No Manners Here: The Ruthless Rise of The Gentlemen Ransomware
Executive Summary The Gentlemen (aka Storm-2697) is a Ransomware-as-a-Service (RaaS) program active since at least July 2025. Public reporting indicates that the operators were likely…
Category: VendorResearch
June 2026 CVE Landscape
In June 2026, Insikt Group® identified 60 high-impact vulnerabilities that should be prioritized for remediation, 30 of which had a Very Critical Recorded Future Risk…
RiskX interview video featuring Colin Mahony and Mastercard’s Aditi Sawhney
Every fraud investigator knows the pattern: the fraudulent charge is the first thing anyone notices and the last thing the attacker actually does. Before it…
The Threat Isn’t the Frontier Model
Summer ‘26 vibes: international flights, Riyadh heat, and plentiful CISO conversations. Every conversation (regardless of geographic location or industry vertical) currently begins and ends with…
Industrial threat report for Q1 2026
All threats The percentage of ICS computers on which malicious objects were blocked continued to decrease, reaching 19.6% in Q1 2026. This is the lowest…
5 insights from Frost & Sullivan’s 2025 Frost Radar for Cloud Security Posture Management
Cloud security posture management (CSPM) is being redefined as two forces collide: Cloud environments are becoming more interconnected—spanning workloads, identities, data, APIs, and development pipelines—while…
OpenAI Lets Cyber Vendors Embed GPT-5.5 in Defenses
Agentic AI , Artificial Intelligence & Machine Learning , Next-Generation Technologies & Secure Development Daybreak Cyber Partner Program Extends GPT-5.5 Beyond Internal Security Use Michael…
Context Engineering | Compaction & Agent Memory for Automated Malware Analysis
Executive Summary Compaction is a context-management pattern used across agent systems to compress prior context into a denser working state for long-running tasks. SentinelLABS evaluated…
New Cargo Theft Surge: From Lobster Heists To Bourbon Warehouse Scams
Illustration of a long shadow truck with a thief getty Last January, I told you about the great lobster heist where criminals stole 40,000 pounds…
Remus Stealer: A New, Not-So-New Infostealer
The underground marketplace rarely stays quiet for long. A new information-stealing malware dubbed Remus Stealer has surfaced in the cybercrime underground, exhibiting significant similarities to…
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
Cisco Talos identified a fully-featured phishing-as-a-service (PhaaS) operator panel, branded “ARToken,” that shares infrastructure, API contracts, and operational patterns with the EvilTokens platform documented by…
CVE-2024-2658 vulnerability in Schneider Electric software: risks to industrial control systems
About the vulnerability The CVE-2024-2658 vulnerability was discovered in 2024 within the FlexNet Publisher component of the Schneider Electric Floating License Manager. This software handles…