Get a demo
    When geopolitics goes digital: NATO, Russia, and state-backed cyber attacks
    When geopolitics goes digital: NATO, Russia, and s...

    Fast Facts Russia’s escalating conflict with NATO has moved beyond the battlefield combining...
    XWorm RAT analysis: Steal,
 persist & control
    XWorm RAT analysis: Steal,
 persist & control

    XWorm is a stealthy remote access tool that often arrives in an ordinary message and can end...
    Citrix Vulnerabilities Rising – When Gateways Give Way
    Citrix Vulnerabilities Rising – When Gateways Give...

    Citrix has issued an urgent warning about multiple vulnerabilities in NetScaler ADC and...
    APT28’s New Arsenal: LAMEHUG, the First AI-Powered Malware
    APT28’s New Arsenal: LAMEHUG, the First AI-Powered...

    Over the past few years, we’ve all been aware of the devastating war that has unfolded between...
    ToolShell: When SharePoint Becomes a Gateway to RCE
    ToolShell: When SharePoint Becomes a Gateway to RC...

    By Ujwal Thapa and Anish Bogati; Security Research Microsoft’s Security Response Center (MSRC)...
    The Impacket Arsenal: A Deep Dive into Impacket Remote Code Execution Tools
    The Impacket Arsenal: A Deep Dive into Impacket Re...

    In today’s evolving threat landscape, we continually see new threat actors emerge and novel...
    Frontline Intel: Pinpointing GRU’s TTPs in the Recent Campaign
    Frontline Intel: Pinpointing GRU’s TTPs in the Rec...

    Joint Cybersecurity Advisory (CSA) AA25-141Aexposes a sustained and multifaceted...
    Tricked by trust: How OAuth and device code flows get abused
    Tricked by trust: How OAuth and device code flows ...

    In today’s cloud-first environments, access tokens have become the new keys to the kingdom....
    Kubernetes Threat Hunting using API Server Audit Logs
    Kubernetes Threat Hunting using API Server Audit L...

    Kubernetes has emerged as the preferred platform for deploying and managing containerized...
    From Exploit to Ransomware: Detecting CVE-2025-29824
    From Exploit to Ransomware: Detecting CVE-2025-298...

    The Microsoft Security blog highlights the active exploitation of CVE-2025-24983, a zero-day...
    ClickFix: Another Deceptive Social Engineering Technique
    ClickFix: Another Deceptive Social Engineering Tec...

    Fast Facts ClickFix, first observed in mid-2024, represents a sophisticated form of social...
    Windows Shell Link Vulnerability ZDI-CAN-25373: Detecting Hidden Commands
    Windows Shell Link Vulnerability ZDI-CAN-25373: De...

    One of the latest vulnerabilities disclosed by TrendMicro, ZDI-CAN-25373, exposes a flaw in...