Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,259 reports391 publishers75 added in the past week

1–20 of 1,259 reports · page 1 of 63

Added Thu 29 Oct

Team Cymru · Web page · Added 29 Oct
Team Cymru Cybersecurity Blog
Who Team Cymru threat analysts and researchers, with a named byline on technical posts. What pivots behind them. How reporting. Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn Named threat…
Original (new tab)
Team Cymru · Web page · Added 29 Oct
Team Cymru Cybersecurity Blog
Who Team Cymru threat analysts and researchers, with a named byline on technical posts. What pivots behind them. How reporting. Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn Named threat…
Original (new tab)
Team Cymru · Web page · Added 29 Oct
Team Cymru Cybersecurity Blog
Who Team Cymru threat analysts and researchers, with a named byline on technical posts. What pivots behind them. How reporting. Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn Named threat…
Original (new tab)
Check Point · Web page · Published 12 Dec
November 2023’s Most Wanted Malware: New AsyncRAT Campaign Discovered while FakeUpdates Re-Entered the Top Ten after Brief Hiatus
Researchers reported on a new AsyncRAT campaign where malicious HTML files were being used to spread the stealthy malware. Meanwhile, downloader FakeUpdates jumped straight into second place after a short break from the top ten list Our latest Global Threat…
Malware Original (new tab)
shaddy43.com · Web page · Published 13 Oct
Breaking Akira’s Clock: Recovering Files Without the Ransom Key
Malware Analysis Series · 13 October 2026 · updated 23 October 2026 · by shaddy43 An Akira-branded Windows encryptor builds every file key from the machine’s uptime. We take it apart function by function, show how a responder can turn that into decrypted…
Ransomware Original (new tab)
shaddy43.com · Web page · Added 29 Oct
Emotet Malware Analysis: VBS Dropper, Fileless X.dll and ECDH C2
Emotet is a sophisticated, modular form of malware that initially emerged as a banking Trojan in 2014 but has evolved over the years to become a highly prevalent and versatile threat. Known for its ability to deliver additional malware payloads and act as a…
Malware Original (new tab)
Team Cymru · Web page · Added 29 Oct
Team Cymru Cybersecurity Blog
Who Team Cymru threat analysts and researchers, with a named byline on technical posts. What pivots behind them. How reporting. Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn Named threat…
Original (new tab)
jamf.com · Web page · Added 29 Oct
CloudSyncD: a two-stage macOS backdoor that hides a phished password in zero-width Unicode
Jamf Threat Labs uncovers CloudSyncD, a fake Zoom installer disguised as a legitimate application that uses a phished login password to launch an embedded backdoor while concealing the credential inside a decoy configuration file. September 30 2026 by Jamf…
Malware Phishing Original (new tab)
Team Cymru · Web page · Added 29 Oct
Team Cymru Cybersecurity Blog
Who Team Cymru threat analysts and researchers, with a named byline on technical posts. What pivots behind them. How reporting. Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn Named threat…
Original (new tab)
SOCRadar · Web page · Published 12 Oct
Inside ICMacOS: From an Infostealer to a Persistent RAT
Over the past few years, Apple’s enterprise footprint has expanded significantly, with macOS capturing an important share of the global desktop operating system market. Modern enterprise adoption has surged, particularly in the United States, where roughly…
Malware Infostealers Original (new tab)
Check Point · Web page · Published 10 Apr
The Muddy Waters of APT Attacks
The Iranian APT, MuddyWater, has been active since at least 2017. Most recently though, a new campaign, targeting Belarus, Turkey and Ukraine, has emerged that caught the attention of Check Point researchers. Ever since at least 2017, the attackers behind…
State-sponsored Original (new tab)
SentinelOne · Web page · Added 29 Oct
Resource Center
Iress Customer Success Story: Safeguarding Global Financial Markets (Video) SentinelOne Watch SentinelOne Read Safeguarding Global Financial Markets: How Iress Unifies Defense and Accelerates Threat Hunting with Iress Customer Success Story: Safeguarding…
Original (new tab)
Check Point · Web page · Published 3 Dec
Inside Akira Ransomware's Rust Experiment
Check Point Research analyzed the construction and control flow of Akira ransomware’s Rust version that circulated in early 2024, which has specific features uniquely targeting ESXi server. Our analysis demonstrates how Rust idioms, boilerplate code, and…
Ransomware Original (new tab)
Team Cymru · Web page · Added 29 Oct
Team Cymru Cybersecurity Blog
Who Team Cymru threat analysts and researchers, with a named byline on technical posts. What pivots behind them. How reporting. Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn Named threat…
Original (new tab)
Team Cymru · Web page · Added 29 Oct
Team Cymru Cybersecurity Blog
Who Team Cymru threat analysts and researchers, with a named byline on technical posts. What pivots behind them. How reporting. Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn Named threat…
Original (new tab)
russianpanda.com · Web page · Published 26 Dec
Pure Logs Stealer Fails to Impress
Pure Logs Stealer first appeared on hacking forums at the end of October 2022. The stealer is developed by a malware developer going under the alias PureCoder. The malware developer is also behind in developing the products shown above, such as Pure Miner,…
Malware Infostealers Original (new tab)
Elastic Security Labs · Web page · Published 12 Oct
Auditing the auditor: Unmasking Apex Accelerator
Elastic Security Labs identified a malicious npm package, @apexacc/cli , which led us to an operation posing as a Web3 accelerator. That operation had spent months building a public presence, targeting cryptocurrency start-ups and founders with offers of free…
Malware Original (new tab)
Team Cymru · Web page · Added 29 Oct
Team Cymru Cybersecurity Blog
Who Team Cymru threat analysts and researchers, with a named byline on technical posts. What pivots behind them. How reporting. Threat research, infrastructure analysis, and operational guidance from the Team Cymru intelligence team, drawn Named threat…
Original (new tab)
cyfirma.com · Web page · Added 29 Oct
Exploiting Document Templates: Stego-Campaign Deploying Remcos RAT and Agent Tesla
At CYFIRMA, our commitment is to provide timely insights into prevalent threats and malicious tactics affecting both organizations and individuals. Our research team recently identified a malicious .docx file linked to the stego-campaign, revealing a…
Malware Vulnerabilities Original (new tab)
polyswarm.io · Web page · Added 29 Oct
UNC4841 Targeting Government Entities with Barracuda ESG 0day
Verticals Targeted: Government, Military, Defense, Aerospace, Technology, Telecommunications Executive Summary UNC4841 was observed using CVE-2023-2868 to target entities in multiple verticals, including government and military. Key Takeaways government and…
State-sponsored Vulnerabilities Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.