RiskX interview video featuring Colin Mahony and Mastercard’s Aditi Sawhney
Every fraud investigator knows the pattern: the fraudulent charge is the first thing anyone notices and the last thing the attacker actually does. Before it…
Category: VendorResearch
The Threat Isn’t the Frontier Model
Summer ‘26 vibes: international flights, Riyadh heat, and plentiful CISO conversations. Every conversation (regardless of geographic location or industry vertical) currently begins and ends with…
Industrial threat report for Q1 2026
All threats The percentage of ICS computers on which malicious objects were blocked continued to decrease, reaching 19.6% in Q1 2026. This is the lowest…
5 insights from Frost & Sullivan’s 2025 Frost Radar for Cloud Security Posture Management
Cloud security posture management (CSPM) is being redefined as two forces collide: Cloud environments are becoming more interconnected—spanning workloads, identities, data, APIs, and development pipelines—while…
OpenAI Lets Cyber Vendors Embed GPT-5.5 in Defenses
Agentic AI , Artificial Intelligence & Machine Learning , Next-Generation Technologies & Secure Development Daybreak Cyber Partner Program Extends GPT-5.5 Beyond Internal Security Use Michael…
Context Engineering | Compaction & Agent Memory for Automated Malware Analysis
Executive Summary Compaction is a context-management pattern used across agent systems to compress prior context into a denser working state for long-running tasks. SentinelLABS evaluated…
New Cargo Theft Surge: From Lobster Heists To Bourbon Warehouse Scams
Illustration of a long shadow truck with a thief getty Last January, I told you about the great lobster heist where criminals stole 40,000 pounds…
Remus Stealer: A New, Not-So-New Infostealer
The underground marketplace rarely stays quiet for long. A new information-stealing malware dubbed Remus Stealer has surfaced in the cybercrime underground, exhibiting significant similarities to…
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
Cisco Talos identified a fully-featured phishing-as-a-service (PhaaS) operator panel, branded “ARToken,” that shares infrastructure, API contracts, and operational patterns with the EvilTokens platform documented by…
CVE-2024-2658 vulnerability in Schneider Electric software: risks to industrial control systems
About the vulnerability The CVE-2024-2658 vulnerability was discovered in 2024 within the FlexNet Publisher component of the Schneider Electric Floating License Manager. This software handles…
Where Expertise Meets Algorithm: The Insikt Group® Intelligence Edge
In the previous article in our series on Recorded Future’s unique data sourcing model, we detailed the four types of data we analyze and how,…
Securing AI agents: When AI tools move from reading to acting
In this article As enterprise deployments mature, some enterprise AI agents are shifting from reading content to taking action. In this post, Microsoft Incident Response…