_Nvvn4z=
5PXhf92dx2404" style=3D"color:#000000" rel=3D"noopener" data-hs-link-id=3D"=
0" data-hs-link-id-v2=3D"2QAOknuw" target=3D"_blank">We love you npm,</a></=
span> even in these trying times</span></p></div></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-27" class=3D"hse-section" style=3D"padding-left:10px; =
padding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container" style=3D"min-width:280px; max-wid=
th:600px; margin:0 auto; background-color:#ffffff" bgcolor=3D"#ffffff">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation" width=3D"600" bgcolor=3D"#ffffff">
      <tr style=3D"background-color:#ffffff;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:600px">
<![endif]-->
<div id=3D"column-27-0" class=3D"hse-column hse-size-12">
    <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=
=3D"100%" class=3D"" style=3D""><tbody><tr><td style=3D"font-family:Helveti=
ca, Arial, sans-serif; font-size:16px; color:#565656; word-break:break-word=
; padding:20px 0px"><div id=3D"hs_cos_wrapper_module-27-0-0" class=3D"hs_co=
s_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color:=
 inherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-ty=
pe=3D"widget" data-hs-cos-type=3D"module"><table role=3D"none" border=3D"0"=
 cellpadding=3D"0" cellspacing=3D"0" style=3D"vertical-align:top" width=3D"=
100%">
  <tbody><tr>
    <td align=3D"center" style=3D"font-family:Helvetica, Arial, sans-serif;=
 color:#565656; font-size:0; word-break:break-word">
      <p style=3D"font-size:1px;border-top:1px solid #f5f5f6;width:100%;mar=
gin:0 auto;"></p>
      <!--[if mso]>
        <table role=3D"none" align=3D"center" border=3D"0" cellpadding=3D"0=
" cellspacing=3D"0" style=3D"font-size:1px;border-top:1px solid #f5f5f6;wid=
th:600px;">
          <tr>
            <td style=3D"height:0;line-height:0">&nbsp;</td>
          </tr>
        </table>
      <![endif]-->
    </td>
  </tr>
</tbody></table></div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-32" class=3D"hse-section" style=3D"padding-left:10px; =
padding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container" style=3D"min-width:280px; max-wid=
th:600px; margin:0 auto; background-color:#ffffff" bgcolor=3D"#ffffff">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation" width=3D"600" bgcolor=3D"#ffffff">
      <tr style=3D"background-color:#ffffff;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:600px">
<![endif]-->
<div id=3D"column-32-0" class=3D"hse-column hse-size-12">
  <div id=3D"hs_cos_wrapper_module-32-0-0" class=3D"hs_cos_wrapper hs_cos_w=
rapper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-siz=
e: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data=
-hs-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-32-0-0_" class=3D"=
hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" style=
=3D"color: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-=
general-type=3D"widget" data-hs-cos-type=3D"rich_text"><p style=3D"font-wei=
