Koi Blog | Latest on Endpoint Protection & Software Governance

Featured

GlassWorm Returns: New Wave Strikes as We Expose Attacker Infrastructure

Idan Dardikman

,

Yuval Ronen

,

Lotan Sery

November 6, 2025

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Marketplace Takeover: How We Could’ve Taken Over Every Developer Using a VSCode Fork; Putting Millions at Risk

Oren Yomtov

,

,

June 26, 2025

Trust Me, I’m Local: Chrome Extensions, MCP, and the Sandbox Escape

Yuval Ronen

,

,

April 24, 2025

Mining in Plain Sight: The VS Code Extension Cryptojacking Campaign

Yuval Ronen

,

,

April 7, 2025

A Month Of Malware In The Chrome Web Store

Amit Assaraf

,

,

April 3, 2025

A Wolf in Dark Mode: The Malicious VS Code Theme That Fooled Millions

Amit Assaraf

,

Idan Dardikman

,

Oren Yomtov

February 26, 2025

When Chrome Extensions Turn Against Us: The Cyberhaven Breach and Beyond

Amit Assaraf

,

,

December 30, 2024

VSCode Extension Trivia: Real or Cake?

Amit Assaraf

,

,

December 18, 2024

6/6 | Uncover Hidden Risks: CISO’s Guide to Using ExtensionTotal API for Your Organization

Amit Assaraf

,

,

July 5, 2024

5/6 | Breaking the Internet: The Aftermath Of Our Research

Amit Assaraf

,

,

June 22, 2024

Live Updates: Shai-Hulud, The Most Dangerous NPM Breach In History Affecting CrowdStrike and Hundreds of Popular Packages

Idan Dardikman

,

Yuval Ronen

,

September 16, 2025