Research reports
TopicAll topics
PublisherAll publishers
- All publishers1,259
- Check Point99
- DataBreaches.net51
- GitHub50
- MITRE ATT&CK44
- Mandiant (Google)33
- Microsoft31
- Group-IB29
- Recorded Future22
- ETDA Threat Group Cards20
- Medium20
- Unit 4220
- Trend Micro19
- CISA18
- ESET17
- Malpedia15
- Team Cymru15
- ANSSI (CERT-FR)13
- Intezer13
- US Department of Justice13
- FBI IC312
- Virus Bulletin11
- PhishLabs10
- Elastic Security Labs9
- Intrinsec9
- SecurityScorecard9
- Cisco Talos8
- Kaspersky8
- Proofpoint8
- SOCRadar8
- The Hacker News8
SortNewest added
141–160 of 1,259 reports · page 8 of 63
Added Sun 18 Oct
Unit 42 · Web page · Published 16 Oct
Unit 42 - Latest Cyber Security Research
Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these…
Kudelski Security · Web page · Added 18 Oct
Kudelski Security Research
Clifford (Kudelski Security), Coline C., Saee V. and the Sekoia TDR Team. This research was conducted in partnership between Kudelski Security and Sekoia, with contributions from Clifford (Kudelski Security), Coline C., Saee V. and the Sekoia TDR Team. Key…
eweek.com · Web page · Published 6 Apr
Chinese Nation-State Hackers Target U.S in Operation TradeSecret, Report Claims
The National Foreign Trade Council (NFTC) website was allegedly infiltrated by Chinese nation-state threat actors, according to a new report from Fidelis Cybersecurity. The attack against the NFTC site has been dubbed ‘Operation TradeSecret’ by Fidelis and is…
Unit 42 · Web page · Published 16 Oct
Unit 42 - Latest Cyber Security Research
Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these…
PRODAFT · Web page · Added 18 Oct
LARVA-208
(EncryptHub) is a threat actor that has come to the forefront with highly sophisticated spear-phishing attacks since 26 June 2024. In the attacks it has carried out, it exhibits a different operational strategy by carrying out all the processes necessary to…
WIRED · Web page · Published 15 Sep
Hack Brief: Emergency-Number Hack Bypasses Android Lock Screens
If you protect your Android phone with a password rather than an unlock pattern or PIN, you may want to keep it in your sight a little more carefully than usual. A new, dead-simple attack could allow anyone who gets their hands on it to bypass that password…
Unit 42 · Web page · Published 16 Oct
Unit 42 - Latest Cyber Security Research
Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these…
support.signal.org · Web page · Added 18 Oct
Linked Devices
You can link a Desktop, iPad, iPhone, or Android device (tablet or phone) to your primary Signal Device. All Signal communication on linked devices is private, just like your smartphone. Note: A device can only be linked a device during the registration flow,…
Unit 42 · Web page · Published 16 Oct
Unit 42 - Latest Cyber Security Research
Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these…
Unit 42 · Web page · Published 16 Oct
Unit 42 - Latest Cyber Security Research
Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these…
Medium · Web page · Published 10 Jun
Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:
2019 was an excellent year for the Taiwan superconductor industry; however, beneath this economic upturn, a digital chimera was slowly eating at it from within. Throughout 2019, multiple companies in the Taiwan high-tech ecosystem were victims of an advanced…
Infosec Institute · Web page · Published 8 Jul
Animal Farm APT and the Shadow of French Intelligence
Almost every government is working to improve its cyber-capabilities. The majority of them already have in their arsenal powerful espionage malware and hacking platforms. We read about the techniques and tactics implemented by a number of APT groups from…
Added Sat 17 Oct
Added Fri 16 Oct
GitHub · Web page · Added 16 Oct
cti/runster/readme.md at main · cert-orangecyberdefense/cti
Update (2026-06-17): our related "Payload C" is likely tied to MetaStealer and was recently detailed by Huntress, which named it Potemkin loader. Another blog by Walmart on this new DGA is available here. Orange Cyberdefense CERT has been tracking a…
Mandiant (Google) · Web page · Published 14 Sep
Why Are You Texting Me? UNC3944 Leverages SMS Phishing Campaigns for SIM Swapping, Ransomware, Extortion, and Notoriety
UNC3944 is a financially motivated threat cluster that has persistently used phone-based social engineering and SMS phishing campaigns (smishing) to obtain credentials to gain and escalate access to victim organizations. At least some UNC3944 threat actors…
rogueauthority.org · Web page · Published 9 Oct
A signed PDF viewer that quietly takes orders: the QuartzLine “zenith” backdoor
About this post: This analysis and write-up were produced by Claude (Opus 5.5), an AI model by Anthropic, working as an agent in Claude Code on a REMnux analysis VM. Tools used: Malcat (including KesaKode), capstone, Python, capa, FLOSS, StringSifter,…
Gen Digital · Web page · Published 8 Oct
Warden Stealer: The Rapid Rise of an Infostealer with an Appetite for AI Agent Data
Gen Threat Labs has been tracking Warden Stealer, an emerging and actively developed malware-as-a-service (MaaS) infostealer written in the Rust programming language that has, within just a few months, already become one of the most prevalent infostealers in…
Added Wed 14 Oct
prod.website-files.com · PDF · Added 14 Oct
ai_breach_mex_gov.docx
Eyal Sela, Director of TI, Gambit Security | https://gambit.security 1 Overview Between late December 2025 and mid-February 2026, a threat actor breached at least nine Mexican government organizations at federal, state, and municipal levels. The threat actor…
Trend Micro · Web page · Added 14 Oct
Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed
In August 2025, we investigated a new ransomware campaign orchestrated by The Gentlemen, an emerging and previously undocumented threat group. This threat actor quickly established itself within the threat landscape by demonstrating advanced capabilities…
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.