Research reports

Vendor, government and researcher reports that CyberSIXT links from its coverage, with their publishers and topics.

1,259 reports391 publishers75 added in the past week

161–180 of 1,259 reports · page 9 of 63

Added Wed 14 Oct

hkcert.org · Web page · Added 14 Oct
Defacement Attacks: Understanding and Prevention
What is Defacement Attacks? Defacement attacks occur when malicious actors infiltrate a website online or a digital advertising panel device hardware, and replace its content with their own messages. These messages can range from political or religious…
Original (new tab)
IBM X-Force · Web page · Published 8 Aug
What is Asymmetric Encryption?
Asymmetric encryption is an encryption method that uses two different keys—a public key and a private key—to encrypt and decrypt data. It’s generally regarded as more secure, though less efficient, than symmetric encryption. Almost everything people do on…
Original (new tab)
digiday.com · Web page · Published 6 Jul
WTF is AI poisoning?
This article is a WTF explainer, in which we break down media and marketing’s most confusing terms. More from the series → Marketers have been trying to game LLM responses to suit their brands since users began turning to AI for search. In recent months,…
AI Original (new tab)
wandera.com · Web page · Added 14 Oct
Jamf Apple Device Management. Mac iPad iPhone TV Apple MDM
Govern AI on Mac. Manage all of Apple. The control plane for enterprise AI, built on the platform that manages and secures every Apple device. We help organizations succeed with Apple at scale. Whether you have a handful of Mac, iPhone, iPad, Apple Watch,…
Mobile Original (new tab)
pushsecurity.com · Web page · Published 26 Jun
App-Specific Password phishing and how to prevent it
App-Specific Passwords (ASPs) are a way for users to access applications that do not support MFA or are otherwise incompatible with a platform’s standard login workflows. They are intended to enable a user to login to “legacy” (typically desktop) applications…
Phishing Original (new tab)
Mandiant (Google) · Web page · Published 12 May
Beyond source code: The files AI coding agents trust — and attackers exploit
As AI coding agents become deeply embedded in developer workflows, defenders must evolve their definition of malicious files and rethink how to protect against them. Autonomous AI agents operate across integrated development environments (IDEs), editors,…
Vulnerabilities Original (new tab)
Anthropic · Web page · Added 14 Oct
Countering misuse of AI: September 2026 / Anthropic
Over the past eight months, our Threat Intelligence team identified and disrupted operations in which threat actors tried to use Claude for malicious activity. In this report, we share case studies from those operations and describe how malicious use of…
Original (new tab)
ox.security · Web page · Published 12 May
Shai-Hulud Goes Open Source: Malware Creators Leak Their Own Code to GitHub
Breaking News: TeamPCP has gone open source — and the copycats are already here. The group behind Shai-Hulud has leaked their own malware code to GitHub, and independent threat actors have already begun modifying it and expanding its reach. OX Security is…
Malware Original (new tab)
spiceworks.com · Web page · Published 9 Dec
Digital certificate explained: Trust, PKI, and internet security
A digital certificate is defined as a digital document, which proves the authenticity of a public key that is used to encrypt an online asset — i.e., email communications, a document, a website, or a software application. This article explains how digital…
Original (new tab)
Netcraft · Web page · Published 3 Aug
Threat Actors are Finding Their Way into Your AI Summaries
AI summaries have become ubiquitous in the modern search engine. They are often the first result that users see and helpfully contain links alongside their authoritatively worded answers. However, these answer engines are fallible, and their responses could…
AI Original (new tab)
rogue.security · Web page · Published 29 Jun
Gaslight's prompt injection against malware analysis
Malware AI Original (new tab)
Mandiant (Google) · Web page · Published 23 Mar
M-Trends 2026: Data, Insights, and Strategies From the Frontlines
Every year, the cyber threat landscape forces defenders to adapt to evolving adversary tactics, techniques, and procedures (TTPs). In 2025, Mandiant observed a clear divergence in adversary pacing that closely aligns with the trends we have been documenting…
Original (new tab)
Dark Reading · Web page · Published 10 Dec
ClickFix Style Attack Uses Grok, ChatGPT for Malware Delivery
A new attack uses SEO poisoning and popular AI models to deliver infostealer malware, all while leveraging legitimate domains. ClickFix attacks have gained significant popularity over the past year, using otherwise benign CAPTCHA-style prompts to lure users…
Malware AI Original (new tab)
olostep.com · Web page · Published 20 Mar
How to Bypass CAPTCHA Without Breaking Your Scraper
You are scraping a critical target, and suddenly, your pipeline hits a wall: a CAPTCHA. If you are wondering how to bypass CAPTCHA, you are asking the wrong question. Treating CAPTCHA bypass in web scraping as a pure puzzle-solving exercise fails at scale.…
Original (new tab)
Zscaler · Web page · Published 26 Feb
APT37 Ruby Jumper: Air-Gap Attack via Removable Media
ThreatLabz details the Ruby Jumper campaign in the following sections, focusing on the specific malware employed, the deployment methods, and how the final payload is delivered to achieve the ultimate objective. Attack flow The figure below illustrates the…
State-sponsored Original (new tab)
threatconnect.com · Web page · Published 15 Dec
Infrastructure Research and Hunting: Boiling the Domain Ocean
The Diamond Model of Intrusion Analysis identifies two main nodes as actor assets that may ultimately interact with a target / victim’s own assets — capabilities and infrastructure. But while “exploitation” is usually considered something the adversary does,…
Vulnerabilities Original (new tab)
zenity.io · Web page · Published 6 Aug
Attackers Target Agents via The Skill Supply Chain
An active malware campaign used typosquatted skills, trojanized packages, and remote loaders to target users of popular AI tools. TL;DR We disrupted an active malware campaign targeting agents through typosquatted skills. It targets users of popular AI tools…
Malware Supply chain AI Original (new tab)
opswat.com · Web page · Added 14 Oct
Why can small file changes bypass the Antivirus detection? - MetaDefender Core
Was this page helpful? Next to read: On This Page Knowledge Base Knowledge Base Configuration and Settings Errors and Troubleshooting What can I do when MetaDefender Core (Windows) has an insufficient disk space error? Why is MetaDefender Core unable to…
Original (new tab)
Citizen Lab · Web page · Added 14 Oct
Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords
Keir Giles, a prominent expert on Russian information operations, was targeted with a sophisticated and personalized novel social engineering attack. The attacker took extensive measures to avoid raising Mr. Giles’ suspicions, and deceived him into creating…
State-sponsored Phishing Original (new tab)
startupdefense.io · Web page · Added 14 Oct
Exfiltration Over Symmetric Encrypted Non-C2 Protocol (T1048.001)
Adversaries may steal data by exfiltrating it over a symmetrically encrypted network protocol other than that of the existing command and control channel. The data may also be sent to an alternate network location from the main command and control server.…
Original (new tab)

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.