Mallory reported that another variation and evolution in credential theft through the software supply chain involved compromising Coder's Cloudflare-backed Terraform registry to serve tampered modules that executed credential-stealing scripts on developer infrastructure.

Mallory is the AI-native Threat & Exposure Management platform that helps security teams build an intelligent security organization. We correlate more than thousands sources of threat intelligence, from OSINT and dark web monitoring to intelligence we generate ourselves through sandbox execution, internet scanning, and our own DNS corpus, against your real attack surface through the Intelligence Graph. It's growing every day, and currently tracks 54,000+ stories, 382,000+ vulnerabilities, 10,000+ threat actors, 24,000 malware families, and 214,000 products, so every correlation reasons against a populated, constantly updating model of the threat landscape instead of a thin index. The Mallory Agent, trained as a practitioner across CTI, red teaming, vulnerability management, and security operations, turns that correlation into prioritized, routed action: CVE triage, threat hunt packs, detection gap analysis, and more. It's the correlation and triage work an analyst would otherwise spend hours on, done at a scale no team can staff for. Mallory runs on the AI stack you already have, so whether you're modernizing the stack you run today or architecting what comes next, it meets you where you are. Built by practitioners who've spent decades on the front lines, for the teams doing that work now. Get a feel for the intel we have: https://mallory.ai/intelligence

Founded 2025