Research reports
1,224 reports from 387 publishers45 added in the past week
187 reports, newest added first
Added Sun 18 Oct
Threat Intelligence Blog
Flashpoint’s weekly analysis tracks shifting kinetic and cyber threat radiuses, geopolitical disruptions, and provides critical operational forecasts for the ongoing Middle East conflict. Insider Threats targeting enterprise environments. Insider Threat…
GitHub - FallenAstaroth/stink: the cutest python-native infostealer
No excerpt available.
Infostealers
New ATM Malware Captures PINs and Cash -- Updated
Security researchers have found malware planted on ATMs in Eastern Europe that captures PINs and magnetic stripe data from the machine's memory and instructs the machines to spit out cash, eliminating the need for primitive skimming devices and advancing the…
Malware
GitHub - GhostPack/SafetyKatz: SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
First, the MiniDumpWriteDump Win32 API call is used to create a minidump of LSASS to C:\Windows\Temp\debug.bin. Then @subtee's PELoader is used to load a customized version of Mimikatz that runs sekurlsa::logonpasswords and sekurlsa::ekeys on the minidump…
Malware
Kazuar (Malware Family)
There is no description at this point. References 2026-06-25 ⋅ Google ⋅ Google Threat Intelligence Group The Latest Addition to Turla’s Intelligence Gathering Apparatus Kazuar 2026-05-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence Kazuar: Anatomy of a…
State-sponsoredMalware
Mandiant Cybersecurity Consulting
Elevate your cyber defense, from incident response to business resilience. Mandiant Cybersecurity Consulting Elevate your cyber defense, from incident response to business resilience. Cyber Defense Summit 2026 Watch the keynotes on YouTube M-Trends 2026 Stay…
FIN8: BADHATCH Threat Indicator Enrichment
FIN8 research identifies ongoing campaigns against entities in Germany, Sweden and the US. Last week (10 March 2021), Bitdefender released a whitepaper on the recent activities of the FIN8 threat actor group, focusing particularly on their BADHATCH…
Jackpotting malware
Jackpotting malware is not well known because it exclusively targets automated teller machines (ATMs). This means it usually doesn’t directly affect a large number of people. However, this type of malware may seriously harm the reputation and the financial…
Malware
Inside DiamondFox
Last time we looked at the overview of the latest release – Crystal Version – and we got a good look at what the bot is supposed to be doing. We also got a top-level look at the architecture. Then, as promised, I turned it over to our reversing guru,…
"dirsearch brute force directories and" — Tools
Data collected and processed: IP addresses, Device characteristics, Device identifiers, Proba
Enhancing cybersecurity situation awareness through visualization: A USB data exfiltration case study
By CorrespondenceCorresponding author.Send email to mhmchung@gmail.com Abstract Employees who have legitimate access to an organization's data may occasionally put sensitive corporate data at risk, either carelessly or maliciously. Ideally, potential breaches…
Operation Lotus Blossom (Reports)
Secure with AI cybersecurity, fraud and ransomware prevention, compliance, and customer data protection Manufacturing Secure with OT security, ransomware defense, industrial cybersecurity, supply chain resilience, and continuity Retail and Hospitality Secure…
Ransomware
skanthak.homepage.t-online.de/sentinel.html
The Vulnerability and Exploit Detector for Microsoft® Windows™ NT SENTINEL.DLL and SENTINEL.EXE . consists of the inde
Vulnerabilities
rapid7.com/db/modules/exploit/linux/local/service_persistence
Capabilities Attack Surface Management Reveal & protect coverage gaps Exposure Management Identify & remediate at-risk data Vulnerability Management Pinpoint & eliminate risk CyberGRC Manage governance, risk & compliance Next-Gen SIEM Investigate with…
Vulnerabilities
Unit 42 - Latest Cyber Security Research
Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these…
Resecurity | Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise
Tuesday, June 16, 2026, 10:11 UTC — The education technology (EdTech) sector has become a prime target for cybercriminals as attacks against educational institutions and related platforms continue to escalate. With sensitive data, including student records,…
Ransomware
assoc
Displays or modifies file name extension associations. If used without parameters, assoc displays a list of all the current file name extension associations. Note This command is only supported within cmd.exe and is not available from PowerShell. Though you…
Unit 42 - Latest Cyber Security Research
Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these…
UK Cybercrime Journal: Arup Group Breached by FulcrumSec
On 10 May 2026, the UK-based firm Arup Group was listed as a victim on the Tor data leak site of FulcrumSec. On their Tor data leak site, FulcrumSec stated that they have exposed 700GB of GitHub repos and 2TB of Azure and AWS S3 cloud, plus database backups.…
Virtual Machine Guest Operations Privileges
Virtual Machine Guest Operations privileges control the ability to interact with files and applications inside a virtual machine's guest operating system with the API. Virtual Machine Guest Operations Privileges Virtual Machine Guest Operations privileges…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.