Ransomware is the Scoreboard
13,000. That’s the number of ransomware victims Recorded Future has observed over the past two years. Watching the near-real-time ransomware attacks on businesses, non-profits, and…
Category: VendorResearch
Don’t swing at everything
Welcome to this week’s edition of the Threat Source newsletter. Lately I’ve found myself thinking a lot about the Australian TV series Mr. Inbetween (IMDb…
AI Threat Detection Is Not Enough Without Adversary Intelligence
AI is changing the economics of cyber offense. The 2026 emergence of Anthropic’s Claude Mythos Preview showed security leaders that AI can now find software…
Modern Attack Vectors | Recorded Future
Key Takeaways For today’s Chief Information Security Officers (CISOs) and security team leaders, defending your business can feel like trying to hold back the ocean.…
Understanding Illicit Ecosystems: Inside Rehub’s Rise as a Primary Ransomware Marketplace
What is Rehub? Rehub, also known as ReHub or RehubCom, is a Russian-language cybercrime forum founded in August 2025 by a former XSS moderator following…
New BitLocker extortion activity: RDP, MSSQL, RMM Abuse
Recently, our teams in Latin America investigated a series of incidents involving misconfiguration, the deployment of BitLocker, and the exploitation of corporate printers. Attackers used…
Threat Hunting: A Guide | Recorded Future
Enterprise security architectures have never been more heavily funded, yet the perimeter is functionally obsolete. Despite multi-million dollar investments in next-generation firewalls and complex defense…
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The…
Inside Qilin Ransomware: Custom Rust Loader and Kernel-Level EDR Killer
Qilin ransomware is a highly active and sophisticated ransomware operation that has rapidly modernized its evasion techniques. Historically focused on file encryption, the ransomware-as-a-service (RaaS)…
Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
In this article Across the threat landscape, in this moment, one pattern sits at the center of the story: threat actors are following trust. They…
Tracking Advanced Persistent Threat Groups
Key takeaways Advanced Persistent Threats (APTs) are sophisticated, long-term cyber campaigns conducted by well-funded human adversaries (often nation-states) who target specific organizations for espionage, data…
Least privilege for AI agents: Identity, access, and tool binding
In this article AI agents aren’t only smarter API callers. They plan, chain actions across systems, and invoke tools in sequences while no single human…