Threat Hunting & Intel
Posts in Threat Hunting & Intel. 51 articles.
Threat Hunting & Intel|2 min read
NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028
Read More
Threat Hunting & Intel|4 min read
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface
Read More
Threat Hunting & Intel|4 min read
Microsoft 365 Token Replay Campaign Hit 79 Organizations Without Defeating MFA
Read More
Threat Hunting & Intel|4 min read
PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon
Read More
Threat Hunting & Intel|4 min read
PoeLLM Canto Incognito: The Botnet Hiding C2 in a GitHub Poem
Read More
Threat Hunting & Intel|5 min read
China-Linked Operators Turn Edge Devices Into a Data-Theft Workbench
Read More
Threat Hunting & Intel|4 min read
China-Linked Operators Blend Botnets, Phishing, and Hands-On Intrusions
Read More
Threat Hunting & Intel|4 min read
Zimbra Exploitation Turns Mail Servers Into Credential Staging Points
Read More
Threat Hunting & Intel|6 min read
Flax Typhoon Tool Seizure Gives Defenders a Fresh Hunting Window
Read More
Threat Hunting & Intel|8 min read
UK education networks face a wave of web-facing attacks
Read More
Threat Hunting & Intel|8 min read
North Korea's Contagious Interview campaign turns job tests into malware delivery
Read More
Threat Hunting & Intel|4 min read
Operation RapidRust shows APT36 evolving beyond simple phishing lures
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- NIKKE PC Launcher Compromise Turns a Trusted Update Path into a Malware Delivery Channel
- XCPE Backdoor Turns Android TV Boxes into a Supply-Chain Botnet
- NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028
- Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active
- GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue