Organization

Datadog

0 mentions in 7 days · 3 in 30 days · 3 total · first seen Aug 19, 2026 · last 15d ago

Timeline3 articles

Password spraying campaign targets AWS root user accounts across 150+ organizations

Datadog researchers observed a password spraying campaign attempting to authenticate as AWS root users across 150+ organizations.

Datadog Security Research observed a large-scale password spraying campaign attempting to authenticate as AWS root user accounts across more than 150 organizations. The campaign targeted root credentials rather than standard IAM users, and no confirmed compromises are stated in the report. Root account access would grant full control of affected AWS environments, making this a significant credential-attack campaign for cloud defenders.

Datadog Security LabsAug 31, 00:00 UTC · 15d agoThreat actor in the wild

N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it

Datadog researchers detonated a new N4D Mesh Controller sample in microVMs, revealing rotated infrastructure, a UPX-packed go-titan agent, and persistence behavior.

Datadog Security Research executed a newer N4D Mesh Controller sample in isolated microVMs, uncovering rotated command infrastructure and a UPX-packed agent labeled go-titan. Runtime evidence showed MCP tool abuse, multi-service scanning, and persistence mechanisms. The report provides hunting guidance for defenders tracking this infrastructure.

Datadog Security LabsAug 20, 00:00 UTC · 26d agoMalware

Putting models to the secure coding test: Plan vs default mode

Datadog Security Labs tested Sonnet 5, Composer 2.5, and GPT 5.5 to see if plan mode yields more secure code than default mode.

Datadog Security Labs evaluated whether plan mode produces measurably more secure code than default mode. The test covered three frontier coding models: Sonnet 5, Composer 2.5, and GPT 5.5. The results inform how engineering teams should configure AI coding assistants to reduce insecure code. This is an AI security evaluation, not an incident report.

Datadog Security LabsAug 19, 00:00 UTC · 27d agoAI safety & security

Appears with

vendor Datadog 2 malware go-titan 1 malware N4D Mesh Controller 1 ai model Composer 2.5 1 ai model GPT 5.5 1 ai model Sonnet 5 1 product AWS root user 1 product Datadog Security Labs 1 vendor Amazon Web Services 1 threat actor N4D Mesh Controller 1 victim 150+ organizations 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.