ght:bold; font-size:16px; line-height:140%; text-align:left" align=3D"left"=
><span style=3D"color: #000000; font-family: Helvetica, Arial, sans-serif;"=
><span style=3D"font-size: 20px;">And finally...</span></span></p>
<p style=3D"font-weight:bold; font-size:16px; line-height:140%; text-align:=
left" align=3D"left">&nbsp;</p>
<p style=3D"font-size:16px; line-height:112%; text-align:left; font-weight:=
normal" align=3D"left"><span style=3D"color: #000000; font-family: Helvetic=
a, Arial, sans-serif;"><span style=3D"color: #333333; font-family: Helvetic=
a, Arial, sans-serif;">My latest hobby is finding unhinged cyber stock phot=
os. Here=E2=80=99s my top pick for May.&nbsp;</span></span></p>
<p style=3D"font-size:16px; line-height:112%; text-align:left; font-weight:=
normal" align=3D"left">&nbsp;</p></div></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-33" class=3D"hse-section" style=3D"padding-left:10px; =
padding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container" style=3D"min-width:280px; max-wid=
th:600px; margin:0 auto; background-color:#ffffff" bgcolor=3D"#ffffff">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation" width=3D"600" bgcolor=3D"#ffffff">
      <tr style=3D"background-color:#ffffff;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:600px">
<![endif]-->
<div id=3D"column-33-0" class=3D"hse-column hse-size-12">
  <div id=3D"hs_cos_wrapper_module-33-0-1" class=3D"hs_cos_wrapper hs_cos_w=
rapper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-siz=
e: inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data=
-hs-cos-type=3D"module"><table class=3D"hse-image-wrapper" role=3D"presenta=
tion" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"font-family:Helvetica, A=
rial, sans-serif; color:#565656; word-break:break-word; text-align:center; =
padding:10px 0px; font-size:0px">
        <img alt=3D"Screenshot 2026-05-18 at 11.02.19 AM" src=3D"https://hs=
-26076760.f.hubspotemail-eu1.net/hub/26076760/hubfs/Screenshot%202026-05-18=
%20at%2011.02.19%20AM.png?width=3D1200&amp;upscale=3Dtrue&amp;name=3DScreen=
shot%202026-05-18%20at%2011.02.19%20AM.png" style=3D"outline:none; text-dec=
oration:none; max-width:100%; font-size:16px" width=3D"600" align=3D"middle=
" class=3D"stretch-on-mobile">
      </td>
    </tr>
  </tbody>
</table></div>
<div id=3D"hs_cos_wrapper_module-33-0-2" class=3D"hs_cos_wrapper hs_cos_wra=
pper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size:=
 inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-h=
s-cos-type=3D"module"><div id=3D"hs_cos_wrapper_module-33-0-2_" class=3D"hs=
_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" style=3D"=
color: inherit; font-size: inherit; line-height: inherit;" data-hs-cos-gene=
ral-type=3D"widget" data-hs-cos-type=3D"rich_text"><p style=3D"line-height:=
175%"><span style=3D"font-family: Helvetica, Arial, sans-serif; color: #333=
333;"><em>The smoke? The gloves?! This DIVA.</em></span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">Have questions, feedback, or topics you=E2=80=
