Connecting Vulnerability Intelligence to Real-World Exposure With Flashpoint EASM
The volume of vulnerability disclosures is higher than ever, yet most security teams are still struggling to act. From vulnerability scanners to public sources and…
Category: VendorResearch
Why Holistic Sourcing Wins: The Numbers Behind the Recorded Future Advantage
Part 1 of 3: Built Different — How Recorded Future’s Unique Sourcing Enables Comprehensive Intelligence Threats don’t manifest from a single place or operate in…
Reporting from Vegas: Networking, AI, and good boys
Welcome to this week’s edition of the Threat Source newsletter. Howdy friends, and hello from Cisco Live U.S., here in sunny (and very hot) Las Vegas! An…
Remembering Sir Alex Younger
There are moments when you meet a person who you immediately know will have a formative influence on you — a person you will learn…
Threat Hunting Case Study: FileFix
In a recent episode of Intel 471’s Happy Hunting series, threat hunt analyst Lee Archinal broke down FileFix, an evolution of the ClickFix copy-and-paste social…
Understanding Illicit Ecosystems: XSS and the Current State of the Russian-Speaking Underground
What is XSS? For more than two decades, XSS was the gathering ground for the Russian-speaking cybercriminal underground. Evolving from its former name, DaMaGeLaB, XSS…
LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine
In this LABScon 25 presentation, ESET researchers Matthieu Faou and Zoltán Rusnák present the first technical evidence that Gamaredon actively facilitated Turla’s access to high-value…
Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant for Endpoint Protection
As threats become more coordinated and faster to execute, endpoint protection has become the proving ground for modern defense. For the seventh consecutive time, Microsoft has…
CrowdStrike Named Leader in 2026 Gartner Magic Quadrant for Endpoint Protection
CrowdStrike has once again been named a Leader in the 2026 Gartner® Magic Quadrant for Endpoint Protection. This marks the seventh consecutive time we have…
The Mini Shai-Hulud Worm and the New Era of CI/CD Exploitation
The developer ecosystem recently faced one of its most significant architectural threats to date, with the threat actor group TeamPCP unleashing Mini Shai-Hulud—a self propagating…
Understanding Illicit Ecosystems: The Hybrid Threat of “The Com”
What is “The Com”? The Community, more widely known as “The Com” is a sophisticated hybrid threat ecosystem in which cybercrime serves as the venture…
Microsoft recognized as a Leader in The Forrester Wave for Workforce Identity Security Platforms
Identity is the backbone of modern cybersecurity. Every access decision carries risk, across employees, partners, devices, workloads, and an expanding set of AI-powered agents. But…