Malware Indicators of Compromise (IoCs)
One malware hash can turn a vague alert into a concrete investigation. Analysts can search endpoints for the exact file, trace where it appeared, and…
Category: VendorResearch
The Enterprise Threat Intelligence Report: 2026
Threat intelligence teams are heading into 2027 with more than ever to monitor, driven by an acceleration in the AI threat landscape. However, their expanded…
Proofpoint Banks on Intent‑Based Detection
Managed service providers (MSPs) are facing a new wave of cyberattacks that look indistinguishable from everyday business activity. At the Protect26 conference, Proofpoint Inc. unveiled…
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Ravie LakshmananSep 24, 2026Cloud Security / Identity Security Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700…
Recorded Future Introduces AI Infrastructure Indicator Lists, Strengthening AI Governance
Today, Recorded Future is announcing AI Infrastructure Indicator Lists, curated datasets for security teams to identify, monitor, and implement controls for AI-related network traffic. AI…
CastleStealer: An Emerging Infostealer Growing More Sophisticated
First discovered in April 2026, CastleStealer is a C#-based information-stealing malware that has continued to add new capabilities since its emergence. Newer samples analyzed by…
Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
“AI-analysis evasion” encapsulates the real-world techniques malware authors are developing in attempt to obstruct or defeat any layers of automated AI analysis. This technique is…
Evolution of Web3 in Cloud Supply Chain Attacks
Executive Summary Threat actors have systematically upgraded their command-and-control (C2) infrastructure to use Web3, also known as Web 3.0 or decentralized blockchain web architectures. This…
Agentic Hunting Needs Guardrails. Start With Your Methodology.
Automate to amplify your hunters, but be careful not to over-automate analyst reasoning. Is your team running each new threat report through AI to generate…
Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
In this article In the agentic era, the stakes are higher: AI agents now act with real access to your identities, your data, and your…
Preparing governments for an era of interconnected cyber risk
According to this year’s Microsoft Digital Defense Report, government agencies and services were the sector most impacted by cyber threats in 2026, accounting for 27%…
Ransomware Risk Model: Flashpoint’s Patented Scoring Method to Inform Vulnerability Prioritization
Vulnerability and exposure management (VM) teams need critical metadata and context that clearly show which issues pose an immediate risk to their organization. While traditional…