=99d love to see covered? Reply with your comments or&nbsp;<span style=3D"c=
olor: #000000;"><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113=
/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m2nnW6N1vHY6lZ3nnW3=
3xfN87QYdDYV4l62l3KFryzW2DnX0S69-7v2W1xXVB-6HR8RJW5QbNcT4cJcw9W1zSB-Q7tbB2s=
W44Zyqt3R4JHMW1tjPSx4D5bnvW39q94t6YgtNsW7jwJK24pCl9NW1GKM7l8X2Y5dV4SY7b1Pm_=
tWW7DfKwP2XCdS9N4VCDpNt6jgtN5m-jdTzg1fjVSGc4944W7thW5GnyVL4PJGFHVXdT_g7GKm2=
JVN6t7z3pvzhcN21LznHGw73BW6g4XCY5XXKrxW6VZFTk47_j-2f2NGlcg04" style=3D"colo=
r:#000000" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"H4uC6XF2" target=3D"=
_blank">tweet me</a> </span>(if you dare).</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">If you found this newsletter useful and know =
other people who might too, please send it their way.</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">Thanks for reading, and I=E2=80=99ll catch yo=
u next time.</span></p>
<p style=3D"line-height:175%">&nbsp;</p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif; color: #333333;">- Madeline from Aikido</span><br><br><span st=
yle=3D"font-family: Helvetica, Arial, sans-serif; color: #333333; font-size=
: 11px;">laughing at my own jokes <span style=3D"color: #000000;"><a href=
=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W=
94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m2nnW6N1vHY6lZ3kGW86xQfn99JKL4W6MhxCH2Pq7F=
yW8nf77X13NlZQW6Kx3bh61qTWpW3tKN5d65_fqDW3HvyVG4Y9gzCV6Jb651bdPnVW1pH4gt4fy=
xsdV4DJ1x4Gn-rMW8WzQQV6ttFHHN7qr3xn9msWnW3BfV062S9DY_W7V4c8n1YW2nHW6tldzv70=
8vl9W6vKy314CLmKZW6cfzb06ndzx0N3kLrn0hK77VVxys6M4g4CWhW22xrS64RcsV7N1TLz3rg=
hZGFW2rVhFc3DxtVRW2ctP8C7TrTrCf4kpt8404" style=3D"color:#000000" data-hs-li=
nk-id=3D"0" data-hs-link-id-v2=3D"RnOzVba+" target=3D"_blank">@madelinelawr=
en (X)</a></span></span></p>
<p style=3D"line-height:175%"><span style=3D"font-family: Helvetica, Arial,=
 sans-serif;"><span style=3D"color: #333333; font-size: 11px;">shaking hand=
s <span style=3D"color: #000000;"><a href=3D"https://d33CF-04.eu1.hubspotli=
nks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dzq3m=
2nnW7lCdLW6lZ3m9W30_sZr8W39MpW440k8t92-CH2VZ3dql1j0PQYW8MPxfb5L_VthW91LPcr3=
DLNfsW1fMrRz1FGtVHW3nQH3c1rc7GgW4xLT3d2LNzHfW65lk7p3dP6DBW2RfVlZ5pRxGlV1w1g=
Q5wdLm5W8S2zlT434tgqW3K6Yk85wtQd5W2C5F4L8k1byfW6J-XPM6x4DGkW39zMzl4Sx9nkW7d=
FnP02Q9xQ5W3yww2t3CtWJqW4-jDVh7F78ByN1Fc54PKr3gbW6NrCdK8st89SN4tJ2BRq_444W6=
yV6KL2bCs9NW6XYMDc3L0m1md9SVCx04" style=3D"color:#000000" data-hs-link-id=
=3D"0" data-hs-link-id-v2=3D"njRQ2u/a" target=3D"_blank">@linkedIn</a></spa=
n></span><span style=3D"font-size: 9px; color: #000000;"> </span></span></p=
></div></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-34" class=3D"hse-section" style=3D"padding-left:10px; =
padding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container" style=3D"min-width:280px; max-wid=
