Koi Security — Cyber Attacks, Breaches & Threat Activity

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
October 30, 2025
Last Seen
July 2, 2026

Koi Security is a organization tracked across 4 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed October 30, 2025; most recent activity July 2, 2026.

Related Threat Clusters

  • MeetingTV Sues Koi Security Over AI-Generated Espionage Claims

    MeetingTV has filed a lawsuit against Koi Security, a subsidiary of Palo Alto Networks, claiming that a blog post published on December 30 falsely linked its services to a Chinese espionage operation. The report,…

    7 articles · Updated July 3, 2026
  • Zero-Click RCE Vulnerability Discovered in Claude Desktop Extensions

    A zero-click remote code execution (RCE) vulnerability has been identified in Claude Desktop Extensions, allowing attackers to compromise systems through a single Google Calendar event. This flaw affects over 10,000…

    23 articles · Updated February 9, 2026
  • PhantomRaven Malware Campaign Targets npm Packages

    A malware campaign named PhantomRaven has been active since August 2025, compromising 126 npm packages and stealing developer credentials, including npm tokens and GitHub credentials. Researchers at Koi Security…

    8 articles · Updated November 15, 2025
  • Palo Alto Networks Negotiates $400M Acquisition of Koi Security

    Palo Alto Networks is in discussions to acquire Koi Security, an Israeli endpoint security firm, for $400 million. This potential acquisition marks the first deal involving an Israeli company since Nir Zuk stepped down…

    5 articles · Updated January 5, 2026

Recent Intelligence Reports

  • Startup sues Palo Alto Networks' Koi Security, saying an AI — Theregister · July 2, 2026
  • Palo Alto Networks in talks to acquire Koi Security for $400m — Verdict · January 5, 2026
  • Claude Desktop Extensions Vulnerable to Web — Infosecurity-Magazine · November 5, 2025
  • Hidden npm Malware Exposes New Supply Chain Weakness — Esecurityplanet · October 30, 2025

CVSS v3.1 Breakdown