Rethinking defense entirely We know attackers are already using AI to operate at machine speed, running more frequent and more effective attacks. They’re automating reconnaissance,…
In addition to these malicious models, threat actors have been observed using legitimate AI tools to build phishing infrastructure. In August 2025, Proofpoint reported that…
Recorded Future MCP is now generally available, giving AI agents and LLM workflows direct access to Recorded Future’s Intelligence Graph® and enabling precise, trustworthy, and…
We interviewed three Unit 42 consultants to examine the most critical cybersecurity misconceptions observed in their casework across customer environments, and the strategic shifts needed…
Ransomware does not start when files are encrypted. By then, an attacker may already have obtained valid credentials, entered the network, moved between systems and…
The intelligence community has always done things the same way: Identify a potential source (a target); make a recruitment (an agent); train, brief, and run…
Since Russia’s full-scale invasion of Ukraine in February 2022, Russia has escalated its use of hybrid, asymmetric warfare across Europe, far beyond the former Soviet…
AI agents are now running on employee devices, cloud platforms, and across developer workflows. Security teams need to see those agents, govern what they can…
Modern Endpoint Detection and Response (EDR) platforms have made traditional malware injection techniques significantly harder to execute. In most cases, if a threat actor attempts…
Recorded Future’s Insikt GroupⓇ has been tracking ClickFix, a social engineering technique that turns a familiar logo or verification prompt into the entry point for…
The physics of cybersecurity are changing. So must the security operations center (SOC). Cyberattackers are using agents to automate execution at unprecedented scale. What once…
A cairn is a marker left behind on a trail, a deliberately placed stack of stones that helps hikers find their way when the path…