th:600px; margin:0 auto; background-color:#ffffff" bgcolor=3D"#ffffff">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation" width=3D"600" bgcolor=3D"#ffffff">
      <tr style=3D"background-color:#ffffff;">
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:600px">
<![endif]-->
<div id=3D"column-34-0" class=3D"hse-column hse-size-12">
    <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=
=3D"100%" class=3D"" style=3D""><tbody><tr><td style=3D"font-family:Helveti=
ca, Arial, sans-serif; font-size:16px; color:#565656; word-break:break-word=
; padding:20px 0px"><div id=3D"hs_cos_wrapper_module-34-0-0" class=3D"hs_co=
s_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style=3D"color:=
 inherit; font-size: inherit; line-height: inherit;" data-hs-cos-general-ty=
pe=3D"widget" data-hs-cos-type=3D"module"><table role=3D"none" border=3D"0"=
 cellpadding=3D"0" cellspacing=3D"0" style=3D"vertical-align:top" width=3D"=
100%">
  <tbody><tr>
    <td align=3D"center" style=3D"font-family:Helvetica, Arial, sans-serif;=
 color:#565656; font-size:0; word-break:break-word">
      <p style=3D"font-size:1px;border-top:1px solid #EEEEEE;width:94%;marg=
in:0 auto;"></p>
      <!--[if mso]>
        <table role=3D"none" align=3D"center" border=3D"0" cellpadding=3D"0=
" cellspacing=3D"0" style=3D"font-size:1px;border-top:1px solid #EEEEEE;wid=
th:564px;">
          <tr>
            <td style=3D"height:0;line-height:0">&nbsp;</td>
          </tr>
        </table>
      <![endif]-->
    </td>
  </tr>
</tbody></table></div></td></tr></tbody></table>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div>
  <div id=3D"section-35" class=3D"hse-section hse-section-last" style=3D"pa=
dding-left:10px; padding-right:10px">
   =20
   =20
      <div class=3D"hse-column-container" style=3D"min-width:280px; max-wid=
th:600px; margin:0 auto; padding-bottom:20px; padding-top:20px">
   =20
    <!--[if (mso)|(IE)]>
      <table align=3D"center" style=3D"width:600px;" cellpadding=3D"0" cell=
spacing=3D"0" role=3D"presentation">
      <tr>
    <![endif]-->
    <!--[if (mso)|(IE)]>
  <td valign=3D"top" style=3D"width:600px;padding-bottom:20px; padding-top:=
20px;">
<![endif]-->
<!--[if gte mso 9]>
  <table role=3D"presentation" width=3D"600" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"width:600px">
<![endif]-->
<div id=3D"column-35-0" class=3D"hse-column hse-size-12">
    <table role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=
=3D"100%" class=3D"" style=3D""><tbody><tr><td class=3D"hs_padded" style=3D=
"font-family:Helvetica, Arial, sans-serif; font-size:16px; color:#565656; w=
ord-break:break-word; padding:10px 20px"><div id=3D"hs_cos_wrapper_module-3=
5-0-0" class=3D"hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_mo=
dule" style=3D"color: inherit; font-size: inherit; line-height: inherit;" d=
ata-hs-cos-general-type=3D"widget" data-hs-cos-type=3D"module"><div id=3D"h=
s_cos_wrapper_module-35-0-0_" class=3D"hs_cos_wrapper hs_cos_wrapper_widget=
