Threat Hunting & Intel
Cold-Chain OT Is Now a Cybersecurity Boundary: What the Refrigeration Attacks Mean
Cold-Chain OT Is Now a Cybersecurity Boundary: What the Refrigeration Attacks Mean Federal agencies are warning that malicious cyber actors are targeting indust...
Lucas Oliveira
Research
NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028
NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028 The UK's National Cyber Security Centre (NCSC) says the country should prepare for...
Lucas Oliveira
Research
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface Kaspersky’s discovery of NetamLoader shows how a highly tailored intrusion ca...
Lucas Oliveira
Research
Microsoft 365 Token Replay Campaign Hit 79 Organizations Without Defeating MFA
Microsoft 365 Token Replay Campaign Hit 79 Organizations Without Defeating MFA Executive summary MFA did not fail in a ten-week Microsoft 365 campaign tracked b...
Lucas Oliveira
Research
PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon
PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon Ransomware operators do not need to deploy an encryptor to create a business-wi...
Lucas Oliveira
Research
PoeLLM Canto Incognito: The Botnet Hiding C2 in a GitHub Poem
PoeLLM Canto Incognito: The Botnet Hiding C2 in a GitHub Poem Executive Summary Lumen's Black Lotus Labs has tracked Canto Incognito, a financially motivated ca...
Lucas Oliveira
Research
China-Linked Operators Turn Edge Devices Into a Data-Theft Workbench
China-Linked Operators Turn Edge Devices Into a Data-Theft Workbench The latest joint advisory from CISA, the FBI, NSA, and international partners is not just a...
Lucas Oliveira
Research
China-Linked Operators Blend Botnets, Phishing, and Hands-On Intrusions
China-Linked Operators Blend Botnets, Phishing, and Hands-On Intrusions U.S. and allied agencies have released a new joint advisory on China-linked cyber activi...
Lucas Oliveira
Research
Zimbra Exploitation Turns Mail Servers Into Credential Staging Points
Zimbra Exploitation Turns Mail Servers Into Credential Staging Points Attackers are exploiting CVE-2026-73570 in Zimbra Collaboration Suite as more than a quick...
Lucas Oliveira
Research
Flax Typhoon Tool Seizure Gives Defenders a Fresh Hunting Window
Flax Typhoon Tool Seizure Gives Defenders a Fresh Hunting Window U.S. authorities have disrupted two hacking tools linked to China-based Integrity Technology Gr...
Lucas Oliveira
Research
UK education networks face a wave of web-facing attacks
UK education networks face a wave of web-facing attacks UK schools, colleges, and universities are again showing why education has become one of the most diffic...
Lucas Oliveira
Research
North Korea's Contagious Interview campaign turns job tests into malware delivery
North Korea's Contagious Interview campaign turns job tests into malware delivery Executive Summary A new joint advisory from Japan, the United States, Australi...
Lucas Oliveira
Research