Threat Hunting & Intel
CHOSEN BRICK: Iranian Spyware Targets Dissidents
CHOSEN BRICK: Iranian Spyware Targets Dissidents | 2026 Since September 15, 2026, a joint advisory from the UK's National Cyber Security Centre, the FBI, and th...
Lucas Oliveira
Research
Active Directory Compromise: 17 Techniques to Hunt
Active Directory Compromise: 17 Techniques to Hunt | 2026 Executive Summary CISA, NSA, ASD ACSC, the Canadian Centre for Cyber Security, NCSC-NZ and NCSC-UK upd...
Lucas Oliveira
Research
Malicious Browser Extensions Target Crypto Traders
Malicious Browser Extensions Target Crypto Traders | 2026 Executive Summary Socket Threat Research has disclosed a cross-browser extension operation targeting c...
Lucas Oliveira
Research
Counterfeit Installer Campaign Shows Why Download Telemetry Matters
Counterfeit Installer Campaign Shows Why Download Telemetry Matters Microsoft's latest campaign analysis is a useful reminder that initial access does not alway...
Lucas Oliveira
Research
TrueConf KEV Flaws: When a Video Server Becomes a Malware Distribution Point
TrueConf KEV Flaws: When a Video Server Becomes a Malware Distribution Point CISA has added two exploited TrueConf Server vulnerabilities to its Known Exploited...
Lucas Oliveira
Research
Russian Zimbra Campaign Turns Email Preview Into an Exfiltration Path
Russian Zimbra Campaign Turns Email Preview Into an Exfiltration Path The latest joint warning on Zimbra is worth treating as more than another [phishing](https...
Lucas Oliveira
Research
Iran-linked PLC attacks show why internet-exposed OT is now an incident-response priority
Iran-linked PLC attacks show why internet-exposed OT is now an incident-response priority U.S. agencies have updated their warning on Iran-affiliated cyber acti...
Lucas Oliveira
Research
Oracle PeopleSoft alert follows breach claims at 100+ organizations
Oracle PeopleSoft alert follows breach claims at 100+ organizations Claims of mass compromise across Oracle PeopleSoft environments were already serious on June...
Lucas Oliveira
Research
LLMShare Turns Trusted AI Domains Into Malware Delivery Infrastructure
LLMShare Turns Trusted AI Domains Into Malware Delivery Infrastructure | 2026 Executive Summary Push Security disclosed a live campaign it tracks as LLMShare, w...
Lucas Oliveira
Research
GlassWorm takedown shows how developer malware becomes supply-chain risk
GlassWorm takedown shows how developer malware becomes supply-chain risk Executive Summary The coordinated disruption of GlassWorm on May 26, 2026 is useful bec...
Lucas Oliveira
Research
AI-Assisted Search Poisoning Fuels ScreenConnect Cryptojacking
AI-Assisted Search Poisoning Fuels ScreenConnect Cryptojacking Executive Summary Microsoft disclosed an active campaign on May 26, 2026 in which attackers push...
Lucas Oliveira
Research
Kazuar’s redesign turns a familiar backdoor into a harder-to-hunt botnet
Kazuar’s redesign turns a familiar backdoor into a harder-to-hunt botnet Microsoft’s latest research on Kazuar matters because it reframes the malware from a we...
Lucas Oliveira
Research