 hs_cos_wrapper_type_rich_text" style=3D"color: inherit; font-size: inherit=
; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-hs-cos-ty=
pe=3D"rich_text"><p style=3D"font-size:12px; line-height:175%; text-align:c=
enter; font-weight:normal" align=3D"center"><span style=3D"color: #6551f3;"=
><a href=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlS=
R2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m2nnW6N1vHY6lZ3lWN4ZNjzv9_9SrW8jL0=
BP9g1FlrW80XR7S1f72v5W95zxXl6Lj3QFW7RNlsq72Tn_gVxR42Z7GhzfPW5LCRsf5m2C0_W1J=
L1Zx70xtkrN1FcF88y9sFCN5pQ2B-DvL9zW92HsXM4rgFHdW3jXYBc7HG7vpW9jg08C8br89VW3=
8V3m37k-_nsVsJGtl6B75JQW5YkH827fkPswW9dD_428Vcqp5W5HGdXv2_d3gTW3nJry87x8rJV=
W1c-L2D3p6lxhW5NTJwJ6fx2qhW67qRF593WVZff1wjR5Y04" style=3D"color:#6551f3; t=
ext-decoration:underline" rel=3D"noopener" data-hs-link-id=3D"0" data-hs-li=
nk-id-v2=3D"YuIsrhxS" target=3D"_blank">Documentation</a>&nbsp; &nbsp;<a hr=
ef=3D"https://d33CF-04.eu1.hubspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_=
3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m2nnW6N1vHY6lZ3mSW3n5Wfw17Pjr-W4QGl6D4YL=
DP5W7Lj7YQ1xl11ZVRGsdt5971dTW8yHjC58rHgY1W3Vm5dv4SP6pvW3-FQrR6Vd_TtW377BTw6=
F68xDW8lNRNQ1K86HCW8nwBSq92Ds3MN23XzV6zj3gzW9gd3_w7t9RXgW5dwDp18C8M-ZW3tD78=
v4N0nGCW10vzgg3M5mZFN4vm8ZR_1y8gW5fhkRx4dHsNMW62XZbs8fxvWsW1pYpwd1FMv1RW2z0=
x528S-r2XW5jxc-j3G0X4yW9fbK4t7qht4gf6hGdld04" style=3D"color:#6551f3" rel=
=3D"noopener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"ewm/Sk9j" target=
=3D"_blank">Integrations</a>&nbsp; &nbsp;<a href=3D"https://d33CF-04.eu1.hu=
bspotlinks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN8=
24Dzq3m2nnW7lCdLW6lZ3ndW6PW7wB1KMPRhW4x7gDG2N7T1SW76x5kf7rc3b3W3Kh_nZ3vRFnD=
W94f0Zg7Cy92sVgK7R549C2HXW1_QqJl70vntLW8zXw-Q5x3GF5W87XCSS6DgXdtW8chfXp3qpx=
vGW7tfYrn6lKyvLW5CWhWz7RV632W20sVPg45WL0ZW2HNHmk8ZkMjmVvSnQM2t6vMdW5pGycL7N=
YhBfV6LyX0557mVkW3kn0yq50vbmGW2vr8vW8BfF53W36tsC81vCZ2DW24GpRS4lP45yN57lwKp=
2_B3xW1ZwfS24TM27YW1sQ8T28cC8bYf50zlyP04" style=3D"color:#6551f3" rel=3D"no=
opener" data-hs-link-id=3D"0" data-hs-link-id-v2=3D"pQuJsfNk" target=3D"_bl=
ank">Trust Center</a>&nbsp; &nbsp;<a href=3D"https://d33CF-04.eu1.hubspotli=
nks.com/Ctc/RK+113/d33CF-04/VVFlSR2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WN824Dz63m=
2nnW6N1vHY6lZ3lkW6cZgLl48h5XbW8CdpBP2PXhSqW2kW5cN5tSKRkN2ZPkSQp8l7VW7nX6ZQ6=
F4j3WW6jl7Qs1Gy3KpW8PhGYf4SKQTBW47JPnh2W62B4W6fwsmH7whnN4W7cf3ld7ZmLpjM85v3=
YsTthpW43_QNn5kNk9pW7Q1BGj268nKrVlzVnW60YWz5W7__crk2ZbtZrVtGKzY8tqNPzW7gQKB=
p9034T3W6_HZjB5ffgjfW4XNnwQ83kCxDN6QHK9M39ml6V6ksyl8G-SL7W3FRj5s7F-b39dtKZP=
s04" style=3D"color:#6551f3" rel=3D"noopener" data-hs-link-id=3D"0" data-hs=
-link-id-v2=3D"xQ53cwze" target=3D"_blank">Our Blog</a></span></p></div></d=
iv></td></tr></tbody></table>
<div id=3D"hs_cos_wrapper_module-35-0-1" class=3D"hs_cos_wrapper hs_cos_wra=
pper_widget hs_cos_wrapper_type_module" style=3D"color: inherit; font-size:=
 inherit; line-height: inherit;" data-hs-cos-general-type=3D"widget" data-h=
s-cos-type=3D"module"><table role=3D"presentation" class=3D"hse-footer hse-=
secondary" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" style=3D"font=
-family:Arial, sans-serif; font-size:12px; line-height:135%; color:#23496d;=
 margin-bottom:0; padding:0">
  <tbody>
    <tr>
      <td align=3D"center" valign=3D"top" style=3D"font-family:Helvetica, A=
rial, sans-serif; font-size:16px; color:#565656; word-break:break-word; tex=
t-align:center; margin-bottom:0; line-height:135%; padding:10px 20px">
        <p style=3D"font-family:Lato,Tahoma,sans-serif;font-size:12px;font-=
weight:normal;text-decoration:none;font-style:normal;color:#010024">
          Aikido Security, Keizer Karelstraat 15, Ghent, Belgium 9000, Belg=
ium
        </p>
        <p>
          <a data-unsubscribe=3D"true" href=3D"https://hs-26076760.s.hubspo=
temail-eu1.net/hs/preferences-center/en/page?data=3DW2nVjwf3Y2x9bW4pK3Jj1Vp=
Hx-W2qLjtG4pygLrW2KGBJr3LNJLvW2zv0cp45wJ3bW3zdTQ63VYvY5W25d5sy2RxgdWW3VQ2LL=
2nXX3dW2qXCg343N_09W3jsmFZ3LV8QyW3CfwLW3JVn79W4fftb83NR1KxW308ZnZ41S8jWW2s_=
f0r4kmK_sW38dkfQ1QbrhRW2WgwYH2r2HrzW30BqCk2MDFdbW3R4lJX4rDMvNW4twJ6J2-rKMbW=
3DNxbC22VX9pW3V_sl-1BN_RRW3H6Xyy1_jRZDW3ZJ9CS4hHxvdW32CV8G3gbmCxW1QDGGw1NCH=
6SW1VqXZd3bdw8JW3dcTj9385-flW3y_-hs2sTy6bW45G9Cc2C-qKMW25488P4rh04mW3gsvl53=
DVmR3W36v7Yv43qNRGW32m7T13XMJxsW45lY6G3HfxYFW49xqlx2WwnKhW1Bv6x-1VxL_qW2TKX=
xN1S2G_mW3jx4g245k9pjW1ZqRq33y_6-FW2PC9Ll38D4QbW2MyT2q1ZnPGZW3ZXF-G2zGy58W2=
-kV291V75zHW3ZG4DS1NBTcPW2Pnx5N4kCghGW4rksd52t7480W3GRh5h49n9CpW34mQ2g43XRH=
MW2YqHn_1L7RfcW1Zvy-v3ZPCNnW3R5J7f4pBPQFW21bNdq3SDg97W32xcWR1X6rntW3blky64t=
xZl2W30t-2w217y37W2MH9-T2CGKjsW3JSg_z2qDVkMW4ctmpd4hFXdLW1BnMt_4ftyv0f2zxnF=
104&amp;utm_source=3Dhs_email&amp;utm_medium=3Demail&amp;utm_content=3D1364=
29690&amp;_hsenc=3Dp2ANqtz-_xjqce7fec7WxZWBnxg0R-0PPI1yRYcKog7eyaE7oPKmXXhR=
4sfWqlz1J0G5i4_eAAP8KjpV2_nzlo2itNiDLg6uc12A&amp;_hsmi=3D136429691" style=
=3D"font-family:Lato,Tahoma,sans-serif; font-size:12px; color:#6551f3; font=
-weight:normal; text-decoration:underline; font-style:normal" data-hs-link-=
id=3D"0" data-hs-link-id-v2=3D"qjPJqCop" target=3D"_blank">Manage preferenc=
es</a>
        </p>
      </td>
    </tr>
  </tbody>
</table></div>
</div>
<!--[if gte mso 9]></table><![endif]-->
<!--[if (mso)|(IE)]></td><![endif]-->
    <!--[if (mso)|(IE)]></tr></table><![endif]-->
    </div>
  =20
  </div></div>
          </td>
        </tr>
      </tbody></table>
    </div>
 =20
<img src=3D"https://d33CF-04.eu1.hubspotlinks.com/Cto/RK+113/d33CF-04/VVFlS=
R2Jpl_3W94rmN-8_pvbmW7jDgJ35Pl56WW824Dkd8fYGMW316h1" alt=3D"" width=3D"1" h=
eight=3D"1" border=3D"0" style=3D"display:none!important;min-height:1px!imp=
ortant;width:1px!important;border-width:0!important;margin-top:0!important;=
margin-bottom:0!important;margin-right:0!important;margin-left:0!important;=
padding-top:0!important;padding-bottom:0!important;padding-right:0!importan=
t;padding-left:0!important"></body></html>
------=_Part_216233_1557298128.1779397139